Hybrid Blockchain Data Transfer for Secure Cloud Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for large data transfers in corporate cloud environments over public networks face security vulnerabilities and scalability issues, with private lines being costly and public network solutions lacking in security and throughput.
Innovation Solution
The implementation of a hybrid blockchain-based data transfer (HBDT) system, which uses a blockchain network for secure token exchange and public cloud storage for data transfer, leveraging distributed peer-to-peer notarization and public cloud services to ensure security, scalability, and cost-efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private lines are used for data transfer, then security is improved, but cost increases significantly
Solution Approach 1:
The patent introduces a blockchain network as an intermediary layer between sender and receiver systems. This blockchain intermediary provides security guarantees through its distributed consensus mechanism without requiring expensive private line infrastructure. The blockchain acts as a trusted mediator that enables secure data transfer over public networks by verifying and recording transfer operations immutably.
2Loss of energy
If public networks are used for data transfer, then cost is reduced, but security deteriorates
Solution Approach 1:
The blockchain network serves as a trusted intermediary that layers security on top of public network infrastructure. By using blockchain for authentication, authorization, and transfer verification, the system maintains the cost benefits of public networks while achieving security levels comparable to private lines through cryptographic proofs and distributed consensus.
Solution Approach 2:
The patent segments the data transfer system into distinct functional layers: blockchain-based authentication and authorization layer, and public network data transmission layer. This segmentation allows each layer to be optimized independently - blockchain provides security while public networks provide cost-effective transmission.
3Reliability
If homomorphic end-to-end encryption is used, then security is improved, but throughput performance deteriorates
Solution Approach 1:
The patent performs security-critical operations (authentication, authorization, encryption key management) in advance through blockchain-based mechanisms before actual data transfer begins. This preliminary action establishes security guarantees upfront, allowing the subsequent data transfer to proceed at high speed over public networks without continuous cryptographic overhead.
Solution Approach 2:
The patent extracts heavy cryptographic operations from the data transfer path and places them in the blockchain-based authentication phase. By separating security verification from data transmission, the system achieves both high security and high throughput - blockchain handles the computationally intensive security functions while public networks handle the bulk data transfer.
4Reliability
If blockchain network is used extensively for data transfer, then security is improved, but cost increases due to network usage fees
Solution Approach 1:
The patent extracts only the essential security functions (authentication, authorization, transfer verification) to the blockchain network, while moving the bulk data transfer operations to cost-effective public cloud storage and public networks. This selective use of blockchain minimizes network usage fees while maintaining security guarantees for the critical control plane operations.
Solution Approach 2:
The system segments operations into blockchain-based control plane functions (low volume, high value) and public network-based data plane functions (high volume, low value). This segmentation optimizes cost by using blockchain only where its security properties are essential, rather than forcing all data transfer through expensive blockchain infrastructure.
Data Source
AI summary
Techniques for facilitating secure and scalable data transfers using a hybrid blockchain-based approach are provided. In one embodiment, a first computer system at a first site can transmit a token to a second computer system at a second site, where the token includes metadata regarding a data set to be transferred from the first computer system to the second computer system and one or more cloud storage service addresses where the data set will be temporarily stored. The token can be transmitted using a blockchain network that is accessible to the first and second computer systems via a public network. The first computer system can then upload the data set to the one or more cloud storage service addresses via the public network, and the second computer system can download the data set from the one or more cloud storage service addresses via the public network.