IP Library Granted Patent US 11,367,148
Granted Patent B2
US 11,367,148 · App. 16/850,432 · Granted Jun 21, 2022

Distributed ledger based mass balancing via secret sharing

Inventors: Kilian Becher (Dresden, DE); Axel Schroepfer (Borthen, DE); Mirko Schaefer (Dresden, DE)
Assignee: SAP SE
G06Q40/125G06Q30/0185G06Q30/0605H04L9/0637H04L9/0825
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,367,148
App. No.
16/850,432
Granted
Jun 21, 2022
Kind
B2
Abstract

A producer may supply amounts x i of a good to a plurality of consumers C i in a series of transactions and be subject to a mass balancing verification protocol after every K transactions. A producer platform may compute K random shares (r 1 through r K ) of a random value r, publish blinded amounts t i representing x i +r i to a secure, distributed transaction ledger, and transmit an encrypted r i to consumer C i using an asymmetric cryptosystem. A consumer platform may receive and decrypt r i (while the consumer Ci actually receives an amount {circumflex over (x)} i of the good from the producer), compute {circumflex over (x)} i +r i and generate a fraud alert signal if it differs from the published t i . The consumer platform may also transmit an encrypted rolling sum value to a next consumer C i+1 . A verifier platform may, after K transactions, execute the mass balance verification protocol to determine a total amount of the good that the producer had collectively supplied to the consumers C i . The verifier platform may also generate a fraud alert signal when appropriate based on the total amount and a maximum allowed amount.

Claims (52)

1. A system associated with a producer who supplies amounts x i of a good to a plurality of consumers C i in a series of transactions and is subject to a mass balancing verification protocol after every K transactions, comprising:

a secure, distributed transaction ledger that stores information associated with amounts x i in a privacy-preserving form;

a producer platform, including:

a computer processor, and

computer memory, coupled to the computer processor, storing instructions that, when executed by the computer processor cause the processor to:

(i) compute K random shares (r 1 through r K ) of a random value r,

(ii) publish blinded amounts t i representing x i +r i to the secure, distributed transaction ledger using additive secret sharing, and

(iii) transmit an encrypted r i to consumer C i using an asymmetric cryptosystem;

a consumer platform for each consumer C i , to:

(i) receive the encrypted r i from the producer platform while the consumer C i actually receives an amount {circumflex over (x)} i of the good from the producer,

(ii) execute a decryption algorithm to determine r i ,

(iii) automatically compute {circumflex over (x)} i +r i and transmit a fraud alert signal if it differs from the published t i , and

(iv) transmit an encrypted rolling sum value to a next consumer C i+1 ; and

a verifier platform to, after K transactions, execute the mass balance verification protocol and automatically determine a total amount of good that the producer had collectively supplied to the consumers C i , and further to transmit a fraud alert signal based on the total amount and a maximum allowed amount.

2. The system of claim 1 , wherein the good supplied by the producer is associated with at least one of: (i) a product, (ii) a service, and (iii) a natural resource.

3. The system of claim 1 , wherein the verifier platform is associated with at least one of: (i) a governmental authority, and (ii) a non-governmental organization.

4. The system of claim 1 , wherein the secure, distributed transaction ledger is associated with blockchain technology.

5. The system of claim 1 , wherein the asymmetric cryptosystem is associated with three polynomial time algorithms: (i) a probabilistic key-generation algorithm, (ii) an encryption algorithm, (iii) a probabilistic encryption algorithm, and (iv) a decryption algorithm.

6. The system of claim 5 , wherein the asymmetric cryptosystem uses individual key pairs consisting of a public encryption key pk i and a secret decryption key sk i .

7. The system of claim 1 , wherein the mass balancing verification protocol supports multiple producers.

8. The system of claim 1 , wherein a balance is cached after every K-cycle to achieve a number of additions that is independent of a number of previous K-cycles.

9. The system of claim 1 , wherein communications between producers and consumers are performed via at least one of: (i) a direct communication channel, and (ii) the secure, distributed transaction ledger.

10. The system of claim 1 , wherein communications between consumers are performed via at least one of: (i) a direct communication channel, and (ii) the secure, distributed transaction ledger.

11. A computer-implemented method associated with a producer who supplies amounts x i of a good to a plurality of consumers C i in a series of transactions and is subject to a mass balancing verification protocol after every K transactions, comprising:

computing, by a computer processor of a producer platform, K random shares (r 1 through r K ) of a random value r;

publishing, by the producer platform, blinded amounts t i representing x i +r i to a secure, distributed transaction ledger using additive secret sharing to store information associated with amounts x i in a privacy-preserving form;

transmitting, by the producer platform, an encrypted r i to consumer C i using an asymmetric cryptosystem;

receiving, at a consumer platform of consumer C i , the encrypted r i from the producer platform while the consumer C i actually receives an amount {circumflex over (x)} i of the good from the producer;

executing, by the consumer platform, a decryption algorithm to determine r i ;

automatically computing {circumflex over (x)} i +r i and transmitting, by the consumer platform, a fraud alert signal if differs from the published t i ;

transmitting an encrypted rolling sum value to a next consumer C i+1 ;

executing, by a verifier platform after K transactions, the mass balance verification protocol and automatically determine a total amount of good that the producer had collectively supplied to the consumers C i ; and

transmitting, by the verifier platform, a fraud alert signal based on the total amount and a maximum allowed amount.

12. The method of claim 11 , wherein the good supplied by the producer is associated with at least one of: (i) a product, (ii) a service, and (iii) a natural resource.

13. The method of claim 11 , wherein the verifier platform is associated with at least one of: (i) a governmental authority, and (ii) a non-governmental organization.

14. The method of claim 11 , wherein the secure, distributed transaction ledger is associated with blockchain technology.

15. The method of claim 11 , wherein the asymmetric cryptosystem is associated with three polynomial time algorithms: (i) a probabilistic key-generation algorithm, (ii) an encryption algorithm, (iii) a probabilistic encryption algorithm, and (iv) a decryption algorithm.

16. The method of claim 15 , wherein the asymmetric cryptosystem uses individual key pairs consisting of a public encryption key pk i and a secret decryption key sk i .

17. The method of claim 11 , wherein the mass balancing verification protocol supports multiple producers.

18. A non-transitory, computer-readable medium storing instructions, that, when executed by a processor, cause the processor to perform a method associated with a producer who supplies amounts xi of a good to a plurality of consumers C i in a series of transactions and is subject to a mass balancing verification protocol after every K transactions, the method comprising:

computing, by a computer processor of a producer platform, K random shares (r 1 through r K ) of a random value r;

publishing, by the producer platform, blinded amounts t i representing x i +r i to a secure, distributed transaction ledger using additive secret sharing to store information associated with amounts x i in a privacy-preserving form;

transmitting, by the producer platform, an encrypted r i to consumer C i using an asymmetric cryptosystem;

receiving, at a consumer platform of consumer C i , the encrypted r i from the producer platform while the consumer C i actually receives an amount {circumflex over (x)} i of the good from the producer;

executing, by the consumer platform, a decryption algorithm to determine r i ;

automatically computing {circumflex over (x)} i +r i and transmitting, by the consumer platform, a fraud alert signal if differs from the published t i ;

transmitting an encrypted rolling sum value to a next consumer C i+1 ;

executing, by a verifier platform after K transactions, the mass balance verification protocol and automatically determine a total amount of good that the producer had collectively supplied to the consumers C i ; and

transmitting, by the verifier platform, a fraud alert signal based on the total amount and a maximum allowed amount.

19. The medium of claim 18 , wherein a balance is cached after every K-cycle to achieve a number of additions that is independent of a number of previous K-cycles.

20. The medium of claim 18 , wherein communications between producers and consumers are performed via at least one of: (i) a direct communication channel, and (ii) the secure, distributed transaction ledger.

21. The medium of claim 18 , wherein communications between consumers are performed via at least one of: (i) a direct communication channel, and (ii) the secure, distributed transaction ledger.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 16, 2020
From: BECHER, KILIAN; SCHROEPFER, ALEX; SCHAEFER, MIRKO
To: SAP SE
Reel/Frame 052417/0803 →
Continuity (1)
Related Publication 20210327002A1 · Oct 21, 2021