IP Library Granted Patent US 12,321,469
Granted Patent B2
US 12,321,469 · App. 18/615,508 · Granted Jun 3, 2025

Method, apparatus, and computer-readable medium for confederated rights and hierarchical key management

Inventor: George Daniel Doney (Riva, MD)
Assignee: DTCC DIGITAL (US) INC.
G06F21/604G06F16/27G06F21/106G06F21/108G06Q20/3674G06Q20/38215G06Q20/3825G06Q20/3829G06Q20/389G06Q20/4016H04L9/0894H04L9/3247G06F2221/2141H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,321,469
App. No.
18/615,508
Granted
Jun 3, 2025
Kind
B2
Abstract

A method and apparatus for secured, peer-to-peer transfer of data rights over a computer network, the method being accomplished by a distributed computing system including a distributed ledger platform. Root rights are defined and delegated to wallets in a multilevel manner to thereby isolate wallets associated with the root right from cyber risk.

Claims (36)

1. A method for secure authorization of transactions in a decentralized computing network, comprising:

creating a root right expressed in a smart contract code executed on the decentralized computing network, the root right permitting execution of specified functions;

delegating a right to permit execution of at least one of the specified functions from the root right to a wallet on the decentralized computing network to create a delegated right allowing the wallet to sign transactions corresponding to the at least one of the specified functions; and

authorizing a creation of a basic object on the decentralized computing network by signing a transaction with the wallet;

wherein the smart contract code provides a party with signing authority on an assigning wallet assigned to the root right permission to delegate a second delegated right to a second wallet, thereby creating an extended right, and further comprising recording a second data structure in a delegation registry in response to a delegation of the second delegated right, thereby resulting in a second data structure in the delegation registry referencing at least one smart contract wherein the second delegated right applies, the second delegated right, the assigning wallet, and the second wallet to which the second delegated right was delegated.

2. The method of claim 1 , wherein the right, the delegated right, and the extended right are derived directly or indirectly from the root right, to thereby provide a chain of authority configured to be traced back to the root right.

3. The method of claim 1 , wherein a smart contract interface specification is used for communication between the smart contract code and a delegation registry.

4. The method of claim 1 , wherein a root wallet assigned to the root right is configured to revoke the delegated right by removing the data structure from a delegation registry that represents the delegated right, or replacing delegation of the delegated right by delegating the delegated right to another wallet by changing the data structure in the delegation registry that represents the delegated right.

5. The method of claim 1 , further comprising the wallet delegating the delegated right to another wallet to thereby further isolate a root wallet assigned to the root right from cyber risk associated with signing transactions.

6. The method of claim 1 , wherein a rights management data structure model is applied whereby new rights are formed from existing rights, wherein the new rights include at least one management right permitting creation, management, and enforcement of a delegated right, the rights management data structure model expressing the at least one management right by deploying a rights management smart contract code that enables a rights management structure, the rights management data structure model being defined by a root wallet.

7. The method of claim 6 , wherein the rights management data structure model includes an attribute management registry containing at least one attribute, wherein the at least one attribute is an attribute data structure containing a name, a storage location and data type, and an indication of an authorized party authorized to create, read, update, or delete data and wherein an attestation registry stores attestation attribute values associated with objects assigned by the authorized party, the attestation attribute values representing roles which are configured to be used to capture the delegated right assigned to the wallet, to thereby facilitate the creation and management of a role right configured to be used to govern the delegated right.

8. The method of claim 1 , further comprising recording a data structure in a delegation registry that represents the delegated right.

9. A computer system for secure authorization of transactions in a decentralized computing network, comprising:

at least one computer hardware processor; and

at least one memory device having computer readable instructions stored thereon which, when executed by the at least one computer hardware processor is operable to:

create a root right expressed in a smart contract code for execution on the decentralized computing network, wherein the root right permits execution of specified functions;

delegate a right to permit execution of at least one of the specified functions from the root right to a wallet on the decentralized network to create a delegated right allowing the wallet to sign transactions corresponding to the at least one of the specified functions; and

authorize a creation of a basic object on the decentralized computing network by signing a transaction with the wallet;

wherein the smart contract code provides a party with signing authority on an assigning wallet assigned to the root right permission to delegate a second delegated right to a second wallet, thereby creating an extended right, and further comprising recording a second data structure in a delegation registry being accomplished in response to a delegation of the second delegated right resulting in a second data structure in the delegation registry referencing at least one smart contract wherein the second delegated right applies, the second delegated right, the assigning wallet, and the second wallet to which the second delegated right was delegated.

10. The system of claim 9 , wherein the right, the delegated right, and the extended right are derived directly or indirectly from the root right, to thereby provide a chain of authority configured to be traced back to the root right.

11. The system of claim 9 , wherein a smart contract interface specification is used for communication between the smart contract code and a delegation registry.

12. The system of claim 9 , wherein a root wallet assigned to the root right is configured to revoke the delegated right by removing the data structure from a delegation registry that represents the delegated right, or replacing the delegation of the delegated right by delegating the delegated right to another wallet by changing the data structure in the delegation registry that represents the delegated right.

13. The system of claim 9 , further comprising the wallet delegating the delegated right to another wallet to thereby further isolate a root wallet assigned to the root right from cyber risk associated with signing transactions.

14. The system of claim 9 , wherein a rights management data structure model is applied whereby new rights are formed from existing rights, wherein the new rights include at least one management right permitting creation, management, and enforcement of a delegated right, the rights management data structure model expressing the at least one management right to authorize a state change by deploying a rights management smart contract code that enables a rights management structure, the rights management data structure model being defined by a party possessing the root wallet.

15. The system of claim 14 , wherein the rights management data structure model includes an attribute management registry containing at least one attribute, wherein the at least one attribute is an attribute data structure containing a name, a storage location and data type, and an indication of an authorized party authorized to create, read, update, or delete data and wherein an attestation registry stores attestation attribute values associated with objects assigned by the authorized party, the attestation attribute values representing roles which are configured to be used to capture the delegated right assigned to the wallet, to thereby facilitate the creation and management of a role right configured to be used to govern the delegated right.

16. The system of claim 9 , wherein a data structure is recorded in a delegation registry that represents the delegated right.

17. A computer system for secure authorization of transactions in a decentralized computing network, the system comprising:

at least one computer hardware processor;

a root right expressed in a smart contract code; and

at least one memory device having computer readable instructions stored thereon which are configured to be executed by the at least one computer hardware processor;

wherein the root right expressed in the smart contract code is executed on the decentralized computing network, wherein the root right permits execution of specified functions;

wherein a right to permit execution of at least one of the specified functions is configured to be delegated from the root right to a wallet on the decentralized network to create a delegated right, wherein the wallet is configured to sign transactions corresponding to the at least one of the specified functions;

wherein a data structure is recorded in a delegation registry that represents the delegated right;

wherein the wallet is configured to authorize a creation of a basic object on the decentralized computing network by signing a transaction with the wallet;

wherein the smart contract code provides a party with signing authority on an assigning wallet assigned to the root right permission to delegate a second delegated right to a second wallet, thereby creating an extended right, and further comprising recording a second data structure in a delegation registry being accomplished in response to a delegation of the second delegated right resulting in a second data structure in the delegation registry referencing at least one smart contract wherein the second delegated right applies, the second delegated right, the assigning wallet, and the second wallet to which the second delegated right was delegated.

18. The system of claim 17 , wherein a data structure is recorded in a delegation registry that represents the delegated right.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 19, 2024
From: DONEY, GEORGE DANIEL
To: SECURRENCY, INC.
Reel/Frame 067161/0553 →
MERGER AND CHANGE OF NAME Recorded Apr 19, 2024
From: SECURRENCY, INC.; SNAPDRAGON MERGER SUB INC.; DTCC DIGITAL (US) INC.
To: DTCC DIGITAL (US) INC.
Reel/Frame 067159/0338 →
Continuity (3)
Continuation 17344275 · Jun 10, 2021
Provisional Application 63037034 · Jun 10, 2020
Related Publication 20240232396A1 · Jul 11, 2024
References Cited (31)
US 10489597B2 · Safford et al. · 2019 [cited by applicant]
US 10540654B1 · James et al. · 2020 [cited by applicant]
US 10673626B2 · Sandberg-Maitland et al. · 2020 [cited by applicant]
US 10735202B2 · Jayachandran et al. · 2020 [cited by applicant]
US 11159307B2 · Bathen et al. · 2021 [cited by applicant]
US 11200569B1 · James · 2021 [cited by examiner]
US 11250423B2 · Heyner · 2022 [cited by applicant]
US 11250466B2 · Soundararajan et al. · 2022 [cited by applicant]
US 11308487B1 · Foster et al. · 2022 [cited by applicant]
US 11755998B2 · Malvankar et al. · 2023 [cited by applicant]
US 20190229931A1 · Uzelac · 2019 [cited by examiner]
US 20190372786A1 · Ra et al. · 2019 [cited by applicant]
US 20200034457A1 · Brody · 2020 [cited by examiner]
US 20200117690A1 · Tran et al. · 2020 [cited by applicant]
US 20200151842A1 · O'Brien · 2020 [cited by applicant]
US 20200210998A1 · So · 2020 [cited by examiner]
US 20200226123A1 · Nixon et al. · 2020 [cited by applicant]
US 20200250295A1 · Padmanabhan · 2020 [cited by examiner]
US 20200320417A1 · Corning · 2020 [cited by examiner]
US 20200334674A1 · Youngblood et al. · 2020 [cited by applicant]
US 20200334773A1 · Spangenberg et al. · 2020 [cited by applicant]
US 20200344132A1 · Padmanabhan · 2020 [cited by applicant]
US 20200344233A1 · Lai et al. · 2020 [cited by applicant]
US 20200379977A1 · Saket · 2020 [cited by examiner]
US 20200382301A1 · Saket · 2020 [cited by examiner]
US 20200394648A1 · Blackshear · 2020 [cited by examiner]
US 20210377263A1 · Law · 2021 [cited by applicant]
US 20210390191A1 · Doney · 2021 [cited by applicant]
US 20220051261A1 · Vetas · 2022 [cited by applicant]
US 20220101326A1 · Kim et al. · 2022 [cited by applicant]
Pal, Shantanu, et al. “On the design of a flexible delegation model for the Internet of Things using blockchain.” IEEE Transactions on Industrial Informatics 16.5 (2019): 3521-3530. (Year: 2019). [cited by examiner]