Security incident blockchain
The technology disclosed herein provides a method to use a private distributed blockchain to generate a secure encrypted record of authentication attempts for a set of distributed network attached user devices or nodes. In at least one implementation, the method includes initiating a security incident blockchain for a network comprising a plurality nodes, provisioning each the plurality of nodes in the network with a synchronous key wherein a master node has a copy of all of the synchronous keys, adding a configuration transaction to the security incident blockchain, the configuration transaction including security policies for the plurality of nodes in the network, detecting a security incident at one of the plurality of nodes in the network, and in response to the detection of the security incident, performing a security incident response in compliance with the security policies as provided in the configuration transaction.
1. A method comprising:
initiating a security incident blockchain for a network comprising a plurality nodes;
provisioning each the plurality of nodes in the network with a synchronous key wherein a master node has a copy of all of the synchronous keys;
adding a configuration transaction to the security incident blockchain, the configuration transaction including security policies for the plurality of nodes in the network;
detecting a security incident at one of the plurality of nodes in the network; and
in response to the detection of the security incident, performing a security incident response in compliance with the security policies as provided in the configuration transaction.
2. The method of claim 1 , further comprising generating a security incident transaction based on the detected security incident.
3. The method of claim 2 , wherein the security incident transaction further comprising an identifier of a node detecting the security incident, a plain text description of the security incident, and a cipher text regarding the security incident.
4. The method of claim 3 , wherein the cipher text regarding the security incident is generated by encrypting content of P 2 using an advanced encryption standard (AES) key of the node detecting the incident.
5. The method of claim 2 , further comprising communicating the security incident transaction to other of the plurality of nodes.
6. The method of claim 5 , further comprising:
in response to receiving the security incident transaction, generating a security incident response, updating the security policies for the plurality of nodes in the network, and generating a new configuration transaction using the updated security policies.
7. The method of claim 1 , wherein the plurality of nodes of the network comprising one or more user nodes, one or more control nodes, and a master node.
8. The method of claim 7 , further comprising:
receiving the security incident transaction at a routing node outside the network comprising a plurality nodes; and
determining if the security incident transaction is to be communicated to another blockchain related to another network of nodes.
9. One or more non-transitory processor-readable storage media encoding processor-executable instructions for executing on a computer system a computer process, the computer process comprising:
initiating a security incident blockchain for a network comprising a plurality nodes;
provisioning each the plurality of nodes in the network with a synchronous key wherein a master node has a copy of all of the synchronous keys;
adding a configuration transaction to the security incident blockchain, the configuration transaction including security policies for the plurality of nodes in the network;
detecting a security incident at one of the plurality of nodes in the network; and
in response to the detection of the security incident, performing a security incident response in compliance with the security policies as provided in the configuration transaction.
10. The one or more non-transitory processor-readable storage media of claim 9 wherein the computer process further comprising generating a security incident transaction based on the detected security incident.
11. The one or more non-transitory processor-readable storage media of claim 10 , wherein the security incident transaction further comprising an identifier of a node detecting the security incident, a plain text description of the security incident, and a cipher text regarding the security incident.
12. The one or non-transitory more processor-readable storage media of claim 10 , wherein the computer process further comprising communicating the security incident transaction to other of the plurality of nodes.
13. The one or non-transitory more processor-readable storage media of claim 12 , wherein the computer process further comprising:
in response to receiving the security incident transaction, generating a security incident response, updating the security policies for the plurality of nodes in the network, and generating a new configuration transaction using the updated security policies.
14. The one or non-transitory more processor-readable storage media of claim 10 , wherein the plurality of nodes of the network comprising one or more user nodes, one or more control nodes, and a master node.
15. The one or more non-transitory processor-readable storage media of claim 14 , wherein the computer process further comprising:
receiving the security incident transaction at a routing node outside the network comprising a plurality nodes; and
determining if the security incident transaction is to be communicated to another blockchain related to another network of nodes.
16. A system comprising:
one or more processors;
a memory;
a master node configured to:
initiate a security incident blockchain for a network comprising a plurality nodes;
provision each the plurality of nodes in the network with a synchronous key wherein a master node has a copy of all of the synchronous keys;
add a configuration transaction to the security incident blockchain, the configuration transaction including security policies for the plurality of nodes in the network; and
a user node configured to:
detect a security incident at one of the plurality of nodes in the network; and
in response to the detection of the security incident, perform a security incident response in compliance with the security policies as provided in the configuration transaction.
17. The system of claim 16 wherein the user node is further configured to generate a security incident transaction based on the detected security incident.
18. The system of claim 17 wherein the security incident transaction further comprising an identifier of a node detecting the security incident, a plain text description of the security incident, and a cipher text regarding the security incident.
19. The system of claim 18 , wherein the cipher text regarding the security incident is generated by encrypting content of P 2 using an advanced encryption standard (AES) key of the node detecting the incident.
20. The system of claim 18 , wherein the user node is further configured to communicate the security incident transaction to other of the plurality of nodes.