Distributed Ledger Secure Data Storage via Hash Chains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems, particularly cloud storage, are vulnerable to corruption and loss due to single points of failure and attack surfaces, which can expose private data and compromise network security when updates are corrupted or compromised.
Innovation Solution
A distributed ledger system with cryptography-based architecture is used for secure storage of data and firmware updates, utilizing immutable blocks and hashes to detect any modifications, thereby reducing the attack surface and ensuring data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in centralized cloud storage services, then data backup and accessibility are improved, but security and vulnerability to attacks worsen due to single points of failure
Solution Approach 1:
The patent segments the centralized storage system into a distributed network of nodes, where data is divided and stored across multiple independent locations. This segmentation eliminates the single point of failure by distributing data storage responsibilities across the network, thereby reducing the attack surface while maintaining backup reliability.
Solution Approach 2:
The patent transitions from a single-dimensional centralized storage model to a multi-dimensional distributed ledger architecture. By adding the dimension of decentralization and creating a chain of linked blocks across multiple nodes, the system achieves both improved reliability and reduced vulnerability to attacks.
2Ease of operation
If firmware updates are provided through centralized servers, then update distribution is simplified, but security worsens when servers are compromised
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing cryptographic hashes of firmware updates in the distributed ledger before the actual update is distributed. This allows receiving nodes to verify update integrity independently upon receipt, ensuring reliability even if the distribution server is compromised, while maintaining ease of update distribution.
3Adaptability or versatility
If remote data sites are used for backup, then data accessibility is improved, but security worsens due to exposure of private data
Solution Approach 1:
The patent uses cryptographic hashing to create a verified copy of data integrity information stored in the distributed ledger. This copying mechanism allows nodes to verify data without exposing the actual private data, maintaining accessibility while preventing data exposure risks at remote sites.
Solution Approach 2:
The distributed ledger acts as an intermediary between data storage and verification processes. By using cryptographic hashes as the intermediary representation of data integrity, the system enables verification and accessibility while preventing direct exposure of private data at remote storage locations.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
The present disclosure describes systems and methods for use of a distributed ledger system to securely store data, or verify data, including updates to applications, firmware, operating system libraries or other such data. Encrypted data files of one or more computing devices may be distributed to processing nodes of the distributed ledger system. The data may be subsequently retrieved and decrypted by the computing device or another device. Because the distributed ledger system creates a chain of hashes of prior blocks, the data may be immune to modification or corruption, as any changes to blocks storing the encrypted data may be immediately apparent. A distributed ledger system may also provide a secure antitamper mechanism for software and firmware updates that may be independently accessed and verified by any device.