Method and apparatus for blockchain powered integrity protection system

Patent metadata

Field	Value
Publication number	US-10659473-B2
Application number	US-201715808723-A
Country	US
Kind code	B2
Filing date	Nov 9, 2017
Priority date	Nov 9, 2017
Publication date	May 19, 2020
Grant date	May 19, 2020

Abstract

Various embodiments relate to a method and apparatus for using blockchains as an integrity tracking tool for network elements, the method including the steps of receiving, by a blockchain network, a patch request from a patch initiator, validating, by the blockchain network, the patch request and writing the patch request on the blockchain, transmitting, by the blockchain network, the patch request to a network element, receiving, by the blockchain network, a patch report from the network element, and validating, by the blockchain network, the patch report and writing the patch report on the blockchain.

First claim

What is claimed is:

1. A method for using blockchains as an integrity tracking tool for network elements, the method comprising:
receiving, by a blockchain network, a patch request from a patch initiator, the patch request including first hashed information indicative of an expected result of a patch;
validating, by the blockchain network, the patch request and writing the patch request on a blockchain;
transmitting, by the blockchain network, the patch request to a network element;
receiving, by the blockchain network, a patch report from the network element, the patch report including second hashed information indicative of the expected result of the patch applied to the network element;
validating, by the blockchain network, the patch report in accordance with one or more operations, the one or more operations including confirming a match between the first hashed information and the second hashed information; and
writing, by the blockchain network, the patch report on the blockchain.

2. The method for using blockchains as an integrity tracking tool of claim 1 , further comprising: transmitting, by the blockchain network, a previous status of a first instance of a software to be patched in the network element to an audit system.

3. The method for using blockchains as an integrity tracking tool of claim 2 , wherein a patch is transmitted from the patch initiator to the network element.

4. The method for using blockchains as an integrity tracking tool of claim 3 , wherein the network element compares the patch request from the blockchain network to the patch from the patch initiator.

5. The method for using blockchains as an integrity tracking tool of claim 4 , wherein a second instance of the software to be patched is created when the patch request from the blockchain network matches the patch from the patch initiator.

6. The method for using blockchains as an integrity tracking tool of claim 5 , wherein the second instance of the network element applies the patch and generates the patch report.

7. The method for using blockchains as an integrity tracking tool of claim 6 , wherein the second instance of the network element reports to a first instance of the software to be patched network element that the patch is safe.

8. The method for using blockchains as an integrity tracking tool of claim 7 , wherein the patch is applied to the first instance of the network element.

9. The method for using blockchains as an integrity tracking tool of claim 8 , wherein the audit system compares the previous status of the network element to a local current status of the network element.

10. The method for using blockchains as an integrity tracking tool of claim 9 , wherein a warning is transmitted to the patch initiator when the local current status of the network element does not match the previous status of the network element.

11. The method for using blockchains as an integrity tracking tool of claim 1 , wherein the first hashed information in the patch request is indicative of the expected result of the patch and one or more patch dependencies and wherein the second hashed information is indicative of the expected result of the patch and the one or more patch dependencies.

12. The method for using blockchains as an integrity tracking tool of claim 11 , wherein the one or more patch dependencies include one or more prior patches installed in the network element, the blockchain including at least one block storing information indicative of the one or more prior patches.

13. The method for using blockchains as an integrity tracking tool of claim 1 , wherein validating the patch request includes verifying that one or more previous patches specified as prerequisites have been written in a blockchain managed in the blockchain network.

14. The method for using blockchains as an integrity tracking tool of claim 1 , further comprising:
writing a first block on the blockchain, the first block including information indicating the patch request, wherein writing the patch report includes writing a second block on the blockchain, the second block including information indicating the patch report; and
linking the first block and the second block in the blockchain.

15. The method for using blockchains as an integrity tracking tool of claim 14 , wherein the second block includes information linking the patch report in the second block to the patch request in the first block.

16. The method for using blockchains as an integrity tracking tool of claim 15 , wherein at least one of the first block and the second block includes information linking the at least one of the first block and the second block to one or more patch dependencies.

17. The method for using blockchains as an integrity tracking tool of claim 16 , wherein the blockchain includes a third block between the first block and the second block and wherein the third block includes information corresponding to the one or more patch dependencies.

18. An integrity tracking tool for network elements using blockchains, the integrity tracking tool comprising:
a processor and memory of a blockchain network, the processor configured to execute instructions stored in the memory to:
receive, by a full node client, a patch request from a patch initiator, the patch request including first hashed information indicative of an expected result of a patch;
validate, by the full node client, the patch request;
write, onto a blockchain, the patch request;
transmit, by the full node client, the patch request to a network element;
receive, by the full node client, a patch report from the network element, the patch report including second hashed information indicative of the expected result of the patch applied to the network element; and
validate, by the full node client, the patch report in accordance with one or more operations, the one or more operations including confirming a match between the first hashed information and the second hashed information: and write the patch report onto the blockchain.

19. The integrity tracking tool of claim 18 , wherein the processor is configured to: transmit, by the full node client, a previous status of a first instance of a software to be patched in the network element to an audit system.

20. The integrity tracking tool of claim 19 , wherein a patch is transmitted from a blockchain database and a lightweight client of the patch initiator to a lightweight agent of the first instance of the software to be patched in the network element.

21. The integrity tracking tool of claim 20 , wherein the lightweight agent of first instance of the network element compares the patch request from the processor of the blockchain network to the patch from the blockchain database and lightweight client of the patch initiator.

22. The integrity tracking tool of claim 21 , wherein a second instance of the of the software to be patched in the network element is created when the patch request from the processor of the blockchain network matches the patch from the blockchain database and lightweight client of the patch initiator.

23. The integrity tracking tool of claim 22 , wherein the second instance of the network element applies the patch and generates the patch report.

24. The integrity tracking tool of claim 23 , wherein the second instance of the network element reports to the lightweight agent of the first instance of the network element that the patch is safe.

25. The integ

Assignees

• Nokia Solutions & Networks Oy

Inventors

• Signorini Matteo
• Pontecorvi Matteo
• Kok Jan
• Lively Scott
• Godin Maurice

Classifications

• G06F21/645

  using a third party · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04L63/123 Primary

  received data contents, e.g. message integrity · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title