Granted Patent B2

US 12,236,002 · App. 17/454,565 · Granted Feb 25, 2025

Inventor: Karl J. Kreder, III (Austin, TX)

Assignee: GRIDPLUS, INC.

G06F21/79G06F21/602G06F21/72G06F21/83

Abstract

Claims (119)

1. A system comprising:

a first device comprising:

a first general computing environment (GCE) comprising:

a first network interface;

a first memory storing first computer-executable instructions; and

a first processor in communication with the first network interface and the first memory, the first processor executing the first computer-executable instructions to:

determine transaction input data indicative of a transaction using one or more cryptographic functions;

determine schema data associated with the transaction input data;

determine, based on the transaction input data and the schema data, request data comprising payload data and instruction data;

send the request data to a first secure computing environment (SCE);

receive, from the first SCE, cryptographic output data;

determine, based on the schema data and the cryptographic output data, formatted output data; and

send, using the first network interface, the formatted output data; and

the first SCE comprising:

a first secure output device;

a first secure input device;

a first secure encrypted memory;

a first cryptoprocessor; and

a second processor in communication with: the first processor, the first secure output device, the first secure input device, the first secure encrypted memory, and the first cryptoprocessor, and the second processor executing second computer-executable instructions to:

receive the request data;

process the payload data, according to the instruction data, using the first cryptoprocessor to determine cryptographic output data; and

send the cryptographic output data to the first GCE.

2. The system of claim 1 , wherein the first SCE utilizes one or more static buffers to process the request data.

3. The system of claim 1 , the second processor further executing the second computer-executable instructions to:

determine abstraction data associated with the request data;

determine, based on the abstraction data and the request data, abstracted request data;

present, using the first secure output device, at least a portion of the abstracted request data;

determine, using the first secure input device, first secure user input;

determine the first secure user input is valid input; and

wherein the instructions to process the payload data using the first cryptoprocessor are responsive to the valid input.

4. The system of claim 1 , wherein the schema data is indicative of one or more of:

grammar associated with a transaction using a first blockchain,

syntax associated with the transaction using the first blockchain,

number base and precision associated with one or more values of the transaction using the first blockchain, or

a message format.

5. The system of claim 1 , wherein the request data is formatted as a concise binary object representation (CBOR).

6. The system of claim 1 , the second processor further executing the second computer-executable instructions to:

receive signed abstraction data comprising abstraction data, wherein the abstraction data specifies a relationship between first data in the request data and second data;

determine, using the first cryptoprocessor, that the signed abstraction data is validly signed; and

store the abstraction data in the first secure encrypted memory.

7. The system of claim 1 , the second processor further executing the second computer-executable instructions to:

determine, using the first secure input device, first secure user input;

determine the first secure user input is valid input;

determine, based at least in part on the valid input, abstraction data, wherein the abstraction data specifies a relationship between first data in the request data and second data; and

store the abstraction data in the first secure encrypted memory.

8. The system of claim 1 , the first processor further executing the first computer-executable instructions to:

receive, using the first network interface, the transaction input data from a second device; and

the second processor further executing the second computer-executable instructions to:

determine, using the first secure input device, first secure user input; and

determine, based on the first secure user input, one or more values of the request data.

9. A computer-implemented method comprising:

determining transaction input data, wherein the transaction input data is indicative of a transaction using one or more cryptographic functions;

determining schema data associated with the transaction input data;

determining, based on the transaction input data and the schema data, request data comprising payload data and instruction data;

sending the request data to a secure computing environment (SCE);

receiving, from the SCE, cryptographic output data;

determining, based on the schema data and the cryptographic output data, formatted output data; and

sending the formatted output data.

10. The computer-implemented method of claim 9 , further comprising:

processing the request data within the SCE to determine the cryptographic output data, the processing comprising:

determining, based on the payload data, a first input;

accessing secret data stored in secure encrypted memory of the SCE; and

operating at least one processor within the SCE based on an instruction of the instruction data, wherein the instruction is indicative of a cryptographic function, the first input, and the secret data.

11. The computer-implemented method of claim 9 , further comprising:

storing abstraction data within the SCE;

determining at least a portion of the abstraction data is associated with the request data;

determining within the SCE, based on the abstraction data and the request data, abstracted request data;

presenting, using a secure output device associated with the SCE, at least a portion of the abstracted request data;

determining, using a secure input device associated with the SCE, secure user input;

determining the secure user input is valid input; and

processing the request data, using the SCE, responsive to the valid input.

12. The computer-implemented method of claim 9 , wherein the schema data is indicative of one or more:

grammar associated with a transaction,

syntax associated with the transaction,

number base and precision associated with one or more values of the transaction, or

a message format.

13. The computer-implemented method of claim 9 , wherein at least a portion of the request data is formatted as a concise binary object representation (CBOR).

14. The computer-implemented method of claim 9 , further comprising:

receiving signed abstraction data comprising abstraction data;

determining, using the SCE, that the signed abstraction data is validly signed; and

storing the abstraction data within the SCE.

15. The computer-implemented method of claim 9 , further comprising:

determining, using a secure input device associated with the SCE, secure user input;

determining the secure user input is valid input;

determining, based at least in part on the valid input, abstraction data, wherein the abstraction data specifies a relationship between first data in the request data and second data; and

storing the abstraction data in the SCE.

16. A system comprising:

a first secure computing environment (SCE) comprising:

a communication interface;

a secure output device;

a secure input device;

a secure encrypted memory; and

one or more processors in communication with: the communication interface, the secure output device, the secure input device, and the secure encrypted memory, and the one or more processors executing first computer-executable instructions to:

receive request data comprising payload data and instruction data, wherein the instruction data comprises one or more instructions;

receive, using the communication interface, signed abstraction data;

determine that the signed abstraction data is validly signed;

store at least a portion of the signed abstraction data in the secure encrypted memory;

determine the at least a portion of the signed abstraction data is associated with the request data;

determine, based on the at least a portion of the signed abstraction data and the request data, abstracted request data;

present, using the secure output device, data that is based at least in part on the request data, wherein the abstracted request data is the data that is based at least in part on the request data;

determine, using the secure input device, first secure user input;

based at least in part on the first secure user input, execute the one or more instructions of the instruction data to process the payload data and determine cryptographic output data; and

send, using the communication interface, the cryptographic output data.

17. The system of claim 16 , further comprising:

a general computing environment (GCE) comprising:

a second communication interface;

a second memory storing second computer-executable instructions; and

a second processor in communication with the second communication interface and the second memory, the second processor executing the second computer-executable instructions to:

determine transaction input data indicative of a transaction using one or more cryptographic functions;

determine schema data associated with the transaction input data, wherein the schema data is indicative of one or more:

grammar associated with a transaction,

syntax associated with the transaction,

number base and precision associated with one or more values of the transaction, or

a message format;

determine, based on the transaction input data and the schema data, the request data;

send the request data to the SCE;

receive, from the SCE, the cryptographic output data;

determine, based on the schema data and the cryptographic output data, formatted output data; and

send, using the second communication interface, the formatted output data.

Assignments (1)

Continuity (1)

References Cited (58)