Granted Patent B2

US 11,531,538 · App. 17/335,008 · Granted Dec 20, 2022

Inventors: Jason Crabtree (Vienna, VA); Andrew Sellers (Monument, CO)

Assignee: QOMPLX, INC.

G06F8/77G06F8/71G06F11/3616G06F16/22

Abstract

Claims (46)

1. A system for meta-indexing, search, compliance, and test framework for software development using smart contracts, comprising:

a computing device comprising at least a processor and a memory;

an indexing service comprising a first plurality of programming instructions stored in the memory and operable on the processor of the computing device, wherein the first plurality of programmable instructions, when operating on the processor, cause the processor to:

create a dataset by processing and indexing source code of a project provided by a developer;

perform a code audit using automated analysis using a distributed computational graph comprising at least a plurality of network-addressable processors and memories operating on a plurality of network-connected computing devices, the distributed computational graph collectively maintaining a distributed computational graph and a plurality of interfaces for accessing the functionality thereof across a network, on the indexed source code;

store results from the code audit in the dataset;

gather additional information relating to a project;

store the additional information in the dataset; and

store the dataset into memory; and

a smart contract authority comprising a second plurality of programming instructions stored in the memory and operable on the processor of the computing device, wherein the second plurality of programmable instructions, when operating on the processor, cause the processor to:

receive a request to carry out a transaction involving the source code of a project;

retrieve a set of obligations based on the transaction function and the required privilege level of the function;

create a smart contract based on the retrieved set of obligations;

analyze the dataset for anomalies;

verify that all obligations of the smart contract are fulfilled; and

execute the requested transaction if no anomalies are found from the dataset analysis and all the obligations of the smart contract are fulfilled.

2. The system of claim 1 , further comprising a monitoring service comprising a third plurality of programming instructions stored in the memory and operable on the processor of the computing device, wherein the third plurality of programmable instructions, when operating on the processor, cause the processor to continuously monitor the project for at least source code changes and to make changes to the dataset as needed.

3. The system of claim 2 , wherein the licensing service may be used to detect and automatically take steps to resolve inappropriate usage of the provided project.

4. The system of claim 1 , further comprising a licensing service that the developer may use to manage, track, and restrict usage of the provided project.

5. The system of claim 1 , further comprising a recommendation engine to provide usage recommendations to end-users.

6. The system of claim 1 , wherein at least a portion of the information relating to the provided project that is gathered comprises links to relevant message forums.

7. The system of claim 1 , wherein at least a portion of the information relating to the provided project that is gathered comprises vulnerability information of related libraries and dependencies.

8. The system of claim 1 , wherein if anomalies are found from the dataset analysis or all the obligations of the smart contract are not fulfilled, the request is denied.

9. The system of claim 1 , wherein the if obligations of the smart contract further comprise verifying the authenticity of the requestor.

10. The system of claim 1 , further comprising trust records verified against the blockchain providing an immutable provenance record for code audits.

11. A method for meta-indexing, search, compliance, and test framework for software development using smart contracts, comprising the steps of:

creating a dataset by processing and indexing source code of a project provided by a developer;

performing a code audit using automated analysis using a distributed computational graph comprising at least a plurality of network-addressable processors and memories operating on a plurality of network-connected computing devices, the distributed computational graph collectively maintaining a distributed computational graph and a plurality of interfaces for accessing the functionality thereof across a network, on the indexed source code;

storing results from the code audit in the dataset;

gathering additional information relating to a project;

storing the additional information in the dataset;

storing the dataset into memory;

retrieving a set of obligations based on the transaction function and the required privilege level of the function;

creating a smart contract based on the retrieved set of obligations;

analyzing the dataset for anomalies;

verifying that all obligations of the smart contract are fulfilled; and

executing the requested transaction if no anomalies are found from the dataset analysis and all the obligations of the smart contract are fulfilled.

12. The method of claim 11 , further comprising the step of: continuously monitoring the project for at least source code changes and to make changes to the dataset as needed.

13. The method of claim 12 , wherein the licensing service may be used to detect and automatically take steps to resolve inappropriate usage of the provided project.

14. The method of claim 11 , further comprising a licensing service that the developer may use to manage, track, and restrict usage of the provided project.

15. The method of claim 11 , further comprising a recommendation engine to provide usage recommendations to end-users.

16. The method of claim 11 , wherein at least a portion of the information relating to the provided project that is gathered comprises links to relevant message forums.

17. The method of claim 11 , wherein at least a portion of the information relating to the provided project that is gathered comprises vulnerability information of related libraries and dependencies.

18. The method of claim 11 , wherein if anomalies are found from the dataset analysis or all the obligations of the smart contract are not fulfilled, the request is denied.

19. The method of claim 11 , wherein the obligations of the smart contract comprise verifying the authenticity of the requestor.

20. The method of claim 11 , further comprising verifying trust records against the blockchain providing an immutable provenance record for code audits.

Assignments (5)

Continuity (12)