Trustworthy data exchange using distributed databases

Patent metadata

Field	Value
Publication number	US-11038674-B2
Application number	US-201916526173-A
Country	US
Kind code	B2
Filing date	Jul 30, 2019
Priority date	May 31, 2017
Publication date	Jun 15, 2021
Grant date	Jun 15, 2021

Abstract

The present disclosure relates to a trustworthy data exchange. Embodiments include receiving, from a device, a query, wherein the query comprises a question. Embodiments include identifying particular information related to the query. Embodiments include receiving credentials from a user for retrieving the particular information related to the query. Embodiments include retrieving, using the credentials, the particular information related to the query from one or more data repositories that are part of a distributed database comprising an immutable data store that maintains a verifiable history of changes to information stored in the distributed database. Embodiments include determining, based on the particular information related to the query, an answer to the query. Embodiments include providing the answer to the device.

First claim

What is claimed is:

1. A computer-implemented method for a trustworthy data exchange, comprising:
receiving, from a device, a query, wherein the query comprises a question;
identifying particular information related to the query;
receiving credentials from a user for retrieving the particular information related to the query;
retrieving, using the credentials, the particular information related to the query from one or more data repositories storing data verified by a trusted authority, wherein the one or more data repositories are part of a distributed database comprising an immutable data store that maintains a verifiable history of changes to information stored in the distributed database;
determining, based on the particular information related to the query, an answer to the query; and
providing the answer to the device, wherein the answer indicates that the answer is based upon information certified by the trusted authority.

2. The computer-implemented method of claim 1 , wherein the query is received by capturing a bar code displayed on the device.

3. The computer-implemented method of claim 1 , wherein providing the answer to the device comprises:
displaying the answer to the user,
prompting the user to approve providing the answer to the device, and
upon receiving user approval, transmitting the answer to the device.

4. The computer-implemented method of claim 1 , further comprising:
establishing a shared secret with the device, wherein providing the answer is based on establishing the shared secret.

5. The computer-implemented method of claim 1 , wherein the query and the answer are exchanged with the device within a trusted environment in which communications with the device are assumed to be authentic.

6. The method of claim 1 , wherein the particular information comprises a dependency relationship with additional information stored in the one or more data repositories.

7. The method of claim 6 , further comprising resolving the dependency relationship based on the additional information prior to retrieving the particular information related to the query from the one or more data repositories.

8. A system, comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the system to perform a method for a trustworthy data exchange, the method comprising:
receiving, from a device, a query, wherein the query comprises a question;
identifying particular information related to the query;
receiving credentials from a user for retrieving the particular information related to the query;
retrieving, using the credentials, the particular information related to the query from one or more data repositories storing data verified by a trusted authority, wherein the one or more data repositories are part of a distributed database comprising an immutable data store that maintains a verifiable history of changes to information stored in the distributed database;
determining, based on the particular information related to the query, an answer to the query; and
providing the answer to the device, wherein the answer indicates that the answer is based upon information certified by the trusted authority.

9. The system of claim 8 , wherein the query is received by capturing a bar code displayed on the device.

10. The system of claim 8 , wherein providing the answer to the device comprises:
displaying the answer to the user,
prompting the user to approve providing the answer to the device, and
upon receiving user approval, transmitting the answer to the device.

11. The system of claim 8 , wherein the method further comprises:
establishing a shared secret with the device, wherein providing the answer is based on establishing the shared secret.

12. The system of claim 8 , wherein the query and the answer are exchanged with the device within a trusted environment in which communications with the device are assumed to be authentic.

13. The system of claim 8 , wherein the particular information comprises a dependency relationship with additional information stored in the one or more data repositories.

14. The system of claim 13 , wherein the method further comprises resolving the dependency relationship based on the additional information prior to retrieving the particular information related to the query from the one or more data repositories.

15. A non-transitory computer-readable medium comprising instructions that, when executed by one or more processors of a computing system, cause the computing system to perform a method for a trustworthy data exchange, the method comprising:
receiving, from a device, a query, wherein the query comprises a question;
identifying particular information related to the query;
receiving credentials from a user for retrieving the particular information related to the query;
retrieving, using the credentials, the particular information related to the query from one or more data repositories storing data verified by a trusted authority, wherein the one or more data repositories are part of a distributed database comprising an immutable data store that maintains a verifiable history of changes to information stored in the distributed database;
determining, based on the particular information related to the query, an answer to the query; and
providing the answer to the device, wherein the answer indicates that the answer is based upon information certified by the trusted authority.

16. The non-transitory computer-readable medium of claim 15 , wherein the query is received by capturing a bar code displayed on the device.

17. The non-transitory computer-readable medium of claim 15 , wherein providing the answer to the device comprises:
displaying the answer to the user,
prompting the user to approve providing the answer to the device, and
upon receiving user approval, transmitting the answer to the device.

18. The non-transitory computer-readable medium of claim 15 , wherein the method further comprises: establishing a shared secret with the device, wherein providing the answer is based on establishing the shared secret.

19. The non-transitory computer-readable medium of claim 15 , wherein the particular information comprises a dependency relationship with additional information stored in the one or more data repositories.

20. The non-transitory computer-readable medium of claim 19 , wherein the method further comprises resolving the dependency relationship based on the additional information prior to retrieving the particular information related to the query from the one or more data repositories.

Assignees

• Intuit Inc

Inventors

• Scott Glenn
• Gabriel Michael R
• Lingampally Parikshit
• Meike Roger
• Panchevre Ian Maya

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L63/0407

  wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title