Two-Tiered Blockchain Data Security via Hash Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Software logs and other data stored on databases are susceptible to malicious modification due to their modifiable nature, and existing solutions for securing this data on public blockchain networks are costly and inefficient.

Innovation Solution

A method and system that utilize a private distributed ledger technology to create a blockchain based on hashes of data from a database, with each sealed block's hash being written to a public chain, providing a two-tiered security layer while minimizing costs by storing only hashes on the public chain.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is stored on a public blockchain network to prevent malicious modification, then data security and integrity are improved, but storage costs and computational overhead increase significantly

Engineering Contradiction:
Improvedata securityVSAvoidstorage cost
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent segments data security into two layers: a private blockchain for storing actual data within the organization, and a public blockchain for storing only hash values of sealed blocks. This segmentation allows the organization to maintain data security through the public chain's distributed verification while avoiding the high costs of storing all data on the public chain.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent extracts only the essential security verification element (hash value of sealed blocks) from the complete data set and stores it on the public blockchain. The actual data remains in the private blockchain, reducing public chain storage requirements while maintaining security through hash verification.

Inventive Principle:
Principle #2Taking out (Extraction)

2Adaptability or versatility

If all data is stored on a private blockchain within the organization, then data access control and privacy are improved, but verification trust and security against internal threats decrease

Engineering Contradiction:
Improvedata access controlVSAvoidverification trust
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces the public blockchain as an intermediary trust layer. The private blockchain maintains data access control and privacy, while the public blockchain serves as an external verification mechanism that provides trust without compromising the private chain's access control capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If hashes of sealed blocks are written to a public chain, then data integrity verification is improved, but the complexity of the two-tiered system increases

Engineering Contradiction:
Improvedata integrity verificationVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent performs preliminary actions by sealing blocks in the private blockchain first, generating hash values before writing them to the public chain. This preliminary sealing process establishes the integrity verification mechanism in advance, simplifying the overall verification process despite the two-tiered architecture.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12039067B2Method and apparatus of securing data
Publication Date: 2024.07.16 WIND RIVER SYSTEMS INC
  • US12039067B2 patent drawing
  • US12039067B2 patent drawing

AI summary

A manner of securing data that includes receiving a first plurality of hashes corresponding to data stored in a database, writing the first plurality of hashes to a private distributed ledger technology (DLT), sealing each block of the private DLT when a predetermined criteria is met to create a plurality of sealed blocks and writing a second plurality hashes corresponding to the plurality of sealed blocks to a public DLT.