Blockchain overwatch
Various embodiments of the present technology provide a distributed overwatch system that allows transactions with government-grade privacy and security. The security and privacy can be achieved by a combination of distributed trusted proxies, to which anonymous users connect with the overwatch of a variety of network security engines. The structured ecosystem provides mechanism for the blockchain to be monitored by an overwatch capability combining big data analytics, intelligent learning, and comprehensive vulnerability assessment to ensure any risks introduced by vulnerabilities are effectively mitigated. The system may include multiple proxy servers geographically distributed around the world. Each proxy can be associated with local network security engines to probe and analyze network traffic. Each proxy can mask sensitive data (e.g., personally identifiable information) within the transaction before it is stored. Various embodiments can interface with most blockchain or distributed ledger technologies that support multi-signature transactions and/or smart contracts.
1. A method comprising:
receiving, at a proxy, a transaction from a first endpoint within multiple endpoints associated with the proxy;
wherein the transaction includes transaction data and a request to add the transaction to a distributed ledger system; and
wherein the transaction data include personally identifiable information;
masking the personally identifiable information using a private key;
randomly selecting a block producer from multiple block producers to verify the transaction;
routing the transaction to the randomly selected block producer for validation; and
creating a tap to route a copy of the transaction to an overwatch agent;
wherein the overwatch agent uses machine learning to classify the transaction.
2. The method of claim 1 , further comprising:
receiving, at the proxy, a transaction confirmation from the block producer; and
distributing the transaction confirmation to all the multiple endpoints associated with the proxy.
3. The method of claim 2 , wherein the transaction confirmation is encrypted using the private key and each of the multiple endpoints attempts to decrypt the transaction confirmation.
4. The method of claim 1 , wherein the overwatch agent is configured to:
receive a copy of network traffic;
monitor the copy of the network traffic to identify threats;
create a baseline network model of the copy of the network traffic; and
communicate threats identified to the proxy or multi-ledger system.
5. The method of claim 1 , further comprising monitoring a traffic level between the proxy and the multiple block producers and, upon identifying the traffic level has fallen below a threshold, automatically creating artificial traffic between the proxy and the multiple block producers.
6. The method of claim 1 , wherein the transaction includes cryptocurrency transactions.
7. A storage device having stored thereon instructions that, when executed by one or more processors, cause a machine to:
receive, at a proxy, a transaction from a first endpoint within multiple endpoints associated with the proxy;
wherein the transaction includes transaction data and a request to add the transaction to a distributed ledger system; and
wherein the transaction data include personally identifiable information;
mask the personally identifiable information using a private key;
randomly select a block producer to verify the transaction;
route the transaction to the randomly selected block producer for validation; and
create a tap to route a copy of the transaction to an overwatch agent;
wherein the overwatch agent uses machine learning to classify the transaction.
8. The storage device of claim 7 , wherein the instructions, when executed by the one or more processors, further cause the machine to:
receive, at the proxy, a transaction confirmation from the block producer; and
distribute the transaction confirmation to all the multiple endpoints associated with the proxy.
9. The storage device of claim 8 , wherein the transaction confirmation is encrypted using the private key and each of the multiple endpoints attempts to decrypt the transaction confirmation.
10. The storage device of claim 7 , wherein the instructions, when executed by the one or more processors, further cause the machine to monitor a traffic level between the proxy and the block producer and, upon identifying the traffic level has fallen below a threshold, automatically create artificial traffic between the proxy and the block producer.
11. The storage device of claim 7 , wherein the transaction includes a cryptocurrency transaction.
12. A system comprising:
means for receiving a transaction from a first endpoint within multiple endpoints associated with a proxy;
wherein the transaction includes transaction data and a request to add the transaction to a distributed ledger system; and
wherein the transaction data include personally identifiable information;
means for masking the personally identifiable information using a private key;
means for randomly selecting a block producer from multiple block producers to verify the transaction;
means for routing the transaction to the randomly selected block producer for validation;
means for creating a tap to route a copy of the transaction to an overwatch agent; and
wherein the overwatch agent includes means to classify the transaction.
13. The system of claim 12 , further comprising:
means for receiving, at the proxy, a transaction confirmation from the block producer; and
means for distributing the transaction confirmation to all the multiple endpoints associated with the proxy.
14. The system of claim 13 , wherein the transaction confirmation is encrypted using the private key and each of the multiple endpoints attempts to decrypt the transaction confirmation.
15. The system of claim 12 , wherein the overwatch agent includes:
means to receive a copy of network traffic;
means to monitor the copy of the network traffic to identify threats;
means to create a baseline network model of the copy of the network traffic; and
means to communicate threats identified to the proxy or multi-ledger system.
16. The system of claim 12 , further comprising means to monitor a traffic level between a proxy and the multiple block producers and, upon identifying the traffic level has fallen below a threshold, automatically create artificial traffic between the proxy and the multiple block producers.
17. The system of claim 12 , wherein the transaction includes cryptocurrency transactions.