IP Library › Granted Patent US 10,735,450

Granted Patent B2

US 10,735,450 · App. 15/827,952 · Granted Aug 4, 2020

Trust topology selection for distributed transaction processing in computing environments

Inventors: Ned Smith (Beaverton, OR); Rajesh Poornachandran (Portland, OR)

Assignee: Intel Corporation

H04L63/1433 G06F9/466 G06F21/6218 G06F21/64 H04L9/0643 H04L9/3239 H04L63/101 H04L2209/38

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 10,735,450
App. No.: 15/827,952
Granted: Aug 4, 2020
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Example methods, apparatus, systems and articles of manufacture (e.g., non-transitory physical storage media) to provide trust topology selection for distributed transaction processing in computing environments are disclosed herein. Example distributed transaction processing nodes disclosed herein include a distributed transaction application to process a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology. Disclosed example distributed transaction processing nodes also include a trusted execution environment to protect first data associated with a centralized trust topology and to protect second data associated with a diffuse trust topology. Disclosed example distributed transaction processing nodes further include a trust topology selector to selectively configure the distributed transaction application to use the at least one of the centralized trust topology or the diffuse trust topology to process the transaction.

Claims (98)

1. A distributed transaction processing node comprising:

a distributed transaction application to process a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

a trusted execution environment to protect first data associated with a centralized trust topology and to protect second data associated with a diffuse trust topology; and

a trust topology selector at least partially implemented with at least one of circuitry or at least one processor, the trust topology selector to:

determine a first trust value associated with the centralized trust topology;

determine a second trust value associated with the diffuse trust topology;

configure the distributed transaction application to use the centralized trust topology to process the transaction when the first trust value exceeds the second trust value; and

configure the distributed transaction application to use the diffuse trust topology to process the transaction when the second trust value exceeds the first trust value.

2. The distributed transaction processing node of claim 1 , wherein when the first trust value matches the second trust value, the trust topology selector is further to:

configure the distributed transaction application to use the centralized trust topology when a first quality of service value associated with the centralized trust topology exceeds a second quality of service value associated with the diffuse trust topology; and

configure the distributed transaction application to use the diffuse trust topology when the second quality of service value associated with the diffuse trust topology exceeds the first quality of service value associated with the centralized trust topology.

3. The distributed transaction processing node of claim 1 , wherein the trust topology selector is to:

perform peer attestations with other distributed transaction processing nodes based on a whitelist provided by a centralized trust authority; and

report results of the peer attestations to a blockchain associated with the diffuse trust topology to determine whether the distributed transaction processing node is to be isolated from the centralized trust topology.

4. The distributed transaction processing node of claim 1 , wherein the distributed transaction processing node is implemented by at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

5. A distributed transaction processing node comprising:

a distributed transaction application to process a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

a trusted execution environment to protect first data associated with a centralized trust topology and to protect second data associated with a diffuse trust topology; and

a trust topology selector at least partially implemented with at least one of circuitry or at least one processor, the trust topology selector to:

selectively configure the distributed transaction application to use the at least one of the centralized trust topology or the diffuse trust topology to process the transaction;

monitor telemetry data associated with operation of the distributed transaction processing node to determine whether to isolate the distributed transaction processing node from the centralized trust topology; and

configure the distributed transaction application to use the diffuse trust topology in response to determining that the distributed transaction processing node is to be isolated from the centralized trust topology.

6. The distributed transaction processing node of claim 5 , wherein the trust topology selector is to:

perform peer attestations with other distributed transaction processing nodes based on a whitelist provided by a centralized trust authority; and

7. The distributed transaction processing node of claim 5 , wherein the distributed transaction processing node is implemented by at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

8. One or more non-transitory computer readable storage media comprising computer readable instructions which, when executed, cause one or more processors to at least:

execute a distributed transaction application to process a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

implement a trusted execution environment to protect first data associated with a centralized trust topology and to protect second data associated with a diffuse trust topology;

determine a first trust value associated with the centralized trust topology;

determine a second trust value associated with the diffuse trust topology;

configure the distributed transaction application to use the centralized trust topology to process the transaction when the first trust value exceeds the second trust value; and

configure the distributed transaction application to use the diffuse trust topology to process the transaction when the second trust value exceeds the first trust value.

9. The one or more storage media of claim 8 , wherein when the first trust value matches the second trust value, the instructions further cause the one or more processors to:

10. The one or more storage media of claim 8 , wherein the one or more processors are associated with a distributed transaction processing node, and the instructions cause the one or more processors to:

perform peer attestations with other distributed transaction processing nodes based on a whitelist provided by a centralized trust authority; and

11. The one or more storage media of claim 8 , wherein the one or more processors are included in at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

12. One or more non-transitory computer readable storage media comprising computer readable instructions which, when executed, cause one or more processors associated with a distributed transaction processing node to at least:

execute a distributed transaction application to process a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

implement a trusted execution environment to protect first data associated with a centralized trust topology and to protect second data associated with a diffuse trust topology;

selectively configure the distributed transaction application to use the at least one of the centralized trust topology or the diffuse trust topology to process the transaction;

13. The one or more storage media of claim 12 , wherein the instructions cause the one or more processors to:

perform peer attestations with other distributed transaction processing nodes based on a whitelist provided by a centralized trust authority; and

14. The one or more storage media of claim 12 , wherein the one or more processors are included in at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

15. An apparatus to perform trust topology selection for distributed transaction processing, the apparatus comprising:

transaction processing means for processing a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

data protection means for protecting first data associated with a centralized trust topology and for protecting second data associated with a diffuse trust topology; and

topology selection means for selectively configuring whether the at least one of the centralized trust topology or the diffuse trust topology is to be used by the transaction processing means to process the transaction, the topology selection means is further to:

determine a first trust value associated with the centralized trust topology;

determine a second trust value associated with the diffuse trust topology;

configure the transaction processing means to use the centralized trust topology to process the transaction when the first trust value exceeds the second trust value; and

configure the transaction processing means to use the diffuse trust topology to process the transaction when the second trust value exceeds the first trust value.

16. The apparatus of claim 15 , wherein when the first trust value matches the second trust value, the topology selection means is further to:

configure the transaction processing means to use the centralized trust topology when a first quality of service value associated with the centralized trust topology exceeds a second quality of service value associated with the diffuse trust topology; and

configure the transaction processing means to use the diffuse trust topology when the second quality of service value associated with the diffuse trust topology exceeds the first quality of service value associated with the centralized trust topology.

17. The apparatus of claim 15 , wherein the apparatus is associated with a distributed transaction processing node, and the topology selection means is to:

perform peer attestations with other distributed transaction processing nodes based on a whitelist provided by a centralized trust authority; and

18. The apparatus of claim 17 , further including:

means for evaluating the results of the peer attestations reported to the blockchain associated with the diffuse trust topology to determine whether to revalidate whether the distributed transaction processing node is to participate in the centralized trust topology; and

means for provisioning an update whitelist to allow the distributed transaction processing node to resume participation in the centralized trust topology.

19. The apparatus of claim 17 , further including means for evaluating the blockchain associated with the diffuse trust topology to determine effectiveness of an attestation technique used to perform the peer attestations.

20. The apparatus of claim 15 , wherein the apparatus is included in at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

21. An apparatus of to perform trust topology selection for distributed transaction processing associated with a distributed transaction processing node, the apparatus comprising:

transaction processing means for processing a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

data protection means for protecting first data associated with a centralized trust topology and for protecting second data associated with a diffuse trust topology; and

configure the transaction processing means to use the diffuse trust topology in response to determining that the distributed transaction processing node is to be isolated from the centralized trust topology.

22. The apparatus of claim 21 , wherein the topology selection means is to:

perform peer attestations with other distributed transaction processing nodes based on a whitelist provided by a centralized trust authority; and

23. The apparatus of claim 21 , wherein the apparatus is included in at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

24. A method to perform trust topology selection for distributed transaction processing, the method comprising:

executing a distributed transaction application to process a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

implementing a trusted execution environment to protect first data associated with a centralized trust topology and to protect second data associated with a diffuse trust topology;

determining a first trust value associated with the centralized trust topology;

determining a second trust value associated with the diffuse trust topology;

configuring, by executing an instruction with a processor, the distributed transaction application to use the centralized trust topology to process the transaction when the first trust value exceeds the second trust value;

configuring, by executing an instruction with the processor, the distributed transaction application to use the diffuse trust topology to process the transaction when the second trust value exceeds the first trust value; and

when the first trust value matches the second trust value:

configuring the distributed transaction application to use the centralized trust topology when a first quality of service value associated with the centralized trust topology exceeds a second quality of service value associated with the diffuse trust topology; and

configuring the distributed transaction application to use the diffuse trust topology when the second quality of service value associated with the diffuse trust topology exceeds the first quality of service value associated with the centralized trust topology.

25. The method of claim 24 , wherein the processor is included in at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

26. A method to perform trust topology selection for distributed transaction processing associated with a distributed transaction processing node, the method comprising:

executing a distributed transaction application to process a transaction in a computing environment based on at least one of a centralized trust topology or a diffuse trust topology;

implementing a trusted execution environment to protect first data associated with a centralized trust topology and to protect second data associated with a diffuse trust topology; and

selectively configuring, by executing an instruction with a processor, the distributed transaction application to use the at least one of the centralized trust topology or the diffuse trust topology to process the transaction;

monitoring telemetry data associated with operation of the distributed transaction processing node to determine whether to isolate the distributed transaction processing node from the centralized trust topology; and

configuring the distributed transaction application to use the diffuse trust topology in response to determining that the distributed transaction processing node is to be isolated from the centralized trust topology.

27. The method of claim 26 , wherein the transaction is a first transaction, and after the configuring of the distributed transaction application to use the diffuse trust topology, the distributed transaction application is to use the diffuse trust topology to process transactions, including the first transaction, at a slower transaction processing rate than is achievable when using the centralized trust topology for transaction processing.

28. The method of claim 26 , wherein the processor is included in at least one of a mobile phone, a tablet device, a drone or an autonomous vehicle.

Assignments (1)

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 11, 2018

From: SMITH, NED; POORNACHANDRAN, RAJESH

To: INTEL CORPORATION

Reel/Frame 044602/0094 →

Continuity (1)

Related Publication 20190036957A1 · Jan 31, 2019

Cited By (1)

US 12,191,978