Systems and Methods for Protecting Against Token-Based Malicious Scripts
Non-fungible token (NFT) platforms in accordance with various embodiments of the invention are described. In an embodiment of the NFT platform includes storing several tokens, where a token includes several data elements and associated access control settings for accessing the several data elements; identifying a script to execute that is associated with a first token, where the script includes at least one instruction for accessing data from at least one data element of a second token; determining, based on access control settings of the second token, that the first token has particular access rights to the at least one data element of the second token; and executing the script based on the particular access rights of the first token.
1 . (canceled)
2 . A method for managing access related to a token, the method comprising:
storing a plurality of tokens on a blockchain ledger;
recording, on the blockchain ledger, a conditional request to perform an action on a first token from the plurality of tokens, wherein the first token from the plurality of tokens is associated with an executable script, wherein the executable script comprises at least one instruction for performing an action on the first token based on a condition associated with the first token;
identifying the condition associated with the first token;
determining, using the first token and the conditional request, if the condition is satisfied, wherein the condition is satisfied when an event matching a requirement has been identified; and
executing the script based on the determination that the condition is satisfied to perform the requested conditional action on the first token.
3 . The method of claim 2 , wherein the first token is selected from a group comprising: an anchor token, a promise token, a fungible token, and a non-fungible token.
4 . The method of claim 2 , wherein the executable script is only allowed to execute after it has been determined to be safe.
5 . The method of claim 4 , wherein the determination involves the execution of the script in a sandbox.
6 . The method of claim 2 , wherein the request comprises a digital signature.
7 . The method of claim 6 , wherein the digital signature is a Merkle signature.
8 . The method of claim 2 , wherein each of the plurality of tokens comprises a plurality of data elements and associated access control settings for accessing the plurality of data elements.
9 . The method of claim 2 , wherein the execution of the script comprises executing the at least one instruction.
10 . The method of claim 2 , wherein the execution of the script comprises executing a modification of the at least one instruction.
11 . The method of claim 2 , the execution of the script comprises conveying a message to an entity indicated by the at least one instruction
12 . The method of claim 2 , wherein the execution of the script based on the determination of condition comprises blocking the script from executing when the condition associated with the first token is determined to not have been satisfied.
13 . The method of claim 2 , wherein determining that the condition is satisfied comprises performing a match between the first token and an input.
14 . The method of claim 2 , further comprising analyzing an access control list to determine access control settings of a second token, wherein the access control list provides access control settings for a plurality of tokens.
15 . The method of claim 2 , further comprising analyzing a certificate associated with a second token to determine access control settings of the second token, wherein the certificate is generated by an external service provider.
16 . The method of claim 2 , wherein for a particular token, access control settings specify access rights for at least one other token to the particular token, including permitted and restricted access and types of access to data elements of the particular token.
17 . The method of claim 2 , wherein a type of access is at least one access type selected from the group consisting of: read access, write access, and access to initiate execution of a process on a particular token.
18 . The method of claim 2 , wherein the association between the first token and the executable script comprises the first token storing at least a part of the executable script.
19 . The method of claim 2 , wherein the association between the first token and the executable script comprises an entity external to the first token storing at least a part of the executable script.
20 . The method of claim 2 , wherein the at least one instruction causes the execution of a script associated with a second token.
21 . The method of claim 2 , wherein access control settings of a particular token are expressed at least in part by a certificate associated with the particular token.