Dfinity Stiftung

Manu Drijvers

Dominic Williams

Gregory Neven

Yvonne-Anne Pignolet

Johan Granström

Timo Hanke

Jens Groth

David Derler

Mahnush Movahedi

Björn Tackmann

Robert Lauko

Andrea Cerulli

Timo Tobias Hanke

Roman Kashitsyn

Stefan Kaestle

Johan GRANSTRÖM

Allen Clement

An aspect of the invention relates to a distributed network comprising a plurality of network nodes. The distributed network is configured to perform a method for reaching a consensus on a sequence of values in an advantageous manner. The method performs consecutive notarization rounds. The notarization rounds comprise steps of creating value proposals to be added to the sequence, communicating the value proposals to a notarization subset of the plurality of nodes and performing a validity check of received value proposals. The notarization rounds may comprise further steps of executing individual notarization signatures on a subset of the value proposals that are valid. The notarization rounds may further comprise performing a consistency check of the value proposals and executing consistency signatures on a subset of the value proposals. The method may further comprise a finality procedure to finalize a value proposal once a predefined finality rule set has been fulfilled.

Distributed network with consensus mechanism

According to an embodiment of a first aspect of the invention, there is provided a distributed network comprising a plurality of subnets. Each of the plurality of subnets comprises a changeable set of nodes. The network is configured to generate for each of the plurality of subnets, by a distributed key generation protocol, an individual static verification key of a public-key signature scheme and a first set of corresponding secret key shares for a first set of nodes of the respective subnet. The network is further configured to redistribute, for each of the plurality of subnets, by a secret-redistribution protocol, the secret key shares of the respective first set of secret key shares to a second set of nodes of the respective subnet, thereby creating a second set of secret key shares corresponding to the same static verification key of the respective subnet. Further aspects of the invention relate to a corresponding computer-implemented method, a node, a computer program product and a software architecture.

Distributed network having a plurality of subnets

Embodiments of the invention relate to a computer-implemented method for generating verification keys of a public-key signature scheme in a distributed network. The method comprises performing, by a subset of the nodes of a first subnetwork of nodes, a first distributed key generation protocol, the first distributed key generation protocol being configured to generate jointly a verification key for the first subnetwork and a plurality of corresponding secret key shares for the nodes of the first subnetwork. The method further comprises a step of performing, for a second subnetwork, by a subset of the plurality of nodes of the first subnetwork, a second distributed key generation protocol, the second distributed key generation protocol being configured to generate jointly a verification key of the second subnetwork and a plurality of corresponding secret key shares for the nodes of the second subnetwork. A further step comprises signing, by a subset of the nodes of the first subnetwork, the verification key of the second subnetwork with a permissible subset of the secret key shares of the nodes of the first subnetwork, thereby generating a joint signature on the verification key of the second subnetwork. Further aspects relate to a distributed network, a node of a distributed network and corresponding computer program products.

Verification key generation in distributed networks

Embodiments of the invention relate to a distributed network. The distributed network comprises a replicated computing cluster and the replicated computing cluster comprises a plurality of nodes. Each of the plurality of nodes of the replicated computing cluster is configured to run a replica and each of the replicas is configured to run one or more computational units. Furthermore, each of the replicas is configured to perform consecutive processing rounds. The consecutive processing rounds comprise a consecutive processing of input blocks in a deterministic and replicated manner and thereby a sequence of round states is computed. Each of the replicas is further configured to perform software upgrades of the replica at handover states of pre-agreed handover rounds of the consecutive processing rounds and to provide, upon request of another replica, via a communication interface that is independent of the software upgrades, a handover package. The handover package is configured to enable an obtainment of the handover state.

Update software replica in a distributed system

According to an embodiment of a first aspect of the invention, there is a distributed network comprising a plurality of network nodes. Each of the plurality of network nodes is linked to a first node identity of a plurality of first node identities. Each of the plurality of first node identities comprises a first verification key of a public-key signature scheme. The distributed network is configured to perform a key shuffling step adapted to perform an unlinkable one-to-one mapping between the plurality of first node identities and a plurality of second node identities. Each of the plurality of second node identities comprises a second verification key of a public-key signature scheme. The distributed network is configured to perform a consensus protocol with a subset of the plurality of second node identities. Further aspects of the invention relate to a corresponding computer-implemented method, a network node and a computer program product.

Distributed network with blinded identities

Growing community of inventors

Zürich, Switzerland

Manu Drijvers