On-chain certificate verification for interrelated blockchain smart contracts on blockchain cybersecurity platforms
In one embodiment, a method includes sending a verification request for a certificate issued by a certificate authority by a first smart contract deployed on a first blockchain network by a first entity, wherein the certificate is associated with a second smart contract, and wherein the verification request includes a program address of the second smart contract and an address of a first root authority entity associated with the certificate authority, receiving a verification response by the first smart contract indicating that the second smart contract is associated with a certificate matching the program address and the address of the first root authority entity in the verification request, determining whether the second smart contract is upgradeable by the first smart contract, determining whether the certificate is valid by the first smart contract based on a determination of whether the second smart contract was modified after the certificate was issued.
1 . A method comprising, by one or more servers associated with a blockchain cybersecurity platform:
sending, by a first smart contract deployed on a first blockchain network by a first entity, a verification request for a certificate issued by a certificate authority, wherein the certificate is associated with a second smart contract, and wherein the verification request comprises a program address associated with the second smart contract and an address associated with a first root authority entity associated with the certificate authority;
receiving, by the first smart contract, a verification response indicating that the second smart contract is associated with the certificate matching the program address associated with the second smart contract and the address associated with the first root authority entity in the verification request;
determining, by the first smart contract, whether the second smart contract is an upgradeable smart contract; and
determining, by the first smart contract, whether the certificate is valid based on a determination of whether the second smart contract was modified after the certificate was issued.
2 . The method of claim 1 , wherein the first root authority entity is the blockchain cybersecurity platform.
3 . The method of claim 1 , wherein the certificate comprises data associated with the first root authority entity that issued the certificate.
4 . The method of claim 1 , wherein the second smart contract is deployed on the first blockchain network, and wherein the certificate for the second smart contract is written to the first blockchain network.
5 . The method of claim 1 , wherein the certificate comprises data configured for public queries.
6 . The method of claim 1 , wherein the second smart contract is associated with a plurality of certificates issued by a plurality of certificate authorities associated with a respective plurality of root authority entities, wherein the plurality of root authority entities are associated with a plurality of addresses, respectively, and wherein the plurality of addresses comprises the address in the verification request.
7 . The method of claim 1 , further comprising:
determining that the second smart contract is not an upgradeable smart contract; and
determining that the certificate must be valid based on the determination that the second smart contract is not an upgradeable smart contract.
8 . The method of claim 1 , wherein the second smart contract is determined to be an upgradeable contract based on the verification response.
9 . The method of claim 8 , wherein determining whether the second smart contract was modified after the certificate was issued comprises:
identifying, by the first smart contract, a first timestamp indicating when the certificate was issued and a second timestamp indicating when the second smart contract was last deployed; and
comparing, by the first smart contract, the first timestamp and the second timestamp.
10 . The method of claim 1 , wherein the certificate authority that issued the certificate is authorized to audit and issue certificates for a plurality of smart contracts.
11 . The method of claim 1 , wherein the second smart contract is determined to be an upgradeable contract, wherein the certificate comprises an iteration field indicating a number of versions of source code associated with the second smart contract, and wherein determining whether the certificate is valid is further based on the iteration field.
12 . The method of claim 1 , wherein the certificate comprises a program-upgrade-authority identifier identifying an entity that is permitted to modify the second smart contract.
13 . The method of claim 12 , wherein the second smart contract is determined to have been modified after the certificate was issued.
14 . The method of claim 1 , wherein determining whether the certificate associated with the second smart contract is valid is an on-chain action on the first blockchain network.
15 . The method of claim 1 , wherein determining whether the certificate associated with the second smart contract is valid comprises:
sending, by the first smart contract, to a third smart contract, the verification request for the certificate; and
receiving, by the first smart contract, from the third smart contract, a verification response comprising the determination of whether the second smart contract was modified after the certificate was issued.
16 . The method of claim 1 , wherein determining whether the certificate associated with the second smart contract is valid is an off-chain action external to the first blockchain network.
17 . The method of claim 16 , wherein determining whether the certificate associated with the second smart contract is valid further comprises:
inputting, by the first smart contract, via an interface associated with a root authority entity, a query comprising data associated with the certificate; and
receiving, by the first smart contract, via the interface, a query response indicating whether the certificate is valid.
18 . The method of claim 1 , wherein determining whether the certificate is valid comprises determining whether the certificate was revoked.
19 . One or more computer-readable non-transitory storage media embodying software that is operable when executed to:
send, by a first smart contract deployed on a first blockchain network by a first entity, a verification request for a certificate issued by a certificate authority, wherein the certificate is associated with a second smart contract, and wherein the verification request comprises a program address associated with the second smart contract and an address associated with a first root authority entity associated with the certificate authority;
receive, by the first smart contract, a verification response indicating that the second smart contract is associated with the certificate matching the program address associated with the second smart contract and the address associated with the first root authority entity in the verification request;
determine, by the first smart contract, whether the second smart contract is an upgradeable smart contract; and
determine, by the first smart contract, whether the certificate is valid based on a determination of whether the second smart contract was modified after the certificate was issued.
20 . A receiver comprising: one or more processors; and a non-transitory memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to:
send, by a first smart contract deployed on a first blockchain network by a first entity, a verification request for a certificate issued by a certificate authority, wherein the certificate is associated with a second smart contract, and wherein the verification request comprises a program address associated with the second smart contract and an address associated with a first root authority entity associated with the certificate authority;
receive, by the first smart contract, a verification response indicating that the second smart contract is associated with the certificate matching the program address associated with the second smart contract and the address associated with the first root authority entity in the verification request;
determine, by the first smart contract, whether the second smart contract is an upgradeable smart contract; and
determine, by the first smart contract, whether the certificate is valid based on a determination of whether the second smart contract was modified after the certificate was issued.