System and method for providing security gateways for high security blockchain systems
A system and method providing a security gateway for high security blockchain systems, that acts as a firewall (and manages users, rules, data access, transactions, fees, etc.), has the ability to understand and enforce blockchain business processes policies (access policy and transaction policy of a blockchain solution that may or may not support smart contracts), and can understand tokens and their functionality, without totally disabling code execution, for example from smart contracts or tokens enabled by smart contracts.
1. A system for providing security gateways for smart contract enabled blockchain systems, comprising:
a rules engine comprising a second plurality of programming instructions stored in a memory and operable on a processor of a blockchain security gateway, wherein the second plurality of programming instructions, when operating on the processor, cause the blockchain security gateway to:
maintain a set of rules, wherein the set of rules define a plurality of criteria to determine compliance of behaviors of a smart contract;
inspect a set of behaviors described in programming code contained in a smart contract for compliance with the set of rules; and
return a list of behaviors from the set of behaviors that do not comply with the set of rules; and
a blockchain security gateway comprising the processor, the memory, and a first plurality of programming instructions stored in the memory and operable on the processor, wherein the first plurality of programming instructions, when operating on the processor, cause the blockchain security gateway to:
receive a smart contract for recording on a blockchain, the smart contract comprising programming code which describes a set of behaviors;
inspect the set of behaviors of the smart contract for compliance with the set of rules using the rules engine;
where the set of behaviors of the smart contract does not fully comply with the set of rules, create a wrapper for the smart contract which disables the programming code that implements those behaviors that do not comply with the set of rules;
record the wrapped smart contract on the blockchain; and
allow the execution of code in the smart contract on the blockchain as restricted by the wrapper.
2. The system of claim 1 , wherein the rules engine checks the credentials of a sender of the smart contract prior to inspecting the set of behaviors.
3. The system of claim 1 , wherein the rules engine rejects any smart contract which has no behaviors which comply with the rules.
4. The system of claim 1 , wherein only smart contracts with behaviors that are fully compliant with the set of rules are recorded to the blockchain.
5. The system of claim 1 , wherein the blockchain security gateway enforces secure access between endpoints to a blockchain domain that comprises a ledger.
6. The system of claim 1 , wherein the blockchain security gateway enforces communication filtering, hardening and distributed denial of service protection.
7. The system of claim 1 , wherein the blockchain security gateway enforces blockchain protocol filtering based on organizational policy.
8. The system of claim 1 , wherein the blockchain security gateway enforces blockchain protocol filtering based on user identification and user permissions.
9. A method for providing security gateways for smart contract enabled blockchain systems, comprising the steps of:
maintaining a set of rules, wherein the set of rules define a plurality of criteria to determine compliance of behaviors of a smart contract;
receiving a smart contract for recording on a blockchain, the smart contract comprising programming code which describes a set of behaviors;
inspecting the set of behaviors of the smart contract for compliance with the set of rules using a rules engine operating on a blockchain security gateway;
where the set of behaviors of the smart contract does not fully comply with the set of rules, creating a wrapper for the smart contract which disables the programming code that implements those behaviors that do not comply with the set of rules;
recording the wrapped smart contract on the blockchain; and
allowing the execution of code in the smart contract on the blockchain as restricted by the wrapper.
10. The method of claim 9 , wherein the rules engine checks the credentials of a sender of the smart contract prior to inspecting the set of behaviors.
11. The method of claim 9 , wherein the rules engine rejects any smart contract which has no behaviors which comply with the rules.
12. The method of claim 9 , wherein only smart contracts with behaviors that are fully compliant with the set of rules are recorded to the blockchain.
13. The method of claim 9 , wherein the blockchain security gateway enforces secure access between endpoints to a blockchain domain that comprises a ledger.
14. The method of claim 9 , wherein the blockchain security gateway enforces communication filtering, hardening and distributed denial of service protection.
15. The method of claim 9 , wherein the blockchain security gateway enforces blockchain protocol filtering based on organizational policy.
16. The method of claim 9 , wherein the blockchain security gateway enforces blockchain protocol filtering based on user identification and user permissions.