Internet Blockchain Verification for Secure Resource Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Internet infrastructure is vulnerable to attacks that compromise Border Gateway Protocol (BGP) routing and Domain Name Service (DNS) resolution, leading to potential disruptions or shutdowns, and Public Key Infrastructure (PKI) mechanisms are inadequate for securing Internet resources.
Innovation Solution
Implementing an Internet security mechanism using a peer-to-peer system and Internet blockchain to verify and secure Internet resource transactions, ensuring decentralized ownership and transaction validation without relying on a single point of trust.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized registry is used to store Route Origin Authorization records, then the assessment of authority for IP prefix advertisement can be performed, but the system becomes vulnerable to breaches and compromise of the centralized infrastructure
Solution Approach 1:
The patent segments the centralized registry into a distributed network of nodes participating in a blockchain system. Each node maintains a copy of the authorization records, eliminating the single point of failure inherent in centralized systems. The blockchain structure divides the trust model across multiple participants rather than relying on a single trusted authority.
Solution Approach 2:
The patent introduces a blockchain intermediary layer between the route origin authorization records and the BGP routing system. This blockchain mediator provides verification services without requiring direct trust in any single entity, as the cryptographic proof mechanisms validate authorizations independently of the participants' identities.
2Reliability
If Public Key Infrastructure mechanisms are used for Internet security, then security can be provided, but the system becomes vulnerable if the root of trust is compromised
Solution Approach 1:
The patent extracts the root of trust from any single entity or organization and distributes it across the entire blockchain network through cryptographic consensus mechanisms. No single node or authority holds the root of trust; instead, trust is derived from the mathematical properties of the blockchain protocol and the collective verification capability of all participants.
Solution Approach 2:
The blockchain system provides self-verification through cryptographic proofs embedded in the blockchain records. Each route origin authorization record contains verifiable cryptographic evidence that can be independently validated by any node without requiring trust in external authorities or root certificates.
3Reliability
If a peer-to-peer blockchain system is implemented to verify Internet resource transactions, then security and resistance to breaches are enhanced, but the system complexity increases
Solution Approach 1:
The patent creates a universal blockchain protocol that can verify multiple types of Internet resource authorizations (IP prefixes, autonomous system numbers, route origins) through a single standardized mechanism. This multi-functional approach reduces overall system complexity by eliminating the need for separate verification systems for different resource types.
Solution Approach 2:
The patent changes the fundamental parameters of the verification system from centralized trust models to decentralized cryptographic proof models. By altering the trust verification parameter from institutional trust to mathematical trust, the system achieves enhanced security while maintaining operational simplicity through standardized cryptographic operations.
Data Source
Figure 1
Figure 2
Figure 3A~3B
AI summary
The present disclosure generally discloses an Internet security mechanism configured to provide security for Internet resources of the internet using an Internet blockchain. The Internet blockchain may be configured to provide security for Internet resources of the Internet by supporting various types of verification related to Internet resources of the Internet, which may include verification of Internet resource ownership, verification of internet resource transactions, and so forth. The Internet blockchain may be configured to enable Internet participants (e.g., Internet registries, Domain Name Service (DNS) entities, Autonomous Systems (ASes), or the like) to verify Internet resource ownership of internet resources (e.g., Internet Protocol (IP) addresses, AS numbers, IP prefixes, DNS domain names, or the like) by Internet participants, to verify Internet resource transactions (e.g., allocation of IP addresses, allocation of AS numbers, advertisements of IP prefixes, allocation of DNS domain names, or the like) attempted by Internet participants, and so forth.