IP Library › Granted Patent US 10,887,100
Granted Patent B2
US 10,887,100 · App. 16/681,750 · Granted Jan 5, 2021

Systems and methods for distributed key storage

Inventor: Christian Wentz (Providence, RI)
H04L9/0894G06F21/602G06F21/6218H04L9/3213H04L9/3218
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,887,100
App. No.
16/681,750
Granted
Jan 5, 2021
Kind
B2
Abstract

A system for distributed key storage, comprising a requesting device communicatively connected to a plurality of distributed storage nodes, the requesting device designed and configured to receive at least a confidential datum, select at least a distributed storage node of a plurality of distributed storage nodes, whereby selecting further comprises receiving a storage node authorization token from the at least a distributed storage node, querying an instance of a distributed authentication listing containing authentication information using at least a datum of the storage node authorization token, retrieving an authentication determination from the instance of the authentication listing, and selecting the at least a distributed storage node as a function of the authentication determination, generate at least a retrieval authentication datum, and transmit the at least a confidential datum and the at least a retrieval verification datum to the at least a distributed storage node.

Claims (46)

1. A system for distributed key storage, the system comprising:

a requesting device communicatively connected to a plurality of distributed storage nodes, the requesting device designed and configured to:

receive at least a confidential datum,

select at least a distributed storage node of a plurality of distributed storage nodes, wherein selecting further comprises:

receiving a storage node authorization token from the at least a distributed storage node;

querying an instance of a distributed authentication listing containing authentication information using at least a datum of the storage node authorization token;

retrieving an authentication determination from the instance of the distributed authentication listing; and

selecting the at least a distributed storage node as a function of the authentication determination;

generate at least a retrieval verification datum; and

transmit the at least a confidential datum and the at least a retrieval verification datum to the at least a distributed storage node.

2. The system of claim 1 , wherein the storage node authorization token further comprises a secure proof generated by the at least a distributed storage node.

3. The system of claim 1 , wherein the storage node authorization token further comprises a secure proof generated by at least a verifying node.

4. The system of claim 3 , wherein an authentication determination further comprises an entry in the distributed authentication listing identifying the at least a verifying node.

5. The system of claim 1 , wherein the authorization token includes a time-limited authentication lease.

6. The system of claim 1 , wherein selecting the at least a distributed storage node further comprises:

generating a cost function of confidence level and communication latency; and

minimizing the cost function.

7. The system of claim 1 , wherein the requesting device is further configured to store the at least a retrieval verification datum in a distributed data structure.

8. The system of claim 1 , wherein transmitting the at least a confidential datum to the at least a distributed storage node further comprises:

dividing the confidential datum into a plurality of shares; and

transmitting each share of the plurality of shares to a different distributed storage node of the at least a distributed storage node.

9. The system of claim 1 , wherein the requesting device is further configured to retrieve, from the at least a distributed storage node, the at least a confidential datum.

10. The system of claim 9 , wherein retrieving further comprises providing, to the at least a distributed storage node, a retrieval token as a function of the at least a retrieval verification datum.

11. A method for distributed key storage, the method comprising:

receiving, by a requesting device communicatively connected to a plurality of distributed storage nodes, at least a confidential datum,

selecting, by the requesting device, at least a distributed storage node of a plurality of distributed storage nodes, wherein selecting further comprises:

receiving, by the requesting device, a storage node authorization token from the at least a distributed storage node;

querying, by the requesting device, an instance of a distributed authentication listing containing authentication information using at least a datum of the storage node authorization token;

retrieving, by the requesting device, an authentication determination from the instance of the authentication listing; and

selecting, by the requesting device, the at least a distributed storage node as a function of the distributed authentication determination;

generating, by the requesting device, at least a retrieval authentication datum; and

transmitting, by the requesting device, the at least a confidential datum and the at least a retrieval authentication datum to the at least a distributed storage node.

12. The method of claim 11 , wherein the storage node authorization token further comprises a secure proof generated by the at least a distributed storage node.

13. The method of claim 11 , wherein the storage node authorization token further comprises a secure proof generated by at least a verifying node.

14. The method of claim 11 , wherein an authentication determination further comprises an entry identifying the at least a verifying node.

15. The method of claim 11 , wherein the authorization token includes associating a temporal attribute with the authorization token.

16. The method of claim 11 , wherein selecting the at least a distributed storage node further comprises:

generating a cost function of confidence level and communication latency; and

minimizing the cost function.

17. The method of claim 11 , wherein transmitting the at least a confidential datum and the at least a retrieval verification datum to the at least a distributed storage node further comprises storing the at least a retrieval verification datum in a distributed data structure.

18. The method of claim 11 , wherein transmitting the at least a confidential datum and the at least a retrieval verification datum to the at least a distributed storage node further comprises:

dividing the confidential datum into a plurality of shares; and

transmitting each share of the plurality of shares to a different distributed storage node of the at least a distributed storage node.

19. The method of claim 11 further comprising retrieving, from the at least a distributed storage node, the at least a confidential datum.

20. The method of claim 19 , wherein retrieving further comprises providing, to the at least a distributed storage node, a retrieval token as a function of the at least a retrieval verification datum.

21. The method of claim 19 , wherein a policy stored in the distributed authentication listing sets a threshold number of distributed storage nodes and retrieving further comprises retrieval from a number distributed storage nodes exceeding the threshold number.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 3, 2020
From: WENTZ, CHRISTIAN
To: ARES TECHNOLOGIES, INC.
Reel/Frame 052556/0689 →
Continuity (3)
Provisional Application 62760832 · Nov 13, 2018
Provisional Application 62758367 · Nov 9, 2018
Related Publication 20200162251A1 · May 21, 2020
Cited By (2)
US 12,537,673 US 12,726,370