Method of non-interactive zero-knowledge crowd verifiable digital contact tracing

Patent metadata

Field	Value
Publication number	US-12033762-B2
Application number	US-202217732071-A
Country	US
Kind code	B2
Filing date	Apr 28, 2022
Priority date	Apr 28, 2022
Publication date	Jul 9, 2024
Grant date	Jul 9, 2024

Abstract

A method of non-interactive zero-knowledge crowd verifiable digital contact tracing, system and devices that provides improved accuracy and/or privacy by improving the validity of digital contact tracing sources. Private information associated with a respective user intended for a receiver is uploaded to a data server. The receiver is notified that the private information has been uploaded to the data server. A proof of the private information is generated using a proof function of a non-interactive zero-knowledge cryptographic protocol and added to a contact tracing blockchain for the respective user. A second blockchain transaction is added in response to verification of the proof by a verifier network using a verification function of the non-interactive zero-knowledge cryptographic protocol and the receiver is be notified.

First claim

The invention claimed is:

1. A method performed by a computing device of non-interactive zero-knowledge crowd verifiable digital contact tracing, comprising:
uploading, from a sending computing device to a data server, private information associated with a respective user, the private information intended for a receiving computing device;
causing the receiving computing device to be notified that the private information has been uploaded to the data server;
generating, by the sending computing device, a proof of the private information using a proof function of a non-interactive zero-knowledge cryptographic protocol, the proof function receiving a proving key, a public input, and the private information as input;
causing a first blockchain record to be added to a contact tracing blockchain for the respective user, the first blockchain record including the proof and the public input; and
in response to verification of the proof by a verifier network using a verification function of the non-interactive zero-knowledge cryptographic protocol:
causing a second blockchain record to be added to a contact tracing blockchain for the respective user, the verification function receiving a verifying key, the public input, and the proof as input, the second blockchain record including an indication the proof has been verified, the verifier network comprising a blockchain network comprising a plurality of nodes; and
causing the receiving computing device to be notified that the proof has been verified.

2. The method of claim 1 , wherein the receiving computing device downloads the private information from the data server in response to the receiving computing device being notified that the proof has been verified.

3. The method of claim 2 , wherein the receiving computing device notifies the sending computing device that the private information has been received in response to the receiving computing device downloading the private information from the data server.

4. The method of claim 1 , further comprising:
causing the receiving computing device to download the private information from the data server in response to the receiving computing device being notified that the proof has been verified.

5. The method of claim 1 , wherein the non-interactive zero-knowledge cryptographic protocol is the Zero-Knowledge Succinct Non-Interactive Argument of Knowledge (ZK-SNARK) cryptographic protocol.

6. The method of claim 5 , wherein the proof function is a ZK-SNARK proof function.

7. The method of claim 5 , wherein the verification function is a ZK-SNARK verification function.

8. The method of claim 1 , further comprising:
generating by a proving computing device the proving key and the verifying key using a key generation function.

9. The method of claim 8 , wherein the key generation function is a ZK-SNARK key generation function.

10. The method of claim 8 , wherein the proving key and the verifying key are generated using a tracing key of the respective user.

11. The method of claim 8 , further comprising:
sending the verifying key from the proving computing device to the verifier network.

12. The method of claim 1 , further comprising:
causing a contact tracing blockchain to be created for a respective user for contact tracing for the respective user on a blockchain public ledger.

13. The method of claim 1 , wherein the contact tracing blockchain is maintained on a blockchain public ledger.

14. The method of claim 13 , wherein the blockchain public ledger is the Ethereum public ledger.

15. The method of claim 1 , wherein the proving key and verifying key are based on a function for verifying the private information and a security parameter.

16. The method of claim 15 , wherein the private information is associated with an event consisting of the respective user being within a proximity threshold of another user (“a close contact”), a positive infection status of the respective user with respect to an infectious disease, or a close contact between the respective user and another user who has tested positive with an infectious disease (“a positive contact”).

17. The method of claim 16 , wherein the public input is a timestamp associated with the event.

18. The method of claim 1 , wherein the private information indicates that the respective user has been within a predetermined proximity threshold of another user (“a close contact”), a positive infection status of the respective user with respect to an infectious disease, or a close contact between the respective user and another user who has tested positive with an infectious disease (“a positive contact”).

19. A computing device, comprising:
one or more processors;
a communication subsystem coupled to the one or more processors;
wherein the one or more processors are configured to:
upload, to a data server, private information associated with a respective user, the private information intended for a receiving computing device;
cause the receiving computing device to be notified that the private information has been uploaded to the data server;
generate a proof of the private information using a proof function of a non-interactive zero-knowledge cryptographic protocol, the proof function receiving a proving key, a public input, and the private information as input;
cause a first blockchain record to be added to a contact tracing blockchain for the respective user, the first blockchain record including the proof and the public input;
in response to verification of the proof by a verifier network using a verification function of the non-interactive zero-knowledge cryptographic protocol:
cause a second blockchain record to be added to a contact tracing blockchain for the respective user, the verification function receiving a verifying key, the public input, and the proof as input, the second blockchain record including an indication the proof has been verified, the verifier network comprising a blockchain network comprising a plurality of nodes; and
cause the receiving computing device to be notified that the proof has been verified.

20. A non-transitory machine-readable medium having tangibly stored thereon executable instructions for execution by one or more processors, wherein the executable instructions, in response to execution by the one or more processors, cause the one or more processors to:
upload, from a sending computing device to a data server, private information associated with a respective user, the private information intended for a receiving computing device;
cause the receiving computing device to be notified that the private information has been uploaded to the data server;
generate, by the sending computing device, a proof of the private information using a proof function of a non-interactive zero-knowledge cryptographic protocol, the proof function receiving a proving key, a public input, and the private information as input;
cause a first blockchain record to be added to a contact tracing blockchain for the respective user, the first blockchain record including the proof and the public input;
in response to verification of the proof by a verifier network using a verification function of the non-interactive zero-knowledge cryptographic protocol:
cause a second blockchain record to be added to a contact tracing blockchain for the respective user, the verification function receiving a verifying key, the public input, and the proof as input, the second blockchain record including an indication the proof has been verified, the verifier netwo

Assignees

• Sun Sheng
• Tong Wen
• Huawei Tech Co Ltd

Inventors

• Sun Sheng
• Tong Wen

Classifications

• H04L9/3218 Primary

  using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• G16H50/80 Primary

  for detecting, monitoring or modelling epidemics or pandemics, e.g. flu · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title