Granted Patent B2

US 12,493,877 · App. 18/410,830 · Granted Dec 9, 2025

Inventors: Ying Chan (Cambridge, GB); Dean Kramer (London, GB)

Assignee: NCHAIN LICENSING AG

G06Q20/401G06F16/2365G06F16/2379G06Q10/10G06Q20/02G06Q20/065G06Q20/36H04L9/0643G06Q2220/00H04L9/50

Abstract

Claims (75)

1 . A computer-implemented method, comprising:

creating, at a node in a blockchain network, a first blockchain transaction, wherein the first blockchain transaction includes:

a first output having a first spendable value and a first locking script; and

a second output having a second spendable value and a second locking script;

including, in the first locking script, a first set of constraints on a first selected transaction output, wherein:

the first set of constraints are to be met by a first unlocking script if the first selected transaction output is to be valid for spending the first spendable value; and

including, in the second locking script, a second set of constraints on a second selected transaction output, wherein the second set of constraints are to be met by a second unlocking script if the second selected transaction output is to be valid for spending the second spendable value, wherein:

the first set of constraints are to be met by execution, by a first verifying node of the blockchain network, of a first spending blockchain transaction having a first spending unlocking script; and

the second set of constraints are to be met by execution, by a second verifying node of the blockchain network, of a second spending blockchain transaction, distinct from the first spending blockchain transaction, having a second spending unlocking script;

at the first verifying node:

processing the first spending unlocking script with the first locking script to produce a verification result indicating whether the first spending transaction output satisfies the first set of constraints;

validating the first spending blockchain transaction based at least in part on the verification result; and

responsive to validating the first spending blockchain transaction, propagating the first spending blockchain transaction to other nodes in the blockchain network; and

at the second verifying node:

processing the second spending unlocking script with the second locking script to produce a second verification result indicating whether the second spending transaction output satisfies the second set of constraints;

validating the second spending blockchain transaction based at least in part on the second verification result; and

responsive to validating the second spending blockchain transaction, propagating the second spending blockchain transaction to other nodes in the blockchain network.

2 . The method according to claim 1 , wherein:

the first unlocking script comprises fields of the first blockchain transaction, fields of the first spending blockchain transaction, and fields of the second spending blockchain transaction; and

the first locking script comprises a first comparison of extracted fields of the first blockchain transaction and a second comparison of extracted fields of the first spending blockchain transaction.

3 . The method according to claim 1 , wherein the first set of constraints is distinct from the second set of constraints and distinct from constraints on a transaction input of the first blockchain transaction.

4 . The method according to claim 1 , wherein the first set of constraints and the second set of constraints each comprise a common set of constraints.

5 . The method according to claim 1 , wherein a constraint on a locking script of the of the first spending blockchain transaction requires that, for the first spending blockchain transaction to be valid, the locking script of the first spending blockchain transaction is required to include a reference to at least one field of the spending transaction.

6 . The method according to claim 1 , wherein a constraint on the locking script requires that, for the spending transaction to be valid, the locking script of the spending transaction is required to include a copy of a portion of the first locking script and/or a copy of a portion of the second locking script.

7 . The method of claim 1 , wherein the first set of constraints and/or the second set of constraints comprises a hash of a portion of the first locking script and/or a hash of a portion of the second locking script, and/or a constraint on a size of a portion of the first locking script and/or a size of a portion of the second locking script.

8 . The method of claim 1 , wherein the first set of constraints and/or the second set of constraints comprise an optional reference to input data.

9 . The method of claim 1 , wherein each of a plurality of outputs of the first blockchain transaction is constrained by a different constraint applied to outputs of the plurality of outputs.

10 . The method according to claim 1 , wherein the first verifying node and the second verifying node operate on the same computing device.

11 . A system, comprising:

at least one processor; and

at least one memory including executable instructions that, as a result of execution by the at least one processor, causes the system to perform a method, the method comprising:

creating a first blockchain transaction, wherein the first blockchain transaction includes:

a first output having a first spendable value and a first locking script; and

a second output having a second spendable value and a second locking script;

including, in the first locking script, a first set of constraints on a first selected transaction output, wherein:

the first set of constraints are to be met by a first unlocking script if the first selected transaction output is to be valid for spending the first spendable value; and

including, in the second locking script, a second set of constraints on a second selected transaction output, wherein the second set of constraints are to be met by a second unlocking script if the second selected transaction output is to be valid for spending the second spendable value, wherein:

the first set of constraints are to be met by execution, by a first verifying node of a blockchain network, of a first spending blockchain transaction having a first spending unlocking script; and

the second set of constraints are to be met by execution, by a second verifying node of the blockchain network, of a second spending blockchain transaction, distinct from the first spending blockchain transaction, having a second spending unlocking script;

at the first verifying node:

processing the first spending unlocking script with the first locking script to produce a verification result indicating whether the first spending transaction output satisfies the first set of constraints;

validating the first spending blockchain transaction based at least in part on the verification result; and

responsive to validating the first spending blockchain transaction, propagating the first spending blockchain transaction to other nodes in the blockchain network; and

at the second verifying node:

processing the second spending unlocking script with the second locking script to produce a second verification result indicating whether the second spending transaction output satisfies the second set of constraints;

validating the second spending blockchain transaction based at least in part on the second verification result; and

responsive to validating the second spending blockchain transaction, propagating the second spending blockchain transaction to other nodes in the blockchain network.

12 . The system of claim 11 , wherein:

the first unlocking script comprises fields of the first blockchain transaction, fields of the first spending blockchain transaction, and fields of the second spending blockchain transaction; and

the first locking script comprises a first comparison of extracted fields of the first blockchain transaction and a second comparison of extracted fields of the first spending blockchain transaction.

13 . The system of claim 11 ,

wherein a constraint on a locking script of the of the first spending blockchain transaction requires that, for the first spending blockchain transaction to be valid, the locking script of the first spending blockchain transaction is required to include a reference to at least one field of the spending transaction.

14 . The system of claim 11 , wherein a constraint on the locking script requires that, for the spending transaction to be valid, the locking script of the spending transaction is required to include a copy of a portion of the first locking script and/or a copy of a portion of the second locking script.

15 . A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by a processor of a computer system, cause the computer system to at least perform a method, the method comprising:

creating a first blockchain transaction, wherein the first blockchain transaction includes:

a first output having a first spendable value and a first locking script; and

a second output having a second spendable value and a second locking script;

including, in the first locking script, a first set of constraints on a first selected transaction output, wherein:

the first set of constraints are to be met by a first unlocking script if the first selected transaction output is to be valid for spending the first spendable value; and

including, in the second locking script, a second set of constraints on a second selected transaction output, wherein the second set of constraints are to be met by a second unlocking script if the second selected transaction output is to be valid for spending the second spendable value, wherein:

the first set of constraints are to be met by execution, by a first verifying node of a blockchain network, of a first spending blockchain transaction having a first spending unlocking script; and

the second set of constraints are to be met by execution, by a second verifying node of the blockchain network, of a second spending blockchain transaction, distinct from the first spending blockchain transaction, having a second spending unlocking script;

at the first verifying node:

processing the first spending unlocking script with the first locking script to produce a verification result indicating whether the first spending transaction output satisfies the first set of constraints;

validating the first spending blockchain transaction based at least in part on the verification result; and

responsive to validating the first spending blockchain transaction, propagating the first spending blockchain transaction to other nodes in the blockchain network; and

at the second verifying node:

processing the second spending unlocking script with the second locking script to produce a second verification result indicating whether the second spending transaction output satisfies the second set of constraints;

validating the second spending blockchain transaction based at least in part on the second verification result; and

responsive to validating the second spending blockchain transaction, propagating the second spending blockchain transaction to other nodes in the blockchain network.

16 . The non-transitory computer-readable storage medium of claim 15 , wherein:

the first unlocking script comprises fields of the first blockchain transaction, fields of the first spending blockchain transaction, and fields of the second spending blockchain transaction; and

the first locking script comprises a first comparison of extracted fields of the first blockchain transaction and a second comparison of extracted fields of the first spending blockchain transaction.

17 . The non-transitory computer-readable storage medium of claim 15 , wherein a constraint on a locking script of the of the first spending blockchain transaction requires that, for the first spending blockchain transaction to be valid, the locking script of the first spending blockchain transaction is required to include a reference to at least one field of the spending transaction.

18 . The non-transitory computer-readable storage medium of claim 15 , wherein a constraint on the locking script requires that, for the spending transaction to be valid, the locking script of the spending transaction is required to include a copy of a portion of the first locking script and/or a copy of a portion of the second locking script.

Assignments (4)

Priority Claims (3)

Continuity (2)

References Cited (59)