Cryptographic systems and methods using distributed ledgers
The disclosure relates to, among other things, systems and methods for facilitating the secure recording of assertions made by entities tied to identities. Embodiments of the disclosed systems and methods may allow users to make non-revocable, difficult to forge, cryptographic assertions tied to their identities through the posting of entries in an immutable ledger. In certain embodiments, a user's cryptographic assertions may be preceded by ledger entries which feature certificates from trusted authorities that tie the keys used for making assertions to the user's identity. Further embodiments provide for a mechanism for disabling further entries posted under a user's key, either automatically or at the user's initiation.
1. A method for managing a trusted ledger performed by a first trusted ledger management system, the first trusted ledger management system comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the first trusted ledger management system to perform the method, the method comprising:
receiving a request to record a first entry in the trusted ledger maintained by the first trusted ledger management system, the first entry associating a user deciphering key with an identity associated with a user system, the first entry being further associated with a deciphering key of a first trusted authority and comprising a first indication of an authorization relating to the use of the user deciphering key to record entries in the trusted ledger;
recording the first entry in the trusted ledger;
receiving a request to record a second entry in the trusted ledger maintained by the first trusted ledger management system, the second entry being associated with the user deciphering key and comprising a first message;
identifying, based at least in part on the user deciphering key included in the second entry, the first indication of the authorization relating to the use of the user deciphering key to record entries in the trusted ledger associated with the first entry;
determining that recording the second entry in the trusted ledger is authorized in accordance with the first indication of the authorization relating to the use of the user deciphering key to record entries in the trusted ledger associated with the first entry; and
recording, based on the determination, the second entry in the trusted ledger.
2. The method of claim 1 , wherein the first entry further comprises a signature generated using at least the first indication of the authorization relating to the use of the user deciphering key and an enciphering key of the first trusted authority corresponding to the deciphering key of the first trusted authority.
3. The method of claim 2 , wherein the signature comprises a signature of the first indication of the authorization relating to the use of the user deciphering key generated using the enciphering key of the first trusted authority.
4. The method of claim 2 , wherein the signature is further generated using at least one of the user deciphering key and the identity associated with the user system.
5. The method of claim 4 , wherein the signature comprises a signature of the first indication of the authorization relating to the use of the user deciphering key and at least the user deciphering key generated using the enciphering key of the first trusted authority.
6. The method of claim 2 , wherein the method further comprises verifying the signature using the deciphering key of the first trusted authority.
7. The method of claim 1 , wherein the first trusted authority is associated with a second trusted ledger management system.
8. The method of claim 1 , wherein the first indication comprises at least one restriction associated with the user deciphering key relating to its authorization for use to record entries in the trusted ledger.
9. The method of claim 8 , wherein the at least one restriction comprises a restriction relating to a number of times the user deciphering key is authorized for use to record entries in the trusted ledger.
10. The method of claim 8 , wherein the at least one restriction comprises a restriction relating to a length of time the user deciphering key is authorized for use to record entries in the trusted ledger.
11. The method of claim 1 , wherein the first message comprises an electronic file.
12. The method of claim 11 , wherein the electronic file comprises an electronic document.
13. The method of claim 11 , wherein the first message comprises a signature of the electronic file generated using an enciphering key of the user.
14. The method of claim 13 , wherein the method further comprises verifying the signature of the electronic file using the user deciphering key.
15. The method of claim 1 , wherein the first message comprises a hash value.
16. The method of claim 15 , wherein the hash value comprises a hash of an electronic file and the user deciphering key.
17. The message of claim 1 , wherein the identity associated with the user system comprises at least one of a username, a user address, and user contact information.
18. The method of claim 1 , wherein the second entry is recorded in a location in the trusted ledger after a location of the first entry in the trusted ledger.
19. The method of claim 1 , wherein the method further comprises:
receiving a request to record a third entry in the trusted ledger maintained by the first trusted ledger management system, the third entry confirming the association of the user deciphering key with the identity associated with a user system, the third entry being further associated with a deciphering key of a second trusted authority; and
recording the third entry in the trusted ledger.
20. The method of claim 19 , wherein recording the second entry in the trusted ledger is further based on determining that recording the second entry in the trusted ledger is authorized based on the third entry.