Dynamically managing exchanges of data using a distributed ledger and homomorphic commitments

Patent metadata

Field	Value
Publication number	US-2020052903-A1
Application number	US-201816057791-A
Country	US
Kind code	A1
Filing date	Aug 7, 2018
Priority date	Aug 7, 2018
Publication date	Feb 13, 2020
Grant date	—

Abstract

The disclosed exemplary embodiments include computer-implemented systems, apparatuses, and processes that dynamically manage exchanges of data using a cryptographically secure distributed ledger and homomorphic commitments. For example, and in response to an occurrence of a triggering event, an apparatus may obtain parameter values that characterize the data exchange, first commitment values representative of the parameter values, and a first digital signature. In response to a verification of the first digital signature, the apparatus may apply a second digital signature to commitment data that includes the first commitment values and a second commitment value representative of the first digital signature. The apparatus may transmit a signal that includes the commitment data and the second digital signature to a computing system, which generates an element of distributed ledger that includes the commitment data and the second digital signature in response to a verification of the second digital signature.

First claim

What is claimed is:

1 . An apparatus, comprising:
a communications unit; a storage unit storing instructions; and at least one processor coupled to the communications unit and the storage unit, the at least one processor being configured to execute the instructions to:
obtain information associated with an exchange of data, the data exchange being capable of initiation by the apparatus in response to an occurrence of a triggering event, and the information comprising parameter values that characterize the data exchange, first commitment values representative of the parameter values, and a first digital signature applied to the parameter values and the first commitment values;
in response to a verification of the first digital signature, store the information within a portion of the storage unit and apply a second digital signature to commitment data that includes the first commitment values and a second commitment value representative of the first digital signature; and
generate and transmit, via the communications unit, a first signal that includes the commitment data and the second digital signature to a computing system, the first signal comprising additional information that causes the computing system to execute instructions included within a distributed ledger, and the executed instructions causing the computing system to perform operations that, in response to a verification of the second digital signature, generate an element of distributed ledger that includes the commitment data and the second digital signature.

2 . The apparatus of claim 1 , wherein:
the at least one processor is further configured to receive, via the communications unit, a second signal that includes the information from a device associated with the data exchange, the device being configured to compute each of the first commitment values based on a corresponding one of the parameter values and a corresponding first random number; and the information further comprises the first random numbers associated with the first commitment values, the first digital signature being applied to the parameter values, the first commitment values, and the first random numbers.

3 . The apparatus of claim 2 , wherein the at least one processor is further configured to:
compute second commitment values based on corresponding ones of the parameter values and the first random numbers; establish a consistency between the first commitment values and corresponding ones of the second commitment values; and in response to the verification of the first digital signature, and in response to the established consistency, store the information within the portion of the storage unit and apply the second digital signature to the commitment data.

4 . The apparatus of claim 2 , wherein the at least one processor is further configured to:
compute the second commitment value based on the first digital signature and a second random number; and perform operations that store the second commitment value and the second random number within the portion of the storage unit.

5 . The apparatus of claim 4 , wherein at least one of the first or second commitment values correspond to a homomorphic Pedersen commitment value.

6 . The apparatus of claim 1 , wherein:
the information further comprises a hash value representative of a document associated with the data exchange; and the at least one processor is further configured to:
apply the second digital signature to the commitment data and to the hash value; and
generate and transmit, via the communications unit, a second signal that includes the commitment data, the hash value, and the second digital signature to the computing system, the executed instructions causing the computing system to perform operations that, in response to a verification of the second digital signature, generate the additional element of the distributed ledger that includes the commitment data, the hash value, and the second digital signature.

7 . The apparatus of claim 1 , wherein the second digital signature corresponds to a digital ring signature.

8 . The apparatus of claim 1 , wherein the executed instructions further cause the computing system to:
verify the second digital signature and determine that a subset of the first commitment values satisfy a consistency condition; and in response to the verification of the second digital signature, and in response to the determination that the subset of the first commitment values satisfy the consistency condition, generate the additional element of the distributed ledger that includes the commitment data and the second digital signature.

9 . The apparatus of claim 1 , wherein:
the obtained information further comprises permissioning information generated by a first device associated with the data exchange, the permissioning information comprising an identifier of a second device and data specifying at least one of an access permission or an operational permission granted to the second device by the first device; and in response to a verification of the first digital signature, the at least one processor is further configured to perform operations that store the permissioning information within the portion of the storage unit.

10 . The apparatus of claim 9 , wherein the at least one processor is further configured to:
receive, via the communication unit, a second signal from the second device, the second signal comprising a request to an initiate an exchange of data, and the request comprising an identifier of the second device; load the permissioning information from the storage unit, and based on the permissioning information and the second device identifier, establish a permission of the second device to request the initiation of the data exchange, the established permission being granted to the second device by the first device; and in response to the established permission, perform operations that verify the occurrence of the triggering event associated with the data exchange.

11 . The apparatus of claim 10 , wherein the at least one processor is further configured to:
in response to the verification of the occurrence of the triggering event, load the information associated with the data exchange from the storage unit; transmit the information to, and receive a response from, the second device via the communications unit, the response comprising verification data indicative of an accuracy of the transmitted information; and based on the verification data, perform operations that initiate the data exchange in accordance with the parameter values.

12 . The apparatus of claim 10 , wherein:
the triggering event corresponds to a death of a user of the first device; the second signal further comprises documentary data associated with a document that verifies the death of the first user; and the at least one processor is further configured to transmit a request to, and receive an additional response from, an additional computing system associated with the document via the communications unit, the request comprising at least a portion of the documentary data, and the additional response verifying the occurrence of the death of the first user.

13 . A computer-implemented method, comprising:
obtaining, by at least one processor of an apparatus, information associated with an exchange of data, the data exchange being capable of initiation by the apparatus in response to an occurrence of a triggering event, and the information comprising parameter values that characterize the data exchange, first commitment values representative of the parameter values, and a first digital signature applied to the

Assignees

• Toronto Dominion Bank

Inventors

• Lam Brian Andrew
• Shpurov Alexey
• Litani Helena

Classifications

• H04L9/008

  involving homomorphic encryption · CPC title

• H04L9/3239 Primary

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/3218

  using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title