IP Library › Granted Patent US 11,240,028
Granted Patent B2
US 11,240,028 · App. 16/404,861 · Granted Feb 1, 2022

Trust service engine for external blockchain verification

Inventors: Francois Vigneron (Kehl am Rhein, FR); Saumyadipta Das (Bhubaneswar, IN); Soumya R (Bangalore, IN); Manjusha Nair (Bangalore, IN)
Assignee: SAP SE
H04L9/321G06F21/645H04L9/3263H04L2209/38
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,240,028
App. No.
16/404,861
Filed
May 7, 2019
Granted
Feb 1, 2022
Kind
B2
Art Unit
2432
USPC
713/155
Abstract

Provided is a system and method for implementing remote trust services for blockchain. In one example, the method may include one or more of retrieving block content from a portion of a blockchain via an application programming interface (API), in response to a triggering event being detected, calling an off-chain trust service to sign the retrieved block content, receiving accreditation results of the retrieved block content from the off-chain trust service, the accreditation results comprising an indication of whether the retrieved block content has been successfully signed, and writing the received accreditation results to a block within the blockchain.

Claims (34)

1. A computing system comprising:

a memory storing program instructions; and

processor coupled to the memory and configured to execute the program instructions, wherein when executed the program instructions cause the processor to:

retrieve block content from a portion of a blockchain via an application programming interface (API), in response to a triggering event,

call an off-chain trust service to sign the retrieved block content,

receive accreditation results of the retrieved block content from the off-chain trust service, where the accreditation results comprise an indication of whether the retrieved block content has been successfully signed, and

write the received accreditation results to a block within the blockchain.

2. The computing system of claim 1 , wherein the triggering event comprises at least one of a predefined number of blocks being created since a last accreditation, a predetermined amount of time expiring since a last accreditation, a predefined time occurring, and a call from a blockchain service.

3. The computing system of claim 1 , wherein when executed the program instructions further cause the processor to retrieve block content, block hashes, and block numbers from one or more blocks among a hash-linked chain of blocks on the blockchain since a last accreditation.

4. The computing system of claim 1 , wherein when executed the program instructions further cause the processor to generate a signature request based on one or more specifications supported by the off-chain trust service, and transmit the signature request to the off-chain trust service via a second API.

5. The computing system of claim 4 , wherein the signature request comprises a file that contains signature instructions that include a certificate to use and a chain of characters to be hashed by the off-chain trust service.

6. The computing system of claim 1 , wherein the received accreditation results comprise an identification of an accredited block and an identifier of the off-chain trust service that performed the accreditation.

7. The computing system of claim 1 , wherein when executed the program instructions further cause the processor to write the received accreditation results to a block on the blockchain that also includes content from other participants of the blockchain.

8. The computing system of claim 1 , wherein when executed the program instructions further cause the processor to write the received accreditation results to an accreditation block that stores accreditation results without storing content from other participants of the underlying blockchain.

9. The computing system of claim 1 , wherein when executed the program instructions further cause the processor to call a signature verification service to audit the accreditation results written to the blockchain.

10. The computing system of claim 9 , wherein the signature verification service is called to verify an external trust service signature stored within a block and an integrity of a chain portion between an accredited block and an accrediting block.

11. A method comprising:

retrieving block content from a portion of a blockchain via an application programming interface (API), in response to a triggering event being detected;

calling an off-chain trust service to sign the retrieved block content;

receiving accreditation results of the retrieved block content from the off-chain trust service, the accreditation results comprising an indication of whether the retrieved block content has been successfully signed; and

writing the received accreditation results to a block within the blockchain.

12. The method of claim 11 , wherein the retrieving comprises retrieving block content, block hashes, and block numbers from one or more blocks among a hash-linked chain of blocks on the blockchain since a last accreditation.

13. The method of claim 11 , wherein the calling comprises generating a signature request based on one or more specifications supported by the off-chain trust service, and transmitting the signature request via a second API to the off-chain trust service.

14. The method of claim 13 , wherein the signature request comprises a file containing signature instructions including a certificate to use and a chain of characters to be hashed by the off-chain trust service.

15. The method of claim 11 , wherein the received accreditation results comprise an identification of an accredited block and an identifier of the off-chain trust service that performed the accreditation.

16. The method of claim 11 , wherein the writing comprises writing the received accreditation results to a block on the blockchain that also includes content from other participants of the blockchain.

17. The method of claim 11 , wherein the writing comprises writing the received accreditation results to an accreditation block that stores accreditation results without storing content from other participants of the underlying blockchain.

18. The method of claim 11 , further comprising calling a signature verification service to audit the accreditation results written to the blockchain.

19. The method of claim 11 , wherein the signature verification service is called to verify an external trust service signature stored within a block and an integrity of a chain portion between an accredited block and an accrediting block.

20. A non-transitory computer-readable medium comprising instructions which when executed by a processor cause a computer to perform a method comprising:

retrieving block content from a portion of a blockchain via an application programming interface (API), in response to a triggering event being detected;

calling an off-chain trust service to sign the retrieved block content;

receiving accreditation results of the retrieved block content from the off-chain trust service, the accreditation results comprising an indication of whether the retrieved block content has been successfully signed; and

writing the received accreditation results to a block within the blockchain.

Assignments (2)
CORRECTIVE ASSIGNMENT TO CORRECT THE SECOND INVENTOR'S NAME PREVIOUSLY RECORDED AT REEL: 049097 FRAME: 0564. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT . Recorded Nov 22, 2021
From: VIGNERON, FRANCOIS; DAS, SAUMYADIPTA; R, SOUMYA; NAIR, MANJUSHA
To: SAP SE
Reel/Frame 058218/0526 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 7, 2019
From: VIGNERON, FRANCOIS; DAS, SAUMYADITA; R, SOUMYA; NAIR, MANJUSHA
To: SAP SE
Reel/Frame 049097/0564 →
Continuity (1)
Related Publication 20200358612A1 · Nov 12, 2020