Access control and ownership transfer of digital content using a decentralized content fabric and ledger
Disclosed are examples of systems, apparatus, devices, computer program products, and methods implementing aspects of a decentralized content fabric. In some implementations, one or more processors are configured to provide fabric nodes of an overlay network, including one or more fabric nodes that receive a client's request to access digital content on the overlay network. The request includes an authorization token digitally signed by or on behalf of a user of the client. The fabric node(s) extract a user identifier (ID) from the authorization token, then determine that one or more rules maintained on the overlay network are satisfied. The one or more rules condition access to the digital content upon the extracted user ID matching an ID associated with an owner of a digital instrument. The digital instrument, which can be a non-fungible token, is stored in a blockchain ledger as a unique representation of the digital content.
1. A decentralized content-centric system comprising:
one or more memory devices; and
one or more processors in communication with the one or more memory devices, the one or more processors configured to execute software to provide a plurality of fabric nodes of a network configured to manage a plurality of content object parts corresponding to digital content, each content object part comprising build instructions, raw data, and metadata, the build instructions configured to be processed in relation to the raw data and the metadata to produce digital output, wherein the plurality of fabric nodes comprises one or more fabric nodes configured to:
receive, from a client, a request to access the digital content, the request including an authorization token that is digitally signed by or on behalf of a user of the client,
extract, from the authorization token, an identifier (ID) associated with the user,
determine that one or more rules associated with a digital contract of the network are satisfied, wherein the one or more rules condition access to the digital content upon the ID associated with the user matching an ID associated with an owner of a digital instrument, the digital instrument being stored in a blockchain ledger as a unique representation of the digital content, and
provide the client with access to the digital content in accordance with the digital contract and in response to determining that the one or more rules are satisfied.
2. The decentralized content-centric system of claim 1 , wherein the digital instrument is a non-fungible token having a single owner.
3. The decentralized content-centric system of claim 1 , wherein the request references a content hash generated through a one-way hash operation on the digital content.
4. The decentralized content-centric system of claim 3 , wherein the network is configured to communicate the content hash to the client in response to receiving an address of the digital instrument from the client.
5. The decentralized content-centric system of claim 1 , wherein the authorization token is generated by an authority service based on verification of an identity credential supplied by the client.
6. The decentralized content-centric system of claim 1 , wherein the digital contract is a first blockchain smart contract, wherein the one or more rules are evaluated through execution of the first blockchain smart contract, and wherein the ID associated with the owner of the digital instrument is indicated by a second blockchain smart contract referenced by the first blockchain smart contract.
7. The decentralized content-centric system of claim 1 , wherein the ID associated with the user is an address of a cryptocurrency wallet.
8. The decentralized content-centric system of claim 1 , wherein the access to the digital content involves transferring ownership of the digital content to a second user, and wherein to transfer ownership to the second user, the network is configured to associate an ID of the second user with the digital instrument.
9. The decentralized content-centric system of claim 1 , wherein the access to the digital content involves creating a second digital instrument as a unique representation of a derivative of the digital content.
10. A non-transitory computer-readable medium storing program code executable by one or more processors, the program code comprising instructions configured to cause the one or more processors to provide a plurality of fabric nodes of a network configured to manage a plurality of content object parts corresponding to digital content, each content object part comprising build instructions, raw data, and metadata, the build instructions configured to be processed in relation to the raw data and the metadata to produce digital output, wherein the plurality of fabric nodes comprises one or more fabric nodes configured to:
receive, from a client, a request to access the digital content, the request including an authorization token that is digitally signed by or on behalf of a user of the client,
extract, from the authorization token, an identifier (ID) associated with the user,
determine that one or more rules associated with a digital contract of the network are satisfied, wherein the one or more rules condition access to the digital content upon the ID associated with the user matching an ID associated with an owner of a digital instrument, the digital instrument being stored in a blockchain ledger as a unique representation of the digital content, and
provide the client with access to the digital content in accordance with the digital contract and in response to determining that the one or more rules are satisfied.
11. The non-transitory computer-readable medium of claim 10 , wherein the digital instrument is a non-fungible token having a single owner.
12. The non-transitory computer-readable medium of claim 10 , wherein the request references a content hash generated through a one-way hash operation on the digital content.
13. The non-transitory computer-readable medium of claim 12 , wherein the network is configured to communicate the content hash to the client in response to receiving an address of the digital instrument from the client.
14. The non-transitory computer-readable medium of claim 10 , wherein the authorization token is generated by an authority service based on verification of an identity credential supplied by the client.
15. The non-transitory computer-readable medium of claim 10 , wherein the digital contract is a first blockchain smart contract, wherein the one or more rules are evaluated through execution of the first blockchain smart contract, and wherein the ID associated with the owner of the digital instrument is indicated by a second blockchain smart contract referenced by the first blockchain smart contract.
16. The non-transitory computer-readable medium of claim 10 , wherein the ID associated with the user is an address of a cryptocurrency wallet.
17. The non-transitory computer-readable medium of claim 10 , wherein the access to the digital content involves transferring ownership of the digital content to a second user, and wherein to transfer ownership to the second user, the network is configured to associate an ID of the second user with the digital instrument.
18. The non-transitory computer-readable medium of claim 10 , wherein the access to the digital content involves creating a second digital instrument as a unique representation of a derivative of the digital content.
19. A method comprising:
providing a plurality of fabric nodes of a network configured to manage a plurality of content object parts corresponding to digital content, each content object part comprising build instructions, raw data, and metadata, the build instructions configured to be processed in relation to the raw data and the metadata to produce digital output, wherein the plurality of fabric nodes comprises one or more fabric nodes configured to:
receive, from a client, a request to access the digital content, the request including an authorization token that is digitally signed by or on behalf of a user of the client,
extract, from the authorization token, an identifier (ID) associated with the user,
determine that one or more rules associated with a digital contract of the network are satisfied, wherein the one or more rules condition access to the digital content upon the ID associated with the user matching an ID associated with an owner of a digital instrument, the digital instrument being stored in a blockchain ledger as a unique representation of the digital content, and
provide the client with access to the digital content in accordance with the digital contract and in response to determining that the one or more rules are satisfied.
20. The method of claim 19 , wherein the digital instrument is a non-fungible token having a single owner.
21. The method of claim 19 , wherein the request references a content hash generated through a one-way hash operation on the digital content.
22. The method of claim 21 , further comprising:
communicating, by the network, the content hash to the client in response to receiving an address of the digital instrument from the client.
23. The method of claim 19 , wherein the authorization token is generated by an authority service based on verification of an identity credential supplied by the client.
24. The method of claim 19 , wherein the digital contract is a first blockchain smart contract, wherein the one or more rules are evaluated through execution of the first blockchain smart contract, and wherein the ID associated with the owner of the digital instrument is indicated by a second blockchain smart contract referenced by the first blockchain smart contract.
25. The method of claim 19 , wherein the ID associated with the user is an address of a cryptocurrency wallet.
26. The method of claim 19 , wherein the access to the digital content involves transferring ownership of the digital content to a second user, the method further comprising:
associating, by the network, an ID of the second user with the digital instrument.
27. The method of claim 19 , wherein the access to the digital content involves creating a second digital instrument as a unique representation of a derivative of the digital content.
28. The decentralized content-centric system of claim 1 , wherein:
the digital instrument is stored with an ID mapped to the ID associated with the owner of the digital instrument; and
due to the digital instrument being a unique representation of the digital content, ownership of the digital instrument represents ownership of an access right specific to the digital content, the access right being defined by the digital contract.
29. The non-transitory computer-readable medium of claim 10 , wherein:
the digital instrument is stored with an ID mapped to the ID associated with the owner of the digital instrument; and
due to the digital instrument being a unique representation of the digital content, ownership of the digital instrument represents ownership of an access right specific to the digital content, the access right being defined by the digital contract.
30. The method of claim 19 , wherein:
the digital instrument is stored with an ID mapped to the ID associated with the owner of the digital instrument; and
due to the digital instrument being a unique representation of the digital content, ownership of the digital instrument represents ownership of an access right specific to the digital content, the access right being defined by the digital contract.