Granted Patent B2

US 12,277,247 · App. 17/806,728 · Granted Apr 15, 2025

Inventors: Bjorn Markus Jakobsson (Portola Valley, CA); Stephen C. Gerber (Austin, TX); Ajay Kapur (Valencia, CA)

Assignee: Artema Labs, Inc

G06F21/6245G06F21/602H04L9/30G06F21/64H04L9/50H04L2209/42

Abstract

Claims (60)

1. A user device configured to initiate transactions via an immutable ledger, comprising:

a network interface;

memory; and

a processor, the processor configured to implement an execution environment that enables:

initiation of transactions via the immutable ledger;

recordation of events;

updating a user profile, wherein the user profile comprises at least one characterization associated with the user profile;

encrypting the updated user profile;

securely storing the encrypted user profile;

receiving a request to access the encrypted user profile from a process;

determining access permissions of the process; and

when the process has sufficient access permissions:

decrypting the user profile,

providing user profile data to the process, and

creating an append-only area of the user profile data using:

a public key associated with the execution environment, and

a corresponding private key.

2. The user device of claim 1 , wherein the events comprise user requests and user actions.

3. The user device of claim 1 , wherein the processor is further configured to transmit the user profile data for remote storage.

4. The user device of claim 1 , wherein:

the processor is further configured to receive the user profile data from a remote source, and

the execution environment further enables updating of the user profile data of the encrypted user profile based upon the received user profile data.

5. The user device of claim 1 , wherein:

the request includes a pseudonym, and

the process is determined to have the sufficient access permissions when the pseudonym matches a pseudonym associated with the user profile.

6. A computer-implemented method, executed by one or more computer processors, of restricting access to encrypted user profiles, comprising:

updating a user profile based upon events recorded in an immutable ledger, wherein the user profile comprises at least one characterization associated with the user profile;

encrypting the updated user profile;

securely storing the encrypted user profile;

receiving a request to access the encrypted user profile from a process; and

determining that the process has sufficient access permissions to perform:

decrypting the user profile,

providing user profile data to the process, and

creating an append-only area of the user profile data using:

a public key associated with an execution environment, and

a corresponding private key.

7. The computer-implemented method of claim 6 , wherein the events comprise user requests and user actions.

8. The computer-implemented method of claim 6 , further comprising transmitting the user profile data for remote storage.

9. The computer-implemented method of claim 6 , further comprising receiving the user profile data from a remote source, wherein the execution environment enables updating the user profile data of the encrypted user profile based upon the received user profile data.

10. The computer-implemented method of claim 6 , wherein:

the request includes a pseudonym, and

the process is determined to have the sufficient access permissions when the pseudonym matches a pseudonym associated with the user profile.

11. A non-transitory computer-readable medium containing computer-readable instructions, wherein execution of the computer-readable instructions causes one or more processors to:

update a user profile based upon events recorded in an immutable ledger, wherein the user profile comprises at least one characterization associated with the user profile;

encrypt the updated user profile;

securely storing the encrypted user profile;

receive a request to access the encrypted user profile from a process;

determine access permissions of the process; and

when the process has sufficient access permissions:

decrypt the user profile,

provide user profile data to the process, and

create an append-only area of the user profile data using:

a public key associated with an execution environment, and

a corresponding private key.

12. The non-transitory computer-readable medium of claim 11 , wherein the events comprise user requests and user actions.

13. The non-transitory computer-readable medium of claim 11 , wherein the execution of the computer-readable instructions further causes the one or more processors to transmit the user profile data for remote storage.

14. The non-transitory computer-readable medium of claim 11 , wherein the execution of the computer-readable instructions further causes the one or more processors to receive the user profile data from a remote source, wherein the execution environment enables updating the user profile data of the encrypted user profile based upon the received user profile data.

15. The non-transitory computer-readable medium of claim 11 , wherein:

the request includes a pseudonym, and

the process is determined to have the sufficient access permissions when the pseudonym matches a pseudonym associated with the user profile.

Assignments (1)

Continuity (5)

References Cited (127)

Cited By (2)

US 12,401,510 US 12,417,279