Qualcomm Incorporated

Other

Open Invention Network LLC

Keir Finlow-Bates

Koushik Annapureddy

Jonathan Sean Callan

Joonas Viskari

Florean Curticapean

Joonas V T Viskari

Terry Ngo

Kim Vaarala

Joonas Veikko Taneli Viskari

A method and apparatus is presented for announcing the existence of cryptographic key pairs within a distributed ledger system in which no central trusted authority is available, consisting of sending a key announcement message by a network connected device to other network connected devices over a peer-to-peer network for inclusion in the distributed ledger. Once a valid key announcement message for a public key is included in the ledger, any future transactions that reference an address associated with the public key or other messages concerning said public key are accepted by other network connected devices on the peer-to-peer network and are included in the distributed ledger. If transactions or other messages reference an address not associated with an announced public key, they may be rejected by the peer-to-peer network and may not be included in the distributed ledger.

System and method for announcing cryptographic keys on a blockchain

Identity and access management in computer systems without the need for a central authority is provided. A user may create an identity on a blockchain, and generate a one-time pad of access passwords derived from repeated hashing of a master password and cryptographic salt. The user may publish a last access password from the one-time pad on the blockchain. The user may then provide proof of identify in response to an access challenge by revealing a prior access password from which the last access password is derived, and may receive a session token in response. The publishing of access passwords and receiving of session tokens may be associated with a transfer of tokens or digital credits of commercial value on the blockchain.

Blockchain based identity and access management

A radio frequency identification device, or RFID tag, has an antenna attached to or formed on a microchip. The microchip usually comprises low power fixed or programmable logic and a small quantity of persistent memory. As many RFID tags are powered by radio waves transmitted from an RFID tag reader, the low power fixed or programmable logic is often not capable of performing complex cryptographic calculations required for digital signing to provide one-way authentication of the tag. In the present disclosure a system and method are presented for enabling a low overhead challenge and response using a one-time password pad comprising passwords on the RFID tag and a blockchain to record a use of the passwords. Methods are also disclosed for securely replacing the one-time password pad, and using the RFID tag in combination with a blockchain to provide provenance information for the RFID tag.

Radio frequency identification tag one-way authentication using a one-time password pad and a blockchain

A system and method for ensuring digital integrity of a blockchain is presented. The blockchain is initiated with one or more digital certificates presented in one of an initial set of blocks of the blockchain. One or more of the digital certificates may subsequently be used to sign a hash of a sequence of blocks in the blockchain at regular or semi-regular intervals. If a sequence of consecutive blocks is longer than a predetermined number and does not contain a signature from one or more of the digital certificates of a hash or one or more of the blocks in the sequence, the sequence may be considered not to comprise a part of the blockchain. In other embodiments side blocks may be signed and added to the blockchain.

System and method for maintaining an integrity of a blockchain using digital certificates

A method and apparatus is presented for reaching consensus on adding data to a distributed ledger system in which no central trusted authority is available, comprising sending an announcement message by a network connected device to a plurality of network connected devices over a peer-to-peer network, said message providing an identification of the network connected device using a public key of a public/private key pair, a unique address identifier, and a hash. Subsequently, after a waiting period measured in, for example, time or blocks of data, the network connected device may submit data for inclusion in the distributed ledger. If the announcement message and preceding data in the distributed ledger satisfy a predetermined condition, the plurality of network connected devices may include the data in the distributed ledger. If the network connected device fails to submit the data when the predetermined condition is satisfied, the announcement message may be canceled.

Consensus system and method for adding data to a blockchain

A method and apparatus for location sharing, consisting of sending a location report by a location determining device to a plurality of network enabled devices over a peer-to-peer network, the location determining device being associated with a first digital key pair. A first of the plurality of network enabled devices, associated with a second digital key pair, performs a validation computation on the location report and submits a validation computation result and the location report to a remainder of the plurality of network enabled devices for inclusion in a shared ledger. Including the location report creates commercially-valued credits associated with the public key of the second digital key pair recorded in the shared ledger. A transfer of commercially-valued credits from association with the first public key of the first digital key pair to the public key of the second digital key pair is also recorded in the shared ledger.

Peer-to-peer geolocation system

A data management blockchain and protocol for controlling access to data, in which no central trusted authority is required, is presented. The data management blockchain and protocol comprises an initial announcement of public keys by a plurality of blockchain participants, through which each blockchain participant establishes an identity. Subsequently a first of the plurality of blockchain participants publishes data encrypted with a cryptographic key on the blockchain. A second of the plurality of blockchain participants is assigned as an owner of the data by an authority. Access to the data is granted or revoked to further participants by the second of the plurality of blockchain participants through signed permission messages published on the blockchain, and a corresponding hand-over of the cryptographic key by the first of the plurality of blockchain participants, allowing access to the data. Access to further data may be revoked by changing the cryptographic key used.

Method and system for managing decentralized data access permissions through a blockchain

A method and system is presented for reaching consensus on adding data to and extending the structure or schema of databases synchronized across a distributed ledger or blockchain system, in which no central trusted authority is available, comprising sending an announcement message by a network connected device to a plurality of network connected devices over a network, said message proposing a database schema change or extension. If the announcement message and preceding data in the distributed ledger satisfy predetermined conditions, the plurality of network connected devices may include the data in the distributed ledger, and modify the schema of their databases in a corresponding manner. If data is submitted that requires a structural change to the database before the announcement message has been incorporated in the distributed ledger, the data is rejected by the network and is not included in the distributed ledger.

System and method for enforcing the structure and content of databases synchronized over a distributed ledger

A system and method for provisioning an IoT device with a digital certificate without a need for a central Certificate Authority is presented. A blockchain is initiated, with a root certificate presented in an initial block of the blockchain. Said root certificate is subsequently used to sign an authorized certificate. The IoT device is preloaded with a nonce, and a hash of the nonce signed by an authorized certificate is published on the blockchain. The nonce may then be submitted to the blockchain with a self-signed certificate, the presence of the nonce validating the self-signed certificate. The blockchain provides a final single view of a true state of the digital certificates in the system and their respective authority and validity.

Blockchain based digital certificate provisioning of internet of things devices

A system and method is presented for storing a location on a blockchain of a hash, such as a cryptographic hash, digital fingerprint, or digest, of a digital item, such as a document, file, sound clip, or computer code, within the digital item itself. The blockchain may be used for providing a provenance of the digital item by generating the hash of the digital item and submitting it within a transaction to the blockchain. The system and method presented allow the location of the hash within the blockchain to be embedded within the digital item before said hash is generated and submitted, providing a clear link between a record of the hash and the digital item in question, and reducing the computational and network resources required to verify the provenance of the digital item.

System and method for storing the location on a blockchain of a hash of a digital item within said digital item

A tank for containing e-liquid in an electronic cigarette assembly is disclosed. The tank comprises a cap and a body. The cap is connectable to the body through a screw thread with a specified handedness, and the body is connected to a battery assembly through a second screw thread with an opposite handedness to the screw thread of the cap. A construction of the tank ensures than when opening the cap, the body is not inadvertently unscrewed from the battery, and likewise when removing the body from the battery the cap is not inadvertently unscrewed from the body, thus preventing unintended e-liquid spillage and improving ease of removal of the cap and the body.

Electronic cigarette tank

A method and apparatus are presented for revoking cryptographic keys within a distributed ledger system in which no central trusted authority is available. A key revocation message is sent by a network connected device to other network connected devices over a peer-to-peer network for inclusion in a ledger. In one embodiment the revocation message is signed using a private key of a public/private key pair to be revoked. In another embodiment an authorization for future revocation of the public/private key pair by a plurality of other public/private keys is sent for inclusion in the ledger, and subsequently the key revocation message is signed with one of the private keys of the plurality of other public/private key pairs before sending the key revocation message. Once a valid key revocation message is included in the ledger, any future request to include a message signed by a cryptographic key revoked by the valid key revocation message is rejected.

Growing community of inventors

Kangasala, Finland

Keir Finlow-Bates