Information security using blockchain technology
View Patent ↗Blockchain technology is used to provide security of electronic systems. The disclosed technology allows for a dynamic bond of trust to be applied to the field of information security without the need for a single point of trust to first be established. The lines of trust between electronic systems or devices is established by distributing information among the systems or devices. This allows for easy identification of commonalities and/or decision making whereby policy(s)/action(s)/monitoring/etc. can be enforced when those commonalities align. Simultaneously, deviations from those commonalities can be identified and policy(s)/action(s)/monitoring/etc. may also be invoked. The use of blockchain technology enables investigative and responsive actions to detect and exploit a potential attacker on a network.
1 . A system of invoking informational security, the system comprising:
a plurality of nodes on a network, wherein each node comprises:
a ledger of information;
a communication channel with at least one other node;
a storage unit configured to store the ledger of information and compare the information
stored in the ledger against information from at least one other node's ledger; and
wherein each of the plurality of nodes is configured to:
detect a suspected attack by a suspected device on the network;
dynamically identify the media access control (MAC) address of the suspected device; and
share the MAC address with one or more of the plurality of nodes.
2 . A system according to claim 1 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, attempt to intercept a communication from the suspected device on the network.
3 . A system according to claim 1 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, install software on the suspected device.
4 . A system according to claim 1 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, perform fingerprinting of the suspected device.
5 . A system according to claim 1 , wherein:
at least one of the plurality of nodes is configured to, in response to the suspected attack:
detect whether a salt used in updating the ledger of information has been compromised; and
if the at least one of the plurality of nodes detects that the salt has been compromised, deploy a new salt to the plurality of nodes on the network other than the suspected device.
6 . A system according to claim 1 , wherein:
at least one of the plurality of nodes is configured to, in response to the suspected attack, create a profile on the suspected device.
7 . A system according to claim 1 , further comprising:
a smart contract implemented by the plurality of nodes, the smart contract configured to issue one or more reward coins to each of the plurality of nodes according to a predetermined algorithm;
wherein the predetermined algorithm is configured to assign a reward coin to one of the plurality of nodes in response to the node supporting one or more objectives of the network.
8 . A system according to claim 7 , further comprising:
a plurality of startup coins stored in the ledger of information;
wherein each of the plurality of startup coins is assigned to one of the plurality of nodes and authenticates the node on the network.
9 . A system according to claim 1 , further comprising:
a smart contract implemented by the plurality of nodes, the smart contract configured to issue a coin value to each of the plurality of nodes according to a predetermined algorithm;
wherein the predetermined algorithm is configured to assign a coin value to each of the plurality of nodes in response to the node reaching a predetermined threshold of device uptime.
10 . A system according to claim 1 , wherein each of the plurality of nodes is configured to ignore a warrant canary transaction served on the network.
11 . A system according to claim 1 , wherein each of the plurality of nodes is configured to approve a warrant canary transaction with additional details hashed.
12 . A system according to claim 1 , wherein each of the plurality of nodes is limited from confirming transactions on the network according to one or more of the group consisting of: number of transactions per day, time of day, time since last transaction confirmed by the node, and geolocation of the node.
13 . A system of invoking informational security, the system comprising:
a plurality of nodes on a network, wherein each node comprises:
a ledger of information;
a communication channel with at least one other node;
a storage unit configured to store the ledger of information and compare the information
stored in the ledger against information from at least one other node's ledger; and
wherein each of the plurality of nodes is configured to:
detect a suspected attack by a suspected device on the network;
identify the media access control (MAC) address of the suspected device;
share the MAC address with one or more of the plurality of nodes;
wherein at least one of the plurality of nodes is configured to, in response to the suspected attack:
detect whether a salt used in updating the ledger of information has been compromised; and
if the at least one of the plurality of nodes detects that the salt has been compromised, deploy a new salt to the plurality of nodes on the network other than the suspected device.
14 . A system according to claim 13 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, attempt to intercept a communication from the suspected device on the network.
15 . A system according to claim 13 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, install software on the suspected device.
16 . A system according to claim 13 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, perform fingerprinting of the suspected device.
17 . A system according to claim 13 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, attempt to intercept a communication from the suspected device on the network.
18 . A system according to claim 13 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, install software on the suspected device.
19 . A system according to claim 13 , wherein at least one of the plurality of nodes is configured to, in response to the suspected attack, perform fingerprinting of the suspected device.
20 . A system of invoking informational security, the system comprising:
a plurality of nodes on a network, wherein each node comprises:
a ledger of information;
a communication channel with at least one other node;
a storage unit configured to store the ledger of information and compare the information
stored in the ledger against information from at least one other node's ledger; and
wherein each of the plurality of nodes is configured to:
detect a suspected attack by a suspected device on the network;
identify the media access control (MAC) address of the suspected device;
share the MAC address with one or more of the plurality of nodes;
a smart contract implemented by the plurality of nodes, the smart contract configured to issue one or more reward coins to each of the plurality of nodes according to a predetermined algorithm;
wherein the predetermined algorithm is configured to assign a reward coin to one of the plurality of nodes in response to the node supporting one or more objectives of the network;
a plurality of startup coins stored in the ledger of information; and
wherein each of the plurality of startup coins is assigned to one of the plurality of nodes and authenticates the node on the network.