Secure monitoring using block chain
The present disclosure includes apparatuses, methods, and systems for using a local ledger block chain for secure updates. An embodiment includes a memory, and circuitry configured to receive a global block to be added to a local ledger block chain for validating an update for data stored in the memory, where the global block to be added to the local ledger block chain includes a cryptographic hash of a current local block in the local ledger block chain, a cryptographic hash of the data stored in the memory to be updated, where the current local block in the local ledger block chain has a digital signature associated therewith that indicates the global block is from an authorized entity.
1. An apparatus, comprising:
a memory; and
circuitry configured to:
receive identity data, a signature, and a request to enter a location from an entity; and
analyze the request by:
verifying an identity of the entity based on the identity data and the signature;
consulting at least one of a plurality of blocks in a block chain to determine whether data associated with the entity authenticates entry into the location, wherein each of the plurality of blocks includes:
a cryptographic hash of a previous block in the block chain; and
a cryptographic hash of each of the respective plurality of blocks; and
in response to verifying the identity of the entity and authenticating entry into the location, generate a block in the plurality of blocks in the block chain;
wherein:
the plurality of blocks in the block chain are organized in a global block chain and are added to local ledger block chains; and
each of the local ledger block chains are associated with a particular entry of a plurality of entries into the location.
2. The apparatus of claim 1 , wherein the generated block indicates that the entity has been allowed to enter the location.
3. The apparatus of claim 1 , wherein the circuitry is further configured to add the generated block in the plurality of blocks in the block chain to a local ledger block chain associated with the particular entry into the location that the entity used.
4. The apparatus of claim 3 , wherein the circuitry is configured to refrain from adding global blocks to the local ledger block chain, when they are unrelated to the apparatus.
5. The apparatus of claim 3 , wherein the circuitry is configured to sequentially add global blocks of the multiple global blocks received from the global ledger block chain to the local ledger block chain when they are related to the apparatus.
6. The apparatus of claim 1 , wherein the local ledger block chain is stored in a secure array defined by a pair of registers.
7. The apparatus of claim 1 , wherein the circuitry is configured to receive multiple global blocks from a global ledger block chain.
8. The apparatus of claim 1 , wherein the circuitry is further configured to, in response to not verifying the identity of the entity, provide an indication that the entity is denied access to the location.
9. The apparatus of claim 1 , wherein the circuitry is further configured to, in response to determining that the at least one block that was consulted indicates that the entity has already entered the location, provide an indication that the entity is denied access to the location.
10. The apparatus of claim 1 , wherein:
the memory comprises an array of memory cells; and
the circuitry includes a pair of registers configured to define the array.
11. The apparatus of claim 10 , wherein the pair of registers includes:
a register configured to define an address of the array; and
a register configured to define a size of the array.
12. An apparatus, comprising:
a memory; and
circuitry configured to:
receive a public key, identity data, a signature, and a request to enter a location from a vehicular entity;
analyze the request by:
verifying an identity of the vehicular entity based on the identity data and the signature;
determining whether at least one block of a block chain is associated with the vehicular entity; and
determining whether the at least one block indicates to allow entry to the location;
wherein, each of the blocks of the block chain includes:
a cryptographic hash of a previous block in relation to each of the blocks in the block chain; and
a cryptographic hash of each of the respective blocks; and
wherein:
the blocks in the block chain are organized in a global block chain and are added to local ledger block chains; and
each of the local ledger block chains are associated with a particular entry of a plurality of entries into the location.
13. The apparatus of claim 12 , wherein the circuitry is further configured to, in response to verifying the identity of the entity and allowing entry into the location:
generate a block in the block chain that indicates that the vehicular entity has been allowed to enter the location; and
add a cryptographic hash of a block added prior to generation of the generated block to the generated block.
14. The apparatus of claim 12 , wherein the circuitry is further configured to verify the signature on a freshness field of the at least one block.
15. The apparatus of claim 14 , wherein the circuitry determines the freshness field by identifying a field of a previous block of the block chain.
16. The apparatus of claim 12 , wherein the circuitry is configured to deny subsequent requests to enter the location made by a subsequent entity that provides subsequent identity data that is identical to the identity data of the vehicular entity.
17. The apparatus of claim 16 , wherein the circuitry is configured to deny by accessing the generated block and determining that the vehicular entity has already entered the location.
18. The apparatus of claim 12 , wherein the circuitry is configured to, in response to the vehicular entity exiting the location, generate an additional block that indicates the vehicular entity has exited the location.
19. A system, comprising:
a memory; and
circuitry configured to:
receive identity data, a signature, and a request to enter a location from an entity; and
analyze the request by:
verifying an identity of the entity based on the identity data and the signature;
consulting at least one of a plurality of blocks in a block chain to determine whether data associated with the entity authenticates entry into the location;
in response to verifying the identity of the entity and authenticating entry into the location:
sending an indication that entry to the location is allowed; and
generating a block in the plurality of blocks in the block chain; and
a host, wherein the host is associated with a vehicular entity and is configured to:
send the identity data, the signature, and the request; and
receive the indication that entry to the location is allowed; and
wherein:
the plurality of blocks in the block chain are organized in a global block chain and are added to local ledger block chains; and
each of the local ledger block chains are associated with a particular entry of a plurality of entries into the location.
20. The system of claim 19 , wherein the host is configured to, in response to the vehicular entity exiting the location, indicate to the circuitry that the vehicular entity has exited.
21. The system of claim 20 , wherein the circuitry, in response to receiving the indication that the vehicular entity has exited, generate an additional block to be added to the plurality of blocks in the block chain indicating the vehicular entity has exited.