Secure distribution of digital assets within a computing environment using permissioned distributed ledgers
The disclosed exemplary embodiments include computer-implemented systems, devices, and processes that securely distribute digital assets within a computing environment using permissioned distributed ledgers. For example, an apparatus may receive, from a computing system, an allocation request, a first digital signature applied to the allocation request, and a second digital signature applied to the allocation request and to the first digital signature. Based on a validation of the first and second digital signatures, the apparatus may approve the allocation request and allocate a digital asset to the first device in accordance with the approved allocation request. The apparatus may also perform operations that record a public key and asset data identifying a digital asset onto a distributed ledger, and may generate and transmit, to the first device, confirmation data indicative of the allocation of the digital asset to the first device.
1. An apparatus, comprising:
a communications interface;
a memory storing instructions; and
at least one processor coupled to the communications interface and the memory, the at least one processor being configured to execute the instructions to:
receive, from a computing system via the communications interface, a request, a first digital signature applied to the request, and a second digital signature applied to the request and to the first digital signature, the request comprising a first public key of a first device, and the request being indicative of a recordation of data associated with a second device within a first element of a distributed ledger;
perform operations that approve the request based on a validation of the first and second digital signatures, and based on a determination that the first element of the distributed ledger includes a second public key of the second device and that at least one second element of the distributed ledger fails to include the second public key; and
transmit confirmation data to the first device via the communications interface, the confirmation data being indicative of a transfer of a digital asset to the first device, and being indicative of a recordation of the first public key and asset data characterizing the digital asset within a third element of the distributed ledger.
2. The apparatus of claim 1 , wherein the at least one processor is further configured to execute the instructions to perform operations that record the first public key and the asset data within the third element of the distributed ledger.
3. The apparatus of claim 2 , wherein the at least one processor is further configured to execute the instructions to transmit, via the communications interface, the first public key and the asset data to one or more peer computing systems, the one or more peer computing systems being configured to perform operations that record the first public key and the asset data within the third element of the distributed ledger.
4. The apparatus of claim 1 , wherein:
the request comprises an identifier of the first element of the distributed ledger; and
the at least one processor is further configured to execute the instructions to determine, based on the identifier, that the first element includes the second public key and to determine that the at least one second element of the distributed ledger fails to include the second public key.
5. The apparatus of claim 1 , wherein:
the request comprises an allocation request associated with a referral process involving the first device; and
the at least one processor is further configured to execute the instructions to:
load, from the memory, allocation data identifying one or more allocation criteria;
establish that the allocation request is consistent with the one or more allocation criteria based on the determination that the first element of the distributed ledger includes the second public key and the at least one second element of the distributed ledger fails to include the second public key; and
based on a validation of the first and second digital signatures, and based on the established consistency between the allocation request and the one or more allocation criteria, approve the allocation request and allocate the digital asset to the first device in accordance with the approved allocation request.
6. The apparatus of claim 5 , wherein the at least one processor is further configured to execute the instructions to obtain the asset data from a portion of the allocation data.
7. The apparatus of claim 1 , wherein:
the request is generated by an application program executed at the first device; and
the first element of the distributed ledger comprises a registration object, the registration object comprising the first public key and registration data associated with the first device, the registration data comprising at least one of a network address of the first device or an application cryptogram of the application program.
8. The apparatus of claim 7 , wherein the at least one processor is further configured to:
based on the validation of the first and second digital signatures, and based on the determination that the first element of the distributed ledger includes the second public key and that the at least one second element of the distributed ledger fails to include the second public key, generate an allocation object that includes the first public key and the asset data; and
perform operations that record the allocation object within the third element of the distributed ledger, the first public key associating the registration object and the allocation object within the first and third elements of the distributed ledger.
9. The apparatus of claim 1 , wherein:
the request further comprises a first code challenge generated by the apparatus based on at least one of a network address of the first device or an application cryptogram of an application program executed at the first device; and
the at least one processor is further configured to execute the instructions to:
obtain the first code challenge from the request and load, from the memory, a second code challenge associated with at least one of the network address or the application cryptogram;
determine that the first code challenge corresponds to the second code challenge; and
approve the request based on the determination that the first code challenge corresponds to the second code challenge, based on the validation of the first and second digital signatures, and based on the determination that the first element the distributed ledger includes the second public key and that the at least one second element of the distributed ledger fails to include the second public key.
10. The apparatus of claim 1 , wherein:
the request is generated by a first application program executed at the first device;
the first public key is associated with the first application program, and the second public key is associated with a second application program executed at the second device; and
the first device is operable by a first customer, the second device is operable by a second customer, and the recorded data associated with the second device is further indicative of a successful registration of the second customer through a referral process.
11. A computer-implemented method, comprising:
receiving, from a computing system using at least one processor, a request, a first digital signature applied to the request, and a second digital signature applied to the request and to the first digital signature, the request comprising a first public key of a first device, and the request being indicative of a recordation of data associated with a second device within a first element of a distributed ledger;
performing operations, using the at least one processor, that approve the request based on a validation of the first and second digital signatures, and based on a determination that the first element of the distributed ledger includes a second public key of the second device and that at least one second element of the distributed ledger fails to include the second public key; and
transmit confirmation data to the first device using the at least one processor, the confirmation data being indicative of a transfer of a digital asset to the first device, and bring indicative of a recordation of the first public key and asset data characterizing the digital asset within a third element of the distributed ledger.
12. An apparatus, comprising:
a communications interface;
a memory storing instructions; and
at least one processor coupled to the communications interface and to the memory, the at least one processor being configured to execute the instructions to:
receive, from a first device via the communications interface, a request and a first digital signature applied to the request, the request comprising a first public key of the first device, and the request being indicative of a recordation of data associated with a second device within a first element of a distributed ledger;
based on a validation of the first digital signature, approve the request and apply a second digital signature to the request and to the first digital signature; and
transmit, via the communications interface, the request, the first digital signature, and the second digital signature to a computing system, the computing system being configured to validate the first and second digital signatures, determine that the first element of the distributed ledger includes a second public key of the second device and that at least one second element of the distributed ledger fails to include the second public key, and generate confirmation data indicative of a transfer of a digital asset to the first device, and indicative of a recordation of the first public key and asset data characterizing the digital asset within a third element of the distributed ledger.
13. The apparatus of claim 12 , wherein the at least one processor is further configured to execute the instructions to:
validate the first digital signature using the second public key; and
apply the second digital signature to the request and to the first digital signature using a private key of the apparatus.
14. The apparatus of claim 13 , wherein:
the second digital signature is indicative of the approval of the request by the apparatus; and
the confirmation data is indicative of a further approval of the request by the computing system.
15. The apparatus of claim 12 , wherein:
the first element of the distributed ledger comprises a registration object, the registration object comprising the first public key and registration data associated with the first device, the registration data comprising at least one of a network address of the first device or an application cryptogram of an application program executed at the first device; and
the third element of the distributed ledger comprises an allocation object, the allocation object comprising the first public key and the asset data, the first public key associating the registration and allocation objects within the first and third elements of the distributed ledger.
16. The apparatus of claim 12 , wherein the at least one processor is further configured to execute the instructions to:
receive the confirmation data from the computing system via the communications interface from the computing system; and
transmit the confirmation data to the first device via the communications interface, the first device being configured to present a portion of the confirmation data within a digital interface.
17. The apparatus of claim 12 , wherein the computing system is further configured to perform operations that record the first public key and the asset data within the third element of the distributed ledger.
18. The apparatus of claim 12 , wherein:
the request further comprises a first digital token indicative of a prior authentication associated with the first device; and
the at least one processor is further configured to execute the instructions to:
obtain the first digital token from the request and load, from the memory, a second digital token associated with at least one of a network address of the first device or an application cryptogram of an application program executed at the first device;
determine that the first digital token corresponds to the second digital token; and
based on the determination that the first digital token corresponds to the second digital token, and based on the validation of the first digital signature, approve the request and apply the second digital signature to the request and the first digital signature.
19. The apparatus of claim 12 , wherein:
the request is generated by a first application program executed at the first device;
the first public key is associated with the first application program, and the second public key is associated with a second application program executed at the second device; and
the first device is operable by a first customer, the second device is operable by a second customer, and the recorded data associated with the second device is further indicative of a successful registration of the second customer through a referral process.
20. The apparatus of claim 12 , wherein:
the request comprises an allocation request associated with a referral process involving the first device; and
the at least one processor is further configured to execute the instructions to, based on the validation of the first digital signature, approve the allocation request and apply the second digital signature to the request and to the first digital signature; and
the computing system is further configured to:
establish that the allocation request is consistent with one or more allocation criteria based on the determination that the first element of the distributed ledger includes the second public key and the at least one second element of the distributed ledger fails to include the second public key; and
based on a validation of the first and second digital signatures, and based on the established consistency between the allocation request and the one or more allocation criteria, allocate a digital asset to the first device in accordance with the approved allocation request.