High performance distributed system of record with secure interoperability to external systems

Patent metadata

Field	Value
Publication number	US-11483347-B2
Application number	US-201916695521-A
Country	US
Kind code	B2
Filing date	Nov 26, 2019
Priority date	Dec 5, 2018
Publication date	Oct 25, 2022
Grant date	Oct 25, 2022

Abstract

A high-performance distributed ledger and transaction computing network fabric over which large numbers of transactions (involving the transformation, conversion or transfer of information or value) are processed concurrently in a scalable, reliable, secure and efficient manner. In one embodiment, the computing network fabric or “core” is configured to support a distributed blockchain network that organizes data in a manner that allows communication, processing and storage of blocks of the chain to be performed concurrently, with little synchronization, at very high performance and low latency, even when the transactions themselves originate from distant sources. This data organization relies on segmenting a transaction space within autonomous but cooperating computing nodes that are configured as a processing mesh. Each computing node typically is functionally-equivalent to all other nodes in the core. The nodes operate on blocks independently from one another while still maintaining a consistent and logically-complete view of the blockchain as a whole.

First claim

The invention claimed is:

1. A method operative in association with a set of transaction handling computing elements that comprise a network core that receive and process transaction requests into an append-only immutable chain of data blocks, wherein a data block is a collection of transactions, and wherein presence of a transaction recorded within a data block is verifiable via a cryptographic hash, wherein the transaction requests originate from legacy computing infrastructure, comprising:
configuring an overlay network between the legacy computing infrastructure and the network core, the overlay network comprising one or more edge servers that act as entry points for the transaction requests entering the network core, and one or more upstream edge servers from the one or more edge servers acting as the entry points, at least one of the upstream edge servers hosting a wallet service comprising a wallet processor;
configuring Transport Layer Security (TLS)-based mutually-authenticated connections between the plurality of edge servers acting as entry points and the legacy computing infrastructure;
the one or more edge servers acting as entry points receiving the transaction requests that originate in the legacy computing infrastructure, and routing the transaction requests to the wallet service;
the wallet service receiving and validating the transaction requests, and forwarding the validated transaction requests to be recorded on the append-only immutable chain of data blocks;
wherein first cryptographic keying material secures the TLS-based mutually-authenticated connections, and second cryptographic keying material distinct from the first cryptographic keying material secures a given transaction request.

2. The method as described in claim 1 wherein the upstream edge server in the overlay network hosting the wallet service stores keying material in an associated crypto server.

3. The method as described in claim 2 wherein the second cryptographic keying material comprises a JSON Web Token (JWT) key pair generated by the associated crypto server.

4. The method as described in claim 1 further including configuring an Application Programming Interface (API) gateway in association with the plurality of edge servers acting as entry points, wherein the API gateway supports one or more APIs associated with the legacy computing infrastructure.

5. The method as described in claim 1 wherein the network core computing elements host a distributed ledger system.

6. The method as described in claim 1 wherein the append-only immutable chain of data blocks is a blockchain.

7. The method as described in claim 6 wherein a given transaction in the blockchain is digitally-signed and self-verifiable.

8. The method as described in claim 1 wherein inbound connectivity from the network core computing elements to the legacy computing infrastructure, and outbound connectivity from the legacy computing infrastructure to the network core computing elements, are implemented without change to one or more transaction protocols associated with the legacy computing infrastructure.

9. The method as described in claim 1 wherein the TLS-based mutually-authenticated connections provide the legacy computing infrastructure secure and resilient access to the network core computing elements via the overlay network edge servers.

10. The method as described in claim 1 wherein the transaction requests are received from a merchant connector.

11. The method as described in claim 1 wherein the second cryptographic keying material comprises a JSON Web Token (JWT) key pair.

12. The method as described in claim 11 wherein the JWT key pair protects integrity of the given transaction request to maintain a chain of trust between a given merchant connector request and its associated payment network response.

13. The method as described in claim 1 wherein the wallet service is untrusted by the network core.

14. The method as described in claim 1 wherein each of the first and second cryptographic keying material has an associated root of trust.

15. The method as described in claim 1 wherein a given transaction request is an ISO8583 transaction request.

16. The method as described in claim 1 wherein the wallet service and the append-only immutable chain of data blocks comprise a payment network.

Assignees

• Akamai Tech Inc

Inventors

• Erb Samuel
• Roman Mark A
• Oliveira Talmai
• Carver David C

Classifications

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L63/0869

  for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273) · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title