IP Library Granted Patent US 12676840
Granted Patent B2
US 12676840 · App. 18/784,358 · Granted Jul 7, 2026

Systems and methods for facilitating a double-layer restriction subnet architecture using subnet specific restrictions within data streamed using hierarchical subnet restrictions

Inventors: Aharon Baruch Haber (Tel Aviv, IL); Shobhit Maini (London, GB); Haiping Choo (Marina Bay, SG)
Assignee: Citigroup Technology, Inc.
H04L63/06H04L9/50H04L63/0428
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12676840
App. No.
18/784,358
Granted
Jul 7, 2026
Kind
B2
Abstract

Systems and methods for uses and/or improvements to blockchain and blockchain technology, particularly to provide a scalable solution to the aforementioned security and privacy concerns. As one example, systems and methods are described herein for a double-layer restriction subnet architecture that overcomes the technical limitations of conventional blockchains, whether public or permissioned, and subnets thereof. The double-layer restriction subnet architecture comprises a series of permissioned subnets, which provides both the security/privacy benefits of permissioned blockchains but also the scalability of subnet efficiency.

Claims (66)

1 . A system for facilitating double-layer restriction subnet architectures using subnet specific restrictions, the system comprising:

one or more processors; and

one or more non-transitory, computer-readable mediums comprising instructions that, when executed by the one or more processors, cause operations comprising:

establishing a subnet hierarchy comprising a first subnet, a second subnet, and a third subnet, wherein the first subnet is located at a first level of the subnet hierarchy, wherein the second subnet and the third subnet are located at a second level of the subnet hierarchy, wherein the first subnet streams a first data stream that is subject to a first data restriction to the second subnet and the third subnet, and wherein the first data restriction comprises a first encryption based on a public key for the first subnet such that the first data stream is decryptable with a second subnet's private key and a third subnet's private key;

simultaneously streaming, by the first subnet, a first message in the first data stream to the second subnet and the third subnet;

receiving, at the first subnet, a second message from the second subnet, wherein the second message is subject to a second data restriction, wherein the second message is interpretable by the first subnet, wherein the second message is received via a communication pathway that is separate from the first data stream and specific to the second subnet, and wherein the second data restriction comprises a second encryption based on a second public key for the first subnet such that a second data stream is decryptable with the second subnet's private key; and

simultaneously streaming, by the first subnet, a third message in the first data stream to the second subnet and the third subnet, wherein the third message is further subject to the second data restriction.

2 . A method for facilitating double-layer restriction subnet architectures using subnet specific restrictions, the method comprising:

transmitting, by a first subnet of a subnet hierarchy, a first message, wherein the first message comprises a first data restriction, and wherein the first data restriction comprises a first encryption for the first subnet, and wherein the first encryption is based on a first public key for the first subnet;

receiving, at the first subnet, a second message from a second subnet of the subnet hierarchy in response to the second subnet accessing the first message using a permissioned blockchain access credential; and

transmitting, by the first subnet, a third message, wherein the third message comprises the first data restriction and a second data restriction, wherein the second data restriction comprises a second encryption based on a second public key for the first subnet, and wherein a second restriction key is a private encryption key specific to the second subnet.

3 . The method of claim 2 , wherein receiving, at the first subnet, the second message from the second subnet further comprises:

accessing second content of the second message based on the second restriction key; and

transmitting a notification of a receipt of the second message in a first data stream, wherein the notification is published in the first data stream.

4 . The method of claim 2 , wherein transmitting the third message further comprises:

encrypting a third content of the third message to generate encrypted content; and

transmitting the encrypted content to the second subnet and a third subnet of the subnet hierarchy.

5 . The method of claim 2 , wherein transmitting, by the first subnet, the third message further comprises publishing encrypted data to a permissioned blockchain.

6 . The method of claim 2 , wherein transmitting, by the first subnet, the third message further comprises:

transmitting, to the second subnet, a notification confirming a blockchain action in a third content of the third message; and

executing the blockchain action using a cryptography-based, storage application corresponding to the second subnet.

7 . The method of claim 2 , wherein transmitting, by the first subnet, the third message further comprises:

determining a time delay for receiving a confirmation of a blockchain action being executed; and

determining a delivery time of the third message based on the time delay, wherein a third content comprises a notification confirming the blockchain action.

8 . The method of claim 2 , wherein transmitting, by the first subnet, the third message further comprises:

determining a block requirement for a confirmation of a blockchain action being executed; and

determining a delivery time of the third message based on the block requirement, wherein a third content comprises a notification confirming the blockchain action.

9 . The method of claim 2 , wherein transmitting, by the first subnet, the third message further comprises:

determining a network requirement for a blockchain action being executed on a first cryptographically secure network; and

determining a third content based on the network requirement.

10 . The method of claim 2 , further comprising:

receiving a request from the second subnet to join the subnet hierarchy;

determining an account corresponding to the second subnet;

determining that the account has access to the subnet hierarchy; and

in response to determining that the account has access to the subnet hierarchy, providing a first restriction key to the second subnet.

11 . The method of claim 2 , further comprising:

determining an account corresponding to the second subnet; and

determining the second restriction key that is specific to the second subnet based on the account.

12 . The method of claim 2 , further comprising generating, from the first subnet, a first data stream, wherein the first subnet corresponds to a first level of the subnet hierarchy, and wherein the first data stream is streamed to a first plurality of subnets at a second level of the subnet hierarchy.

13 . The method of claim 2 , wherein transmitting the first message further comprises:

generating a record for a first cryptographically secure network; and

publishing the record on the first cryptographically secure network.

14 . The method of claim 2 , further comprising:

determining a bytecode format of the third message;

selecting a decompiler based on the bytecode format;

decompiling a third content using the decompiler; and

decrypting the third content using the second restriction key.

15 . One or more non-transitory, computer-readable mediums comprising instructions that, when executed by one or more processors, cause operations comprising:

transmitting, by a first oracle of an oracle hierarchy, a first message in a first data stream, wherein the first data stream comprises a first data restriction, and wherein the first data restriction comprises a first encryption for the first oracle based on a first public key for a first subnet;

receiving, at the first oracle, a second message from a second oracle of the oracle hierarchy in response to the second oracle accessing the first message using a permissioned blockchain access credential; and

transmitting, by the first oracle, a third message, wherein the third message comprises the first data restriction and a second data restriction, wherein the second data restriction comprises a second encryption based on a second public key for the first oracle, and wherein a second restriction key is a private encryption key specific to the second oracle.

16 . The one or more non-transitory, computer-readable mediums of claim 15 , wherein receiving, at the first oracle, the second message from the second oracle further comprises:

accessing second content of the second message based on the second restriction key; and

transmitting a notification of a receipt of the second message.

17 . The one or more non-transitory, computer-readable mediums of claim 15 , wherein transmitting the third message in the first data stream further comprises:

encrypting a third content of the third message to generate encrypted content; and

transmitting the encrypted content in the first data stream to the second oracle and a third oracle.

18 . The one or more non-transitory, computer-readable mediums of claim 15 , wherein transmitting, by the first oracle, the third message further comprises publishing encrypted data to a permissioned blockchain.

19 . The one or more non-transitory, computer-readable mediums of claim 15 , wherein transmitting, by the first oracle, the third message in the first data stream further comprises:

transmitting, to the second oracle, a notification confirming a blockchain action in a third content of the third message; and

executing the blockchain action using a cryptography-based, storage application corresponding to the second oracle.

20 . The one or more non-transitory, computer-readable mediums of claim 15 , further comprising:

receiving a request from the second oracle to join the oracle hierarchy;

determining an account corresponding to the second oracle;

determining that the account has access to the oracle hierarchy; and

in response to determining that the account has access to the oracle hierarchy, providing a first restriction key to the second oracle.