High performance distributed system of record with cryptographic service support

Patent metadata

Field	Value
Publication number	US-12549332-B2
Application number	US-202318121470-A
Country	US
Kind code	B2
Filing date	Mar 14, 2023
Priority date	Dec 26, 2017
Publication date	Feb 10, 2026
Grant date	Feb 10, 2026

Abstract

A high-performance distributed ledger and transaction computing network fabric over which large numbers of transactions (involving the transformation, conversion or transfer of information or value) are processed concurrently in a scalable, reliable, secure and efficient manner. In one embodiment, the computing network fabric or “core” is configured to support a distributed blockchain network that organizes data in a manner that allows communication, processing and storage of blocks of the chain to be performed concurrently, with little synchronization, at very high performance and low latency, even when the transactions themselves originate from distant sources. This data organization relies on segmenting a transaction space within autonomous but cooperating computing nodes that are configured as a processing mesh. Each computing node typically is functionally-equivalent to all other nodes in the core. The nodes operate on blocks independently from one another while still maintaining a consistent and logically-complete view of the blockchain as a whole. According to another feature, secure transaction processing is facilitated by storing cryptographic key materials in secure and trusted computing environments associated with the computing nodes to facilitate construction of trust chains for transaction requests and their associated responses.

First claim

Having described our invention, what is claimed is as follows:

1 . A method, comprising:
configuring a set of computing elements to receive and process messages into a blockchain, the computing elements organized as a set of computing nodes, wherein each computing node has associated therewith a trusted computing environment, the trusted computing environment storing private cryptographic key material, the private cryptographic key material having associated public cryptographic key material, wherein the associated public cryptographic key material for each of the set of computing nodes is accessible from a Public Key Infrastructure (PKI); for a block to be added to the blockchain, associating ordered segments of the block within respective computing nodes, wherein a segment of the block comprises one or more transactions that are unique to the segment; and processing the block into the blockchain using the ordered segments and the Public Key Infrastructure (PKI); wherein during the processing:
in association with a block mining operation, a first computing node uses first private key material stored in its associated trusted computing environment to generate a first digital signature indicating that the first computing node has mined the block, the first computing node including the first digital signature in the block and transmitting the block to each of a set of second computing nodes;
in association with a block verification operation and using at least the associated public cryptographic key material of the first computing node accessed from the Public Key Infrastructure, each second computing node of the set of second computing nodes uses second private key material stored in its associated trusted computing environment to generate a second digital signature indicating that the second computing node has verified the block and an authenticity of the first computing node as a miner; and
each second computing node of the set of second computing nodes that generates the second digital signature broadcasts the generated second digital signature to one or more other of the set of second computing nodes for a consensus operation.

2 . The method as described in claim 1 , wherein a given transaction is associated with a first transaction format that is uniquely associated with the blockchain, and wherein the given transaction is initiated upon receipt of a transaction request that is in a second transaction format distinct from the first transaction format.

3 . The method as described in claim 2 , wherein the second transaction format is an ISO 8583 transaction format, and the transaction request is an ISO 8583 transaction request.

4 . The method as described in claim 3 , wherein a chain of trust spans the ISO 8583 transaction request, an associated blockchain transaction, a blockchain receipt corresponding to the blockchain transaction, and an ISO 8583 transaction response.

5 . The method as described in claim 2 wherein the transaction request is received from an electronic wallet.

6 . The method as described in claim 5 wherein the electronic wallet is associated with an edge server in an overlay network.

7 . The method as described in claim 1 wherein the private cryptographic key material is a private key.

8 . The method as described in claim 1 wherein the private cryptographic key material is a private key having the associated public cryptographic key material, the associated public cryptographic key material being used to lock an Unspent Transaction Output (UTXO) created by a given transaction.

9 . The method as described in claim 8 wherein the associated public cryptographic key material is received from an electronic wallet together with an amount, wherein the private key is used to digitally sign data associated with the given transaction and to return a resulting digital signature to the electronic wallet.

10 . The method as described in claim 8 further including storing the given transaction in the blockchain.

Assignees

• Akamai Tech Inc
• Akami Tech Inc

Inventors

• Carver David C
• Champagne Andrew F
• Mallikarjuna Ramanath
• Houman Thomas

Classifications

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/12

  Transmitting and receiving encryption devices synchronised or initially set up in a particular manner · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/3273

  for mutual authentication (network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869) · CPC title