Method and system for verifying ownership of a digital asset using a distributed hash table and a peer-to-peer distributed ledger

1. A computer-implemented method of verifying authorized control of a controlled digital asset using a peer-to-peer distributed ledger and a separate storage resource, the method comprising:

determining, from a metadata (M) in a redeem script of a transaction record stored on the peer-to-peer distributed ledger, a hash value (H2) representative of details of the controlled digital asset and a second user public key (PU2) associated with a second user (U2);

determining a second public key (P2) associated with the second user (U2) from an entry retrieved from the separate storage resource using the hash value (H2) as the key of a key-value pair stored on the separate storage resource;

determining a generator value (GV);

determining a second user second public key (P2U2) based on the second user public key (PU2) and the generator value (GV), wherein the second user second public key (P2U2) forms a cryptographic pair with a second user second private key (V2U2);

determining a first user second public key (P2U1) based on a first user public key (PU1) and the generator value (GV), wherein the first user second public key (P2U1) forms a cryptographic pair with a first user second private key (V2U1);

determining a common secret (CS) based on the second user second public key (P2U2) and the first user second private key (V2U1);

encrypting the controlled digital asset with the common secret (CS) to generate an encrypted controlled digital asset, wherein the encrypted controlled digital asset is decrypted by:

determining the common secret (CS) based on the first user second public key (P2U1) and the second user second private key (V2U2); and

decrypting the controlled digital asset with the common secret (CS) to generate a decrypted controlled digital asset;

comparing the second user public key (PU2) and the second public key (P2); and

verifying ownership of the controlled digital asset based on the comparing of the second user public key (PU2) and the second public key (P2).

2. The method of claim 1 , wherein:

the controlled digital asset is a portion of item of software; or

the separate storage resource is a distributed hash table; or

the method further comprises sending, over a communications network:

data (D1) associated with the controlled digital asset;

a first hash value (H1) based on the controlled digital asset; and

a second hash value (H2) based on the controlled digital asset and the first hash value (H1); or

wherein the second hash value (H2) is assigned to a key of a key-value pair and the data (D1) and the first hash value (H1) are assigned to the value in the key-value pair, wherein the value of the key-value pair comprises an identifier indicative of a location of the controlled digital asset; or

comparing the second user public key (PU2) and the second public key (P2) comprises determining whether the second user public key (PU2) and the second public key (P2) match.

3. The method of claim 1 , wherein the controlled digital asset comprises a header and a body.

4. The method of claim 3 , wherein the header comprises a hash value of the body of the controlled digital asset.

5. The method of claim 3 , wherein the header further comprises the hash value (H2) of a data associated with the controlled digital asset or a licence.

6. The method of claim 3 , wherein the body of the controlled digital asset comprises an executable of a portion or item of computer software.

7. The method of claim 6 , wherein before determining the second user public key (PU2), the method comprises encrypting the executable of the computer software.

8. The method of claim 7 , further comprising:

installing the decrypted executable of the computer software on a processing device associated with the second user (U2).

9. The method of claim 8 , further comprising:

determining an activation key (AK) from the second user (U2); and

executing instructions of the decrypted executable of the computer software based on the activation key (AK).

10. A non-transitory machine readable storage medium comprising instructions embodied thereon for a computer software program for verifying ownership of a controlled digital asset for installation using a peer-to-peer distributed ledger and a separate storage resource, the instructions when executed cause a processing device to:

determine, from a metadata (M) in a redeem script of a transaction record stored on the peer-to-peer distributed ledger, a hash value (H2) representative of details of the controlled digital asset and a second user public key (PU2) associated with a second user (U2);

determine a second public key (P2) associated with the second user (U2) from an entry retrieved from the separate storage resource using the hash value (H2) as the key of a key-value pair stored on the separate storage resource;

determine a generator value (GV);

determine a second user second public key (P2U2) based on the second user public key (PU2) and the generator value (GV), wherein the second user second public key (P2U2) forms a cryptographic pair with a second user second private key (V2U2);

determine a first user second public key (P2U1) based on a first user public key (PU1) and the generator value (GV), wherein the first user second public key (P2U1) forms a cryptographic pair with a first user second private key (V2U1);

determine a common secret (CS) based on the second user second public key (P2U2) and the first user second private key (V2U1);

encrypt the controlled digital asset with the common secret (CS) to generate an encrypted controlled digital asset, wherein the encrypted controlled digital asset is decrypted by:

determining the common secret (CS) based on the first user second public key (P2U1) and the second user second private key (V2U2); and

decrypting the controlled digital asset with the common secret (CS) to generate a decrypted controlled digital asset;

compare the second user public key (PU2) and the second public key (P2); and

verify the ownership of the controlled digital asset based on comparing of the second user public key (PU2) and the second public key (P2).

11. A computer system for verifying ownership of a controlled digital asset for installation using a peer-to-peer distributed ledger and a separate storage resource, the computer system comprising a processing device associated with a node on a peer-to-peer network of nodes, configured to:

determine, from a metadata (M) in a redeem script of a transaction record stored on the peer-to-peer distributed ledger, a hash value (H2) representative of details of the controlled digital asset and a second user public key (PU2) associated with a second user (U2);

determine a second public key (P2) associated with the second user (U2) from an entry retrieved from the separate storage resource using the hash value (H2) as the key of a key-value pair stored on the separate storage resource;

determine a generator value (GV);

determine a second user second public key (P2U2) based on the second user public key (PU2) and the generator value (GV), wherein the second user second public key (P2U2) forms a cryptographic pair with a second user second private key (V2U2);

determine a first user second public key (P2U1) based on a first user public key (PU1) and the generator value (GV), wherein the first user second public key (P2U1) forms a cryptographic pair with a first user second private key (V2U1);

determine a common secret (CS) based on the second user second public key (P2U2) and the first user second private key (V2U1);

encrypt the controlled digital asset with the common secret (CS) to generate an encrypted controlled digital asset, wherein the encrypted controlled digital asset is decrypted by:

determining the common secret (CS) based on the first user second public key (P2U1) and the second user second private key (V2U2); and

decrypting the controlled digital asset with the common secret (CS) to generate a decrypted controlled digital asset;

compare the second user public key (PU2) and the second public key (P2); and

verify the ownership of the controlled digital asset based on comparing of the second user public key (PU2) and the second public key (P2).