Data distribution path verification

1. A method of verifying a data path, the method comprising:

receiving, by one or more processors, data and a second path-metadata including a first path-metadata,

the first path-metadata being generated by an originating entity and including a first digital signature associated with the originating entity made on a pair including:

a first entity identifier that is associated with a first receiving entity that receives the data and the first path-metadata from the originating entity, and

data-specific metadata uniquely associated with the data, and

the second path-metadata including a second digital signature associated with the first receiving entity made on the pair including:

the first path-metadata, and

a second entity identifier that is associated with a second receiving entity that receives the data and the second path-metadata from the first receiving entity; and

verifying, by the one or more processors, that the data was communicated by the originating entity to the first receiving entity and from the first receiving entity to the second receiving entity based on the first entity identifier of the first path-metadata, the second entity identifier of the second path-metadata, the first digital signature of the first path-metadata, and the second digital signature of the second path-metadata.

2. The method of claim 1 , wherein:

the first entity identifier is associated with a public key of the first receiving entity; and

the second entity identifier is associated with a public key of the second receiving entity.

3. The method of claim 1 , wherein the verifying is further based on a first digital certificate associated with the originating entity and a second digital certificate associated with the first receiving entity.

4. The method of claim 1 , wherein:

the first digital signature is based on a private key associated with the originating entity; and

the second digital signature is based on a private key associated with the first receiving entity.

5. The method of claim 1 , wherein the data is structured according to a redactable signature scheme.

6. The method of claim 1 , wherein the data is associated with a demand response related to energy consumption.

7. The method of claim 1 , further comprising:

determining whether one or more of the first receiving entity and the second receiving entity are intended recipients of the data based on one or more of the first path-metadata, the second path-metadata, the first digital signature, and the second digital signature; and

rejecting the data when it is determined that one or more of the first receiving entity and the second receiving entity are not intended recipients of the data.

8. The method of claim 1 , wherein the verifying includes calculating data-specific metadata from the received data.

9. A method of path verification, the method comprising:

receiving, by a first receiving entity from an originating entity, data and first path-metadata, the first path-metadata being generated by the originating entity and including a first digital signature associated with the originating entity made on a pair including

the first entity identifier that is associated with the first receiving entity, and

data-specific metadata uniquely associated with the data;

signing by the first receiving entity, with a second digital signature associated with the first receiving entity, a pair including:

the first path-metadata, and

a second entity identifier that is associated with a second receiving entity; and

communicating, by the first receiving entity to the second receiving entity, the data and the pair including the first path-metadata and the second entity identifier that is signed by the second digital signature.

10. The method of claim 9 , wherein:

the first entity identifier is associated with a public key of the first receiving entity;

the second entity identifier is associated with a public key of the second receiving entity;

the first digital signature is based on a private key associated with the originating entity; and

the second digital signature is based on a private key associated with the first receiving entity.

11. The method of claim 9 , wherein the communicating allows for verification by the second receiving entity that the data was communicated by the originating entity to the first receiving entity and communicated from the first receiving entity to the second receiving entity based on the first path-metadata, the second path-metadata, the first digital signature, and the second digital signature.

12. The method of claim 9 , wherein the data is structured according to a redactable signature scheme.

13. The method of claim 9 , wherein the data is associated with a demand response related to energy consumption.

14. A processor configured to execute computer instructions to cause a computing system to perform operations for verifying a data path, the operations comprising:

receiving data and a second path-metadata including a first path-metadata,

the first path-metadata being generated by an originating entity and including a first digital signature associated with the originating entity made on a pair including:

a first entity identifier that is associated with a first receiving entity that receives the data and the first path-metadata from the originating entity, and

data-specific metadata uniquely associated with the data, and

the second path-metadata including a second digital signature associated with the first receiving entity made on the pair including:

the first path-metadata, and

a second entity identifier that is associated with a second receiving entity that receives the data and the second path-metadata from the first receiving entity; and

verifying that the data was communicated by the originating entity to the first receiving entity and from the first receiving entity to the second receiving entity based on the first entity identifier of the first path-metadata, the second entity identifier of the second path-metadata, the first digital signature of the first path-metadata, and the second digital signature of the second path-metadata.

15. The processor of claim 14 , wherein the verifying is further based on a first digital certificate associated with the originating entity and a second digital certificate associated with the first receiving entity.

16. The processor of claim 14 , wherein the data is structured according to a redactable signature scheme.

17. The processor of claim 14 , wherein the operations further comprise:

determining whether one or more of the first receiving entity and the second receiving entity are intended recipients of the data based on one or more of the first path-metadata, the second path-metadata, the first digital signature, and the second digital signature; and

rejecting the data when it is determined that one or more of the first receiving entity and the second receiving entity are not intended recipients of the data.

18. The processor of claim 14 , wherein the verifying includes calculating data-specific metadata from the received data.

19. The processor of claim 14 , wherein:

the first entity identifier is associated with a public key of the first receiving entity; and

the second entity identifier is associated with a public key of the second receiving entity.

20. The processor of claim 14 , wherein:

the first digital signature is based on a private key associated with the originating entity; and

the second digital signature is based on a private key associated with the first receiving entity.