Tiered certificate authority systems for blockchain smart contracts on blockchain cybersecurity platforms
In one embodiment, a method includes identifying first entities by a first root authority entity, authorizing one or more first entities to be certificate authorities by the first root authority entity, wherein each certificate authority is configured to audit a smart contract in a development environment before it is deployed on a first blockchain network and authorized to issue a certificate for each smart contract audited in the development environment based on a determination that the corresponding smart contract deployed on the first blockchain network matches the smart contract that was audited in the development environment, determining certificate authority authorization parameters are not satisfied for at least a first certificate authority, and revoking the certificate authority authorization for the first certificate authority by the first root authority entity, wherein each certificate issued by the first certificate authority prior to the revocation remains valid after the revocation.
1. A method comprising, by one or more servers associated with a blockchain cybersecurity platform:
identifying, by a first root authority entity of one or more root authority entities associated with the blockchain cybersecurity platform, a plurality of first entities associated with the one or more root authority entities;
authorizing, by the first root authority entity, from the plurality of first entities, one or more first entities to be certificate authorities, wherein each certificate authority is configured to audit a smart contract in a development environment before the smart contract is deployed on a first blockchain network, and wherein each certificate authority is authorized to issue, for each smart contract audited by the certificate authority in the development environment, a certificate for the smart contract based on a determination that the corresponding smart contract deployed on the first blockchain network matches the smart contract that was audited in the development environment;
determining, by the first root authority entity, for at least a first certificate authority authorized by the first root authority entity, that one or more certificate authority authorization parameters are not satisfied; and
revoking, by the first root authority entity, the certificate authority authorization for the first certificate authority, wherein each certificate issued by the first certificate authority prior to the revocation remains valid after the revocation of the certificate authority authorization.
2. The method of claim 1 , wherein the first root authority entity is the blockchain cybersecurity platform.
3. The method of claim 1 , wherein each issued certificate comprises data associated with the first root authority entity that issued the certificate.
4. The method of claim 1 , wherein each issued certificate is written to the first blockchain network.
5. The method of claim 1 , wherein each issued certificate comprises data configured for public queries.
6. The method of claim 1 , wherein each issued certificate comprises one or more of:
an address associated with the corresponding smart contract;
a hash associated with the corresponding smart contract;
a size associated with the corresponding smart contract;
a time slot at which the certificate was issued;
a status of the certificate;
an upgrade authority for the corresponding smart contract;
a certificate edition;
an address of an account that stores additional data about the certified smart contract or an audit report associated with the corresponding smart contract; or
an account address associated with the first root authority entity.
7. The method of claim 1 , wherein determining that the certificate authority authorization parameters are not satisfied for the first certificate authority is based at least in part on an automatic recurring validation process associated with one or more of the certificate authorities.
8. The method of claim 1 , wherein determining that the certificate authority authorization parameters are not satisfied for the first certificate authority is based at least in part on an automatic determination that a value for at least one of the certificate authority authorization parameters exceeds a threshold value.
9. The method of claim 1 , wherein determining that the certificate authority authorization parameters are not satisfied for the first certificate authority is based at least in part on receiving, from an external entity associated with the first smart contract, a request to revoke the certificate authority authorization for the first certificate authority.
10. The method of claim 1 , wherein determining that the certificate authority authorization parameters are not satisfied for the first certificate authority is based at least in part on a recurring validation process associated with one or more of the certificate authorities conducted by one or more second entities associated with the first root authority entity.
11. The method of claim 1 , wherein the one or more certificate authority authorization parameters for the first certificate authority comprise a number of certificates issued by the first certificate authority.
12. The method of claim 11 , wherein the one or more certificate authority authorization parameters for the first certificate authority further comprise a specified period of time associated with the number of certificates issued by the first certificate authority.
13. The method of claim 1 , wherein the one or more certificate authority authorization parameters for the first certificate authority comprise a status of the association between the first root authority entity and the first certificate authority.
14. The method of claim 13 , wherein determining that the one or more certificate authority authorization parameters are not satisfied for the first certificate authority is based at least in part on a determination that the status of the association between the first root authority entity and the first certificate authority is invalid.
15. The method of claim 1 , wherein the one or more certificate authority authorization parameters for the first certificate authority comprise an authorization time indicating when the first certificate authority was authorized to be a certificate authority.
16. The method of claim 15 , wherein determining that the one or more certificate authority authorization parameters are not satisfied for the first certificate authority is based at least in part on a determination that a threshold time has elapsed since the authorization time.
17. The method of claim 1 , wherein the first root authority entity is associated with an account address storing one or more of an authority wallet address or a number of certificate authorities.
18. The method of claim 1 , wherein the one or more certificate authorities are authorized to issue and reissue certificates in the development environment.
19. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:
identify, by a first root authority entity of one or more root authority entities associated with a blockchain cybersecurity platform, a plurality of first entities associated with the one or more root authority entities;
authorize, by the first root authority entity, from the plurality of first entities, one or more first entities to be certificate authorities, wherein each certificate authority is configured to audit a smart contract in a development environment before the smart contract is deployed on a first blockchain network, and wherein each certificate authority is authorized to issue, for each smart contract audited by the certificate authority in the development environment, a certificate for the smart contract based on a determination that the corresponding smart contract deployed on the first blockchain network matches the smart contract that was audited in the development environment;
determine, by the first root authority entity, for at least a first certificate authority authorized by the first root authority entity, that one or more certificate authority authorization parameters are not satisfied; and
revoke, by the first root authority entity, the certificate authority authorization for the first certificate authority, wherein each certificate issued by the first certificate authority prior to the revocation remains valid after the revocation of the certificate authority authorization.
20. A computing system comprising: one or more processors; and a non-transitory memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to:
identify, by a first root authority entity of one or more root authority entities associated with a blockchain cybersecurity platform, a plurality of first entities associated with the one or more root authority entities;
authorize, by the first root authority entity, from the plurality of first entities, one or more first entities to be certificate authorities, wherein each certificate authority is configured to audit a smart contract in a development environment before the smart contract is deployed on a first blockchain network, and wherein each certificate authority is authorized to issue, for each smart contract audited by the certificate authority in the development environment, a certificate for the smart contract based on a determination that the corresponding smart contract deployed on the first blockchain network matches the smart contract that was audited in the development environment;
determine, by the first root authority entity, for at least a first certificate authority authorized by the first root authority entity, that one or more certificate authority authorization parameters are not satisfied; and
revoke, by the first root authority entity, the certificate authority authorization for the first certificate authority, wherein each certificate issued by the first certificate authority prior to the revocation remains valid after the revocation of the certificate authority authorization.