Granted Patent B2

US 12,386,727 · App. 18/144,714 · Granted Aug 12, 2025

Inventors: Kaiho Fukuchi (Santa Clara, CA); Takayuki Suzuki (Cupertino, CA); Takatoshi Ohara (Cupertino, CA); Shin Tezuka (Campbell, CA); Nobutaka Kawaguchi (Santa Clara, CA); Ken Naganuma (Campbell, CA)

Assignee: HITACHI, Ltd.

G06F11/3636G06F11/362

Abstract

Claims (59)

1. A bug bounty generation system, the system comprising:

a plurality of nodes;

a private blockchain system being set in a first node of the plurality of nodes, wherein the first node is a private blockchain node, and the private blockchain system comprises:

a first processor configured to:

receive a transaction for execution in runtime for bug detection, and

monitor the transaction in the runtime and extract features of the transaction to output first feature values; and

an external system in communication with the private blockchain system, the external system comprises:

a second processor configured to:

extract features of past transactions stored in nodes other than the first node of the plurality of nodes and outputs second feature values; and

generate a bounty information corresponding to a bug alert in the transaction, wherein the bounty information is generated based on (i) a degree of similarity between the first feature values and the second feature values by comparing the first feature values with the second feature values; and (ii) rarity, basicity, and scale of damage of a bug detected in the transaction,

wherein the second processor instructs payment of bounty based on the bounty information, and

wherein the nodes other than the first node of the plurality of nodes are physical blockchain nodes,

wherein the first processor generate a test report to the external system.

2. The system of claim 1 , wherein the external system exists on a server.

3. The system of claim 1 , wherein the nodes other than the first node of the plurality of nodes together form a blockchain network.

4. The system of claim 1 , wherein the private blockchain system is downloaded and executed on a confidential computing environment of a user device.

5. The system of claim 1 , wherein the transaction is an arbitrary transaction for testing a smart contract.

6. The system of claim 1 , wherein

the test report comprises the first feature values and proof of verification.

7. The system of claim 6 ,

wherein the private blockchain system further stores potential vulnerability information;

wherein the runtime determines whether a state of the runtime changed by the transaction by the first processor matches any state identified in the potential vulnerability information;

wherein, for the state of the runtime matching any state identified in the potential vulnerability information, including the state of the runtime in the test report; and

wherein the second processor instructs payment of an additional bounty based on the state of runtime included in the test report.

8. The system of claim 1 , wherein the bounty information is generated by comparing the first feature values with the second feature values through the second processor being further configured to:

compare the first feature values with the second feature values to determine a number of similar attacks associated with the past transactions; and

generate and adjust the bounty information based on the number of similar attacks associated with the past transactions.

9. The system of claim 1 , wherein the external system further comprises:

a database for storing known bugs of the bug bounty generation system and feature values associated with the known bugs;

the second processor is further configured to compare the first feature values against the feature values associated with the known bugs; and

for the first feature values matching third feature values associated with a known bug of the known bugs, the second processor is further configured to generate a second bounty information and instructing payment of bounty based on the second bounty information to discoverer of the known bug associated with the third feature values.

10. A method for generating blockchain bug bounty, the method comprising:

performing, by a first processor, bug detection by issuing a transaction for execution in runtime of a private blockchain system, wherein the private blockchain system is set in a first node of a plurality of nodes, and the first node is a private blockchain node;

monitoring the transaction in the runtime and outputting first feature values associated with the transaction, wherein the first feature values are generated by performing feature extraction on the transaction;

communicating with an external system, wherein the external system performs:

receiving, by a second processor, the first feature values;

extracting, by the second processor, features of past transactions stored in nodes other than the first node of the plurality of nodes and outputting second feature values associated with the past transactions;

generating, by the second processor, bounty information corresponding to a bug alert in the transaction, wherein the bounty information is generated based on (i) a degree of similarity between the first feature values and the second feature values by comparing the first feature values with the second feature values, and (ii) rarity, basicity, and scale of damage of a bug detected in the transaction; and

instructing, by the second processor, payment of bounty based on the bounty information,

wherein the nodes other than the first node of the plurality of nodes are physical blockchain nodes,

wherein the first processor generate a test report to the external system.

11. The method of claim 10 , wherein the external system exists on a server.

12. The method of claim 10 , wherein the nodes other than the first node of the plurality of nodes together form a blockchain network.

13. The method of claim 10 , wherein the private blockchain system is downloaded and executed on a confidential computing environment of a user device.

14. The method of claim 10 , wherein the transaction is an arbitrary transaction for testing a smart contract.

15. The method of claim 10 , wherein

the test report comprises the first feature values and proof of verification; and.

16. The method of claim 15 , further comprising:

storing, by the private blockchain system, potential vulnerability information;

determining, by the first processor, whether a state of the runtime of the transaction matches any state identified in the potential vulnerability information;

for the state of the runtime matching any state identified in the potential vulnerability information, including the state of the runtime in the test report; and

instructing, by the second processor, payment of an additional bounty based on the state of the runtime included in the test report.

17. The method of claim 10 , wherein the bounty information is generated by comparing the first feature values with the second feature values through a process comprising:

comparing, by the second processor, the first feature values with the second feature values to determine a number of similar attacks associated with the past transactions; and

generating and adjusting, by the second processor, the bounty information based on the number of similar attacks associated with the past transactions.

18. The method of claim 10 , further comprising:

storing known bugs and feature values associated with the known bugs in a database;

comparing, by the second processor, the first feature values against the feature values associated with the known bugs; and

for the first feature values matching third feature values associated with a known bug of the known bugs, generating, by the second processor, a second bounty information and instructing payment of bounty based on the second bounty information to discoverer of the known bug associated with the third feature values.

Assignments (1)

Continuity (1)

References Cited (18)