IP Library › Granted Patent US 10,469,460
Granted Patent B2
US 10,469,460 · App. 15/489,087 · Granted Nov 5, 2019

Data sharing in a blockchain-enabled trust domain

Inventors: Gonzalo Salgueiro (Raleigh, NC); Chidambaram Arunachalam (Cary, NC); Felipe Ignacio Garrido (Raleigh, NC)
Assignee: Cisco Technology, Inc.
H04L63/0428H04L9/3239H04L65/1083H04L65/403H04L65/4023H04L67/22H04L63/062H04L63/101H04L2209/38
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,469,460
App. No.
15/489,087
Granted
Nov 5, 2019
Kind
B2
Abstract

One or more servers store data defining a trust domain among a plurality of entities that participate in supporting a multimedia communication session, each of the plurality of entities having at least one network device that is involved in handling traffic or control signaling for the multimedia communication session. The one or more servers receive from one or more network devices associated with each of the plurality of entities session data generated by the respective network devices in supporting the multimedia communication session. The one or more servers log the session data received from the network devices of the plurality of entities of the trust domain as a blockchain transaction, and share logged session data with one or more devices associated with at least one of the plurality of entities of the trust domain.

Claims (67)

1. A method comprising:

at one or more servers, storing data defining a trust domain among a plurality of entities that participate in supporting a multimedia communication session, each of the plurality of entities having at least one network device that is involved in handling traffic or control signaling for the multimedia communication session;

transmitting, by the one or more servers, a unique private key for encrypting session data to the one or more of the network devices to enable sharing of the session data, wherein the session data is generated by the one or more of the network devices in supporting the multimedia communication session;

receiving the session data at the one or more servers from the one or more of the network devices;

logging the session data received from the one or more of the network devices as transactions in a blockchain to generate logged session data; and

sharing, by the one or more servers, the logged session data with at least one of the plurality of entities.

2. The method of claim 1 , further comprising:

generating, by the one or more servers, the unique private key.

3. The method of claim 2 , wherein:

the session data includes public data and private data for the multimedia communication session; and

the private data is encrypted with the unique private key to generate encrypted private data.

4. The method of claim 3 , wherein the logged session data includes logged session data associated with a session identifier for the multimedia communication session, and wherein sharing includes:

receiving a request, at the one or more servers, for access to the logged session data;

determining whether the request is authorized by the trust domain;

if the request is not authorized by the trust domain, rejecting the request; and

if the request is authorized by the trust domain, retrieving the logged session data associated with the session identifier for the multimedia communication session.

5. The method of claim 4 , further comprising:

forwarding the public data based on the request if the request is authorized only to access the public data; and

forwarding the public data and the encrypted private data of the logged session data based on the request if the request is authorized to access the private data.

6. The method of claim 3 , wherein the public data includes one or more of a session identifier, one or more error codes, or error texts.

7. The method of claim 3 , wherein the private data includes one or more of user identities, device identities, Internet Protocol addresses, media capabilities, or session type information.

8. An apparatus comprising:

a communication interface that enables network communications;

a processor; and

a memory to store instructions executable by the processor, wherein the processor is configured to execute the instructions to:

store data defining a trust domain among a plurality of entities that participate in supporting a multimedia communication session, each of the plurality of entities having at least one network device that is involved in handling traffic or control signaling for the multimedia communication session;

transmit a unique private key for encrypting session data to the one or more of the network devices to enable sharing of the session data, wherein the session data is generated by the one or more of the network devices in supporting the multimedia communication session;

receive the session data from the one or more of the network devices;

log the session data received from the one or more of the network devices as transactions in a blockchain to generate logged session data; and

share the logged session data with at least one of the plurality of entities.

9. The apparatus of claim 8 , wherein the processor is further configured to:

generate the unique private key.

10. The apparatus of claim 9 , wherein:

the session data includes public data and private data for the multimedia communication session; and

the private data is encrypted with the unique private key to generate encrypted private data.

11. The apparatus of claim 10 , wherein the logged session data includes logged session data associated with a session identifier for the multimedia communication session, and wherein the processor is configured to share by:

receiving a request for access to the logged session data;

determining whether the request is authorized by the trust domain;

if the request is not authorized by the trust domain, rejecting the request; and

if the request is authorized by the trust domain, retrieving the logged session data associated with the session identifier for the multimedia communication session.

12. The apparatus of claim 11 , wherein the processor is further configured to:

forward the public data based on the request if the request is authorized only to access the public data; and

forward the public data and the encrypted private data of the logged session data based on the request if the request is authorized to access the private data.

13. The apparatus of claim 10 , wherein the public data includes one or more of a session identifier, one or more error codes, or error texts.

14. The apparatus of claim 10 , wherein the private data includes one or more of user identities, device identities, Internet Protocol addresses, media capabilities, or session type information.

15. A non-transitory computer-readable storage media encoded with software comprising computer executable instructions which, when executed by a processor of an apparatus, cause the processor to perform operations including:

storing data defining a trust domain among a plurality of entities that participate in supporting a multimedia communication session, each of the plurality of entities having at least one network device that is involved in handling traffic or control signaling for the multimedia communication session;

transmitting a unique private key for encrypting session data to the one or more of the network devices to enable sharing of the session data, wherein the session data is generated by the one or more of the network devices in supporting the multimedia communication session;

receiving the session data from the one or more of the network devices;

logging the session data received from the one or more of the network devices as transactions in a blockchain to generate logged session data; and

sharing the logged session data with at least one of the plurality of entities.

16. The non-transitory computer-readable storage media of claim 15 , wherein the instructions further cause the processor to perform operations including:

generating the unique private key.

17. The non-transitory computer-readable storage media of claim 16 , wherein:

the session data includes public data and private data for the multimedia communication session; and

the private data is encrypted with the unique private key to generate encrypted private data.

18. The non-transitory computer-readable storage media of claim 17 , wherein the logged session data includes logged session data associated with a session identifier for the multimedia communication session, and wherein the instructions that cause the processor to share include instructions that cause the processor to perform operations including:

receiving a request for access to the logged session data;

determining whether the request is authorized by the trust domain;

if the request is not authorized by the trust domain, rejecting the request; and

if the request is authorized by the trust domain, retrieving the logged session data associated with the session identifier for the multimedia communication session.

19. The non-transitory computer-readable storage media of claim 18 , wherein the instructions further cause the processor to perform operations including:

forwarding the public data based on the request if the request is authorized only to access the public data; and

forwarding the public data and the encrypted private data of the logged session data based on the request if the request is authorized to access the private data.

20. The non-transitory computer-readable storage media of claim 17 , wherein:

the public data includes one or more of a session identifier, one or more error codes, or error texts; and

the private data includes one or more of user identities, device identities, Internet Protocol addresses, media capabilities, or session type information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 17, 2017
From: SALGUEIRO, GONZALO; ARUNACHALAM, CHIDAMBARAM; GARRIDO, FELIPE IGNACIO
To: CISCO TECHNOLOGY, INC.
Reel/Frame 042029/0937 →
Continuity (1)
Related Publication 20180302215A1 · Oct 18, 2018