Granted Patent B2

US 12,505,180 · App. 17/560,107 · Granted Dec 23, 2025

Inventors: Stephane Savanah (London, GB); Craig Steven Wright (London, GB)

Assignee: NCHAIN LICENSING AG

G06F21/121G06F8/65G06F16/152G06F16/1834G06F21/105G06F21/12G06F21/51G06F21/57G06F21/602G06F21/6281G06F21/64H04L9/0637H04L9/0643H04L9/0841H04L9/3236H04L9/3247H04L9/3263H04L9/3265H04L63/0435H04L63/061H04L63/0823H04L67/104G06F21/107G06F2221/2107H04L9/50H04L67/1065H04L2209/56

Abstract

Claims (45)

1. A computer-implemented method of controlling distribution and installation of computer software by verifying ownership using a distributed hash table and a peer-to-peer distributed ledger, the method performed by a node comprising a processor and associated with a first user (U1) corresponding to a software provider, the method comprising:

determining, by the node, a first hash value (H1) by hashing an executable of the computer software using a hashing function, wherein the executable is configured to enable installation of the computer software;

determining a second hash value (H2) based on a data (D1) associated with the computer software and the first hash value (H1), the data (D1) comprising a license that authorizes a second user (U2) to install the computer software, wherein the license is associated with the second user (U2) and is a top hash value of a Merkle tree cryptographically linking the license to the computer software;

encrypting, by the node, the executable of the computer software with a symmetric key derived from a common secret (CS), wherein the common secret (CS) is determined by the node based on a first private key (VU1) associated with the first user (U1), a second user public key (PU2) associated with the second user (U2), and a value (GV) shared between the first user (U1) and the second user (U2), the common secret (CS) being independently derivable by the second user (U2) using a first public key (PU1) and a second user private key (VU2);

determining, by the node, the second user public key (PU2) associated with the second user (U2) from a transaction record stored on the peer-to-peer distributed ledger, wherein the second user public key (PU2) is retrieved from metadata comprising the second hash value (H2) embedded in a redeem script of the transaction record;

determining, by the node, using the second hash value (H2) as a key of a key-value pair associated with an entry stored on the distributed hash table, a second public key (P2) associated with the second user (U2) from the entry in the distributed hash table;

comparing, by the node, the second user public key (PU2) and the second public key (P2) to confirm a correspondence between the transaction record and a distributed hash table entry in the distributed hash table;

verifying, by the node, the ownership of the computer software by the second user (U2) based on a comparison indicating a match between the second user public key (PU2) and the second public key (P2); and

in response to verifying the ownership, by the node, transmitting the encrypted executable of the computer software to a location in the distributed hash table indicated by the data (D1) and causing the computer software to be installed on a computing device associated with the second user (U2) by enabling decryption of the encrypted executable into an executable form using the symmetric key derived from the common secret (CS), the symmetric key being derivable by the second user (U2) based on the verified ownership, thereby preventing unauthorized installation of the computer software.

2. The method of claim 1 , wherein comparing the second user public key (PU2) and the second public key (P2) comprises determining whether the second user public key (PU2) and the second public key (P2) match.

3. The method of claim 1 , wherein the computer software comprises a header and a body.

4. The method of claim 3 , wherein the header comprises a hash value of the body of the computer software.

5. The method of claim 3 , wherein the header further comprises the second hash value (H2) of the data (D1) associated with the license.

6. The method of claim 3 , wherein the body of the computer software comprises the executable of the computer software.

7. The computer-implemented method of claim 1 , wherein the second user public key (PU2) and the second public key (P2) have a same public key value.

8. A computer system for controlling distribution and installation of computer software by verifying ownership using a distributed hash table and a peer-to-peer distributed ledger, the computer system comprising a processing device associated with a first user (U1) corresponding to a software provider, the processing device comprising a processor and a memory, the memory storing instructions which, when executed by the processor, cause the processing device to:

determine a first hash value (H1) by hashing an executable of the computer software using a hashing function, wherein the executable is configured to enable installation of the computer software;

determine a second hash value (H2) based on a data (D1) associated with the computer software D1 and the first hash value (H1), the data (D1) comprising a license that authorizes the second user (U2) to install the computer software, wherein the license is associated with the second user (U2) and is a top hash value of a Merkle tree cryptographically linking the license to the computer software;

encrypting the executable of the computer software with a symmetric key derived from a common secret (CS), wherein the common secret (CS) is determined based on a first private key (VU1) associated with the first user (U1), a second user public key (PU2) associated with the second user (U2), and a value (GV) shared between the first user (U1) and the second user (U2), the common secret (CS) being independently derivable by the second user (U2) using a first public key (PU1) and a second user private key (VU2);

determine the second user public key (PU2) associated with the second user (U2) from a transaction record stored on the peer-to-peer distributed ledger, wherein the second user public key (PU2) is retrieved from a metadata comprising the second hash value (H2) embedded in a redeem script of the transaction record;

determine using the second hash value (H2) as a key of a key-value pair associated with an entry stored on the distributed hash table, a second public key (P2) associated with the second user (U2) from the entry in the distributed hash table;

compare the second user public key (PU2) and the second public key (P2) to confirm a correspondence between the transaction record and a distributed hash table entry in the distributed hash table;

verify the ownership of the computer software based on a comparison indicating a match between the second user public key (PU2) and the second public key (P2); and

in response to verifying the ownership of the computer software, the processing device is configured to transmit the encrypted executable of the computer software to a location in the distributed hash table indicated by the data (D1) and cause the computer software to be installed on a computing device associated with the second user (U2) by enabling decryption of the encrypted executable into an executable form using the symmetric key derived from the common secret (CS), the symmetric key being derivable by the second user (U2) based on the verified ownership, thereby preventing unauthorized installation of the computer software.

9. A non-transitory machine-readable storage medium comprising instructions thereon, the instructions when executed by a processor of a processing device, cause the processing device to:

determine a first hash value (H1) by hashing an executable of computer software, wherein the executable is configured to enable installation of the computer software;

determine a second hash value (H2) based on a data (D1) associated with the computer software D1 and the first hash value (H1), the data (D1) comprising a license that authorizes a second user (U2) to install the computer software, wherein the license is associated with the second user (U2) and is a top hash value of a Merkle tree cryptographically linking the license to the computer software;

encrypting the executable of the computer software with a symmetric key derived from a common secret (CS), wherein the common secret (CS) is determined based on a first private key (VU1) associated with a first user (U1), a second user public key (PU2) associated with the second user (U2), and a value (GV) shared between the first user (U1) and the second user (U2), the common secret (CS) being independently derivable by the second user (U2) using a first public key (PU1) and a second user private key (VU2);

determine the second user public key (PU2) associated with the second user (U2) from a transaction record stored on a peer-to-peer distributed ledger, wherein the second user public key is retrieved from a metadata comprising the second hash value (H2) embedded in a redeem script of the transaction record;

determine using the second hash value (H2) as a key of a key-value pair associated with an entry stored on the distributed hash table, a second public key (P2) associated with the second user (U2) from the entry in the distributed hash table;

compare the second user public key (PU2) and the second public key (P2) to confirm a correspondence between the transaction record and a distributed hash table entry in the distributed hash table;

verify ownership of the computer software based on a comparison indicating a match between the second user public key (PU2) and the second public key (P2); and

in response to verifying the ownership of the computer software, the processing device is configured to transmit the encrypted executable of the computer software to a location in the distributed hash table indicated by the data (D1) and cause the computer software to be installed on a computing device associated with the second user (U2) by enabling decryption of the encrypted executable into an executable form using the symmetric key derived from the common secret (CS), the symmetric key being derivable by the second user (U2) based on the verified ownership, thereby preventing unauthorized installation of the computer software.

10. A computer-implemented method of verifying ownership and installing computer software using a distributed hash table and a peer-to-peer distributed ledger, the method performed by a node comprising a processor and associated with a second user (U2) corresponding to a software recipient, the method comprising:

receiving, by the node, data (D1) indicating a location of an encrypted executable of the computer software in the distributed hash table, wherein the encrypted executable of the computer software has been encrypted with a symmetric key derived from a common secret (CS), and wherein the encrypted executable of the computer software is associated with a first hash value (H1) generated by hashing the executable using a hash function and a second hash value (H2) determined based on the data (D1) and the first hash value (H1), the data (D1) further comprising a license that authorizes the second user (U2) to install the computer software, the license being a top hash value of a Merkle tree cryptographically linking the license to the computer software;

determining, by the node, a second user public key (PU2) associated with the second user (U2) from a transaction record stored on the peer-to-peer distributed ledger, wherein the second user public key (PU2) is retrieved from metadata comprising the second hash value (H2) embedded in a redeem script of the transaction record;

determining, by the node, using the second hash value (H2) as a key of a key-value pair stored in the distributed hash table, a second public key (P2) associated with the second user (U2) from an entry in the distributed hash table;

comparing, by the node, a second user public key (PU2) and the second public key (P2) to confirm a correspondence between the transaction record and the distributed hash table entry;

verifying, by the node, the ownership of the computer software by the second user (U2) based on a comparison indicating a match between the second user public key (PU2) and the second public key (P2); and

in response to verifying the ownership, by the node:

retrieving the encrypted executable of the computer software from the location in the distributed hash table indicated by the data (D1);

determining, by the node, the common secret (CS) based on a first user public key (PU1) associated with a first user (U1) corresponding to a software provider, a second user private key (VU2) associated with the second user (U2), and a generator value (GV) shared between the first user (U1) and the second user (U2);

deriving the symmetric key from the common secret (CS);

decrypting the encrypted executable into an executable form using the derived symmetric key; and

causing the computer software to be installed on a computing device associated with the second user (U2), thereby preventing unauthorized installation of the computer software.

Assignments (2)

Priority Claims (3)

Continuity (2)

References Cited (101)