IP Library Granted Patent US 11,601,272
Granted Patent B2
US 11,601,272 · App. 16/861,599 · Granted Mar 7, 2023

Methods and systems for efficient cryptographic third-party authentication of asset transfers using trusted computing

Inventor: Christian T Wentz (Providence, RI)
Assignee: Ares Technologies, Inc.
H04L9/321G06Q20/108G06Q20/3825G06Q20/3827G06Q20/401H04L9/3218H04L9/3226H04L9/3236H04L9/3247H04L9/3278H04L9/3297G06Q2220/00H04L2209/56
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,601,272
App. No.
16/861,599
Granted
Mar 7, 2023
Kind
B2
Abstract

A system for efficient third-party authentication of asset transfers using trusted computing includes a process authentication node configured to receive transfer data relating to an asset transfer, wherein the transfer data includes at least a first authentication datum, retrieve, from an instance of a secure listing, a first digitally signed assertion including at least a second authentication datum, wherein the first digitally signed assertion is generated by a data validator device as a function of information of a transferring entity, compare the at least a first authentication datum to the at least a second authentication datum, and authenticate the transfer data as a function of the comparing of the at least a first authentication datum to the at least a second authentication datum.

Claims (26)

1. A method of efficient cryptographic third-party authentication of an asset transfer, the method comprising:

receiving, at a process authentication node, transfer data relating to an asset transfer, wherein the transfer data includes at least a first authentication datum, and wherein the first authentication datum includes an authorization token;

retrieving, by the process authentication node, from an instance of a secure listing, a first digitally signed assertion including at least a second authentication datum, wherein the first digitally signed assertion is generated by a data validator device as a function of information of a transferring entity;

comparing, by the process authentication node, the at least a first authentication datum to the at least a second authentication datum wherein comparing the at least a first authentication datum to the at least a second authentication datum further comprises retrieving the at least a second authentication datum from a locally stored instance of the secure listing; and

authenticating, by the process authentication node, the transfer data as a function of the comparing of the at least a first authentication datum to the at least a second authentication datum, wherein the process authentication node includes a physically unclonable function (PUF).

2. The method of claim 1 further comprising receiving a secure proof associated with the transferring entity.

3. The method of claim 1 , wherein the first digitally signed assertion identifies the data validator device.

4. The method of claim 3 , wherein the first digitally signed assertion is generated by the data validator device using trusted hardware.

5. The method of claim 1 further comprising determining a confidence level in the data validator device.

6. The method of claim 5 , wherein determining the confidence level further comprises cryptographically validating a secure timestamp.

7. The method of claim 1 , wherein the process authentication node and the data validator device are not connected by a network.

8. The method of claim 1 further comprising cryptographically validating freshness of a local copy of the secure listing.

9. The method of claim 1 , wherein the at least a second authentication datum further comprises a cryptographic hash of authentication information, and comparing the at least a first authentication datum to the at least a second authentication datum further comprises cryptographically hashing the at least a first authentication datum.

10. A system for efficient third-party authentication of asset transfers using trusted computing, the system including a process authentication node, the process authentication node including a processor, the process authentication node configured to:

receive transfer data relating to an asset transfer, wherein the transfer data includes at least a first authentication datum, and wherein the first authentication datum includes an authorization token;

retrieve, from an instance of a secure listing, a first digitally signed assertion including at least a second authentication datum, wherein the first digitally signed assertion is generated by a data validator device as a function of information of a transferring entity;

compare the at least a first authentication datum to the at least a second authentication datum, wherein comparing the at least a first authentication datum to the at least a second authentication datum further comprises retrieving the at least a second authentication datum from a locally stored instance of the secure listing; and

authenticate the transfer data as a function of the comparing of the at least a first authentication datum to the at least a second authentication datum, wherein the process authentication node includes a physically unclonable function (PUF).

11. The system of claim 10 , wherein the process authentication node is further configured to receive a secure proof associated with the transferring entity.

12. The system of claim 10 , wherein the first digitally signed assertion identifies the data validator device.

13. The system of claim 12 , wherein the first digitally signed assertion is generated by the data validator device using trusted hardware.

14. The system of claim 10 , wherein the process authentication node is further configured to determine a confidence level in the data validator device.

15. The system of claim 14 , wherein determining the confidence level further comprises cryptographically validating a secure timestamp.

16. The system of claim 10 , wherein the process authentication node and the data validator device are not connected by a network.

17. The system of claim 10 wherein the process authentication node is further configured to cryptographically validate freshness of a local copy of the secure listing.

18. The system of claim 10 , wherein the at least a second authentication datum further comprises a cryptographic hash of authentication information, and comparing the at least a first authentication datum to the at least a second authentication datum further comprises cryptographically hashing the at least a first authentication datum.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 20, 2020
From: WENTZ, CHRISTIAN T
To: ARES TECHNOLOGIES, INC.
Reel/Frame 053251/0943 →
Continuity (2)
Provisional Application 62841964 · May 2, 2019
Related Publication 20200351089A1 · Nov 5, 2020