Systems and methods for data validation and assurance
Various embodiments can implement a multi-system or node architecture that can be deployed on-demand and augment existing systems with pre-configured nodes that can be installed within existing architecture. The multi-node architecture is flexible for integration into many systems and can also stand alone to provide data validation and assurance. Various embodiments of the multi-node architecture enable private and public distributed ledgers (e.g., blockchains) that enhance security, enhance confidentiality, and eliminate the need to trust the provider/hosts of the data validation information and/or the hosts of the confidential information.
1. A system for securing data integrity, the system comprising:
at least one processor operatively connected to a memory, the at least one processor configured to execute a plurality of system components;
a document subsystem, executed by the at least one processor, configured to enable at least one or more of electronic document review, document auditing, or search operations within a file repository;
a verification engine, executed by the at least one processor, configured to:
accept as input data stored in the file repository;
generate an output value based on executing a one way function on the input data;
generate at least a first verification chain incorporating the output value and cryptographic signature, wherein the first private verification chain is a limited access distributed ledger for permissioned users;
generate at least a publicly available second verification chain based on output values from the one way function executed on the first verification chain as input; and
at least a first application programming interface (API), executed by the at least one processor, configured to manage access requests to the file repository by the document subsystem and the verification engine;
a privacy component, executed by the at least one processor, configured to:
manage access to the file repository or subsets of the file repository, and access permission to the private verification chain; and
set and adjust a privacy boundary to control access to the file repository or the subsets of the file repository, access permissions to the private verification chain, and generation functions of the private verification chain;
wherein the system is further configured to:
assign elements of a local computer architecture hosting the data within the file repository for participation in the private verification chain and define verification information available on a first public verification chain; and
assign confidential information from the data within the file repository to incorporate into the private verification chain and including access operations taken with respect to the confidential information.
2. The system of claim 1 , wherein the document subsystem enables a virtual data room for securely reviewing or searching data within the file repository.
3. The system of claim 2 , wherein the at least the first API is configured to manage user requests received from a user interface to manually generate verification information on data in the file repository or data room.
4. The system of claim 3 , wherein the ledger component is configured to automatically generate an update to the second verification chain responsive to executing the user request to generate verification information.
5. The system of claim 4 , wherein the ledger component is further configured to incorporate logged operations into the first private verification chain and automatically update the first public verification chain with one or more new commitment blocks for verifying additions to the private chain.
6. The system of claim 1 , further comprising an event monitor component, executed by the at least one processor, configured to log user or system operations.
7. A computer implemented method for securing data integrity, the method comprising:
hosting a document subsystem, wherein hosting the document subsystem includes executing at least one or more of electronic document review, document auditing, or search operations within a file repository;
accepting, by at least one processor, as input data stored in the file repository into a one way function;
generating, by the at least one processor, an output value based on executing the one way function on the input data;
generating, by the at least one processor, at least a first private verification chain incorporating the output value and cryptographic signature, wherein the first private verification chain is a limited access distributed ledger for permissioned users;
generating, by the at least one processor, at least a publicly available second verification chain based on output values from the one way function executed on the first private verification chain as input; and
executing, by the at least one processor, at least a first application programming interface (API), wherein executing the API includes managing access requests to the file repository by the document subsystem and the first private verification chain via the API;
managing, by the at least one processor, access permission to the first private verification chain; and
setting and adjusting, by the at least on processor, a privacy boundary to control:
access to the file repository or the subsets of the file repository, access permissions to the private verification chain, and generation functions of the private verification chain;
assigning, by the at least one processor, elements of a local computer architecture hosting at least some of the data within the file repository for participation in the private verification chain and definition of verification information available on a first public verification chain; and
assigning, by the at least one processor, confidential information from the data within the file repository to incorporate into the private verification chain and including access operations taken with respect to the confidential information.
8. The method of claim 7 , further comprising hosting a virtual data room for securely reviewing or searching data within the file repository.
9. The method of claim 8 , further comprising an act of managing by the API user requests received from a user interface to manually generate verification information on data in the file repository or data room.
10. The method of claim 9 , further comprising an act of automatically generating an update to the second verification chain responsive to executing the user request to generate verification information.
11. The method of claim 10 , further comprising incorporating logged operations into the first private verification chain and automatically updating the first public verification chain with one or more new commitment blocks for verifying additions to the private chain.
12. The method of claim 8 , further comprising managing access to the file repository or subsets of the file repository, the virtual data room, and access permission to the private verification chain.
13. The method of claim 7 , further comprising managing access to the file repository or subsets of the file repository, and access permission to the private verification chain.
14. The method of claim 13 , further comprising communicating access request information to via the at least the first API to enable or deny access, including enabling or denying access to the private verification chain.
15. The method of claim 7 , further comprising an act of logging user or system operations by an event monitor.
16. A non-transitory computer readable medium containing instructions that when executed cause at least one processor to perform a method for securing data integrity, the method comprising:
hosting a document subsystem, wherein hosting the document subsystem includes executing at least one or more of electronic document review, document auditing, or search operations within a file repository;
accepting as input data stored in the file repository into a one way function;
generating an output value based on executing the one way function on the input data;
generating at least a first private verification chain incorporating the output value and cryptographic signature, wherein the first private verification chain is a limited access distributed ledger for permissioned users;
generating at least a publicly available second verification chain based on output values from the one way function executed on the first private verification chain as input; and
executing at least a first application programming interface (API), wherein executing the API includes managing access requests to the file repository by the document subsystem and the first private verification chain via the API;
managing, by the at least one processor, access permission to the first private verification chain:
setting and adjusting, by the at least on processor, a privacy boundary to control:
access to the file repository or the subsets of the file repository, access permissions to the private verification chain, and generation functions of the private verification chain;
assigning, by the at least one process, elements of a local computer architecture hosting at least some of the data within the file repository for participation in the private verification chain and definition of verification information available on a first public verification chain; and
assigning, by the at least one processor, confidential information from the data within the file repository to incorporate into the private verification chain and including access operations taken with respect to the confidential information.
17. The computer-readable medium of claim 16 , wherein the method further comprises hosting a virtual data room for securely reviewing or searching data within the file repository.