Blockchain folding

Patent metadata

Field	Value
Publication number	US-11729175-B2
Application number	US-201916395003-A
Country	US
Kind code	B2
Filing date	Apr 25, 2019
Priority date	Apr 25, 2019
Publication date	Aug 15, 2023
Grant date	Aug 15, 2023

Abstract

An active distributed ledger may comprise an indication of an inactive permission associated with a user device. An entry comprising such indication added to another distributed ledger that is supplemental to the active distributed ledger. An updated active distributed ledger may be generated that does not comprise the indication of the inactive permission. The updated active distributed ledger may comprise an indication of a new permission associated with the user device. The updated active distributed ledger may be stored on the user device or any other device on a network.

First claim

What is claimed is:

1. A method comprising:
receiving, by a computing device, an indication of a new distributed ledger record entry indicating a new permission associated with a user device;
determining that a distributed ledger record indicates an inactive permission associated with the user device, wherein the distributed ledger record is on a first primary distributed ledger, the first primary distributed ledger stored on the user device;
causing the distributed ledger record to be added to a secondary distributed ledger, the secondary distributed ledger stored on a blockchain network external to the user device; and
generating a second primary distributed ledger, wherein the second primary distributed ledger comprises the new distributed ledger record entry and does not comprise the distributed ledger record, the second primary distributed ledger stored on the user device.

2. The method of claim 1 , wherein the user device comprises at least one of an Internet of Things (IOT) device, a security system device, a home automation device, or a premises management system device.

3. The method of claim 1 , wherein the new permission comprises a permission for at least one computing device to at least one of control, communicate with, or access data stored on the user device.

4. The method of claim 1 , wherein the new permission is based on a received user input.

5. The method of claim 1 , wherein the inactive permission comprises at least one of an expired permission, a revoked permission, or a permission associated with a compromised account.

6. The method of claim 1 , further comprising generating, based on the second primary distributed ledger and the secondary distributed ledger, an original distributed ledger comprising the distributed ledger record indicating the inactive permission and the new distributed ledger record entry.

7. The method of claim 6 , wherein the distributed ledger record indicating the inactive permission comprises an indication of a position of the distributed ledger record in the original distributed ledger; and
wherein the generating the original distributed ledger is based at least on the indication of the position of the distributed ledger record in the original distributed ledger.

8. The method of claim 1 , wherein the generating the second primary distributed ledger comprises determining, based on a plurality of distributed ledger records on the first primary distributed ledger, a hash, wherein the plurality of distributed ledger records does not comprise the distributed ledger record indicating the inactive permission.

9. A device comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the device to:
receive an indication of a new distributed ledger record entry indicating a new permission associated with a user device;
determine that a distributed ledger record indicates an inactive permission associated with the user device, wherein the distributed ledger record is on a first primary distributed ledger, the first primary distributed ledger stored on the user device;
cause the distributed ledger record to be added to a secondary distributed ledger, the secondary distributed ledger stored on a blockchain network external to the user device; and
generate a second primary distributed ledger, wherein the second primary distributed ledger comprises the new distributed ledger record entry and does not comprise the distributed ledger record, the second primary distributed ledger stored on the user device.

10. The device of claim 9 , wherein the user device comprises at least one of an Internet of Things (TOT) device, a security system device, a home automation device, or a premises management system device.

11. The device of claim 9 , wherein the new permission comprises a permission for at least one computing device to at least one of control, communicate with, or access data stored on the user device.

12. The device of claim 9 , wherein the new permission is based on a received user input.

13. The device of claim 9 , wherein the inactive permission comprises at least one of an expired permission, a revoked permission, or a permission associated with a compromised account.

14. The device of claim 9 , wherein the instructions further cause the user device to generate, based on the second primary distributed ledger and the secondary distributed ledger, an original distributed ledger comprising the distributed ledger record indicating the inactive permission and the new distributed ledger record entry.

15. The device of claim 14 , wherein the distributed ledger record indicating the inactive permission comprises an indication of a position of the distributed ledger record in the original distributed ledger; and
wherein the instructions further cause the device to generate the original distributed ledger based at least on the indication of the position of the distributed ledger record in the original distributed ledger.

16. The device of claim 9 , wherein the instructions causing the device to generate the second primary distributed ledger further comprise causing the device to determine, based on a plurality of distributed ledger records on the first primary distributed ledger, a hash, wherein the plurality of distributed ledger records does not comprise the distributed ledger record indicating the inactive permission.

17. A system comprising:
a user device; and
a computing device configured
to:
receive an indication of a new distributed ledger record entry indicating a new permission associated with the user device;
determine that a distributed ledger record indicates an inactive permission associated with the user device, wherein the distributed ledger record is on a first primary distributed ledger, the first primary distributed ledger stored on the user device;
cause the distributed ledger record to be added to a secondary distributed ledger, the secondary distributed ledger stored on a blockchain network external to the user device; and
generate a second primary distributed ledger, wherein the second primary distributed ledger comprises the new distributed ledger record entry and does not comprise the distributed ledger record, the second primary distributed ledger stored on the user device.

18. The system of claim 17 , wherein the user device comprises at least one of an Internet of Things (TOT) device, a security system device, a home automation device, or a premises management system device.

19. The system of claim 17 , wherein the new permission comprises a permission for at least one computing device to at least one of control, communicate with, or access data stored on the user device.

20. The system of claim 17 , wherein the new permission is based on a received user input.

21. The system of claim 17 , wherein the inactive permission comprises at least one of an expired permission, a revoked permission, or a permission associated with a compromised account.

22. The system of claim 17 , the computing device further configured to generate, based on the second primary distributed ledger and the secondary distributed ledger, an original distributed ledger comprising the distributed ledger record indicating the inactive permission and the new distributed ledger record entry.

23. The system of claim 22 , wherein the distributed ledger record indicating the inactive permission comprises an indication of a position of the distributed ledger re

Assignees

• Comcast Cable Comm Llc

Inventors

• Haque Asad
• Davoust Nancy

Classifications

• H04L63/102 Primary

  Entity profiles · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• H04L9/0637

  Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM] · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title