IPFS Blockchain Data Security P2P Network

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In a cloud-based enterprise landscape, securing access to customers' confidential data while ensuring efficient and secure data sharing and tracking among verified users is challenging, particularly due to latency issues in centralized server architectures and the need for robust data protection and auditing.

Innovation Solution

A peer-to-peer network utilizing InterPlanetary File System (IPFS) with blockchain technology for secure data access and tracking, where each file is assigned a unique hash value, stored in a distributed hash table, and modifications are recorded on a blockchain, ensuring secure, efficient, and auditable data management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a centralized server architecture is used for data storage and access, then data security can be managed centrally, but latency issues occur and single points of failure exist

Engineering Contradiction:
Improvedata securityVSAvoiddata access speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent segments the centralized server architecture into a distributed peer-to-peer network where data is divided and stored across multiple nodes. Each node maintains cryptographic proofs of data integrity, eliminating the single point of failure while maintaining security. This segmentation resolves the contradiction by distributing both security responsibilities and data access paths, thereby improving speed while maintaining reliability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a new dimension of verification through cryptographic hash chains and Merkle proofs that operate independently from the physical data storage location. This additional verification layer allows nodes to verify data integrity without centralized coordination, enabling fast peer-to-peer data access while maintaining security through cryptographic guarantees rather than centralized control.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Speed

If data is distributed across multiple nodes in a peer-to-peer network, then access speed and reliability improve, but data security and auditability become more complex

Engineering Contradiction:
Improvedata access speedVSAvoidsecurity management complexity
Core Design Contradiction:
SpeedVSDevice complexity

Solution Approach 1:

The patent creates cryptographic copies of data integrity proofs (Merkle proofs, hash chains) that can be verified independently of the actual data. These cryptographic copies allow any node to verify data integrity and audit trails without needing to trust other nodes, simplifying security management in the distributed network while maintaining fast access speeds.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent introduces cryptographic hash functions and Merkle trees as intermediaries between the distributed data storage and the verification process. These mathematical intermediaries provide a trusted layer that simplifies security management by allowing nodes to verify data integrity through deterministic cryptographic checks rather than complex trust relationships.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If traditional file storage methods are used, then simple access is provided, but data integrity tracking and modification auditing are difficult

Engineering Contradiction:
Improvedata access simplicityVSAvoiddata modification tracking
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The patent performs preliminary cryptographic hashing of data before storage, creating immutable hash values that serve as digital fingerprints. These pre-computed hashes are embedded in the data structure, allowing automatic integrity verification and modification tracking without adding complexity to the access process. The cryptographic proofs are prepared in advance, enabling simple access with automatic integrity protection.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements continuous cryptographic feedback mechanisms where each data modification generates new hash values that chain to previous versions. This creates an automatic audit trail where any modification is cryptographically linked to its predecessor, providing transparent modification tracking without complicating data access operations.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11409901B2Data security in a peer-to-peer network
Publication Date: 2022.08.09 SAP SE
  • US11409901B2 patent drawing
  • US11409901B2 patent drawing
  • US11409901B2 patent drawing

AI summary

A data protection implementation solution includes utilizing a peer-to-peer network and incorporating an auditing method to record and/or track transactions related to a customer's data. A private peer-to-peer network such as inter planetary file system (IPFS) is used to achieve secured and fast data accessibility while also managing data modifications. An auditing method such as blockchain is used to record activity related to data within the IPFS network. The IPFS network may include a plurality of nodes, among which data is distributed. Devices are registered with the network, and public keys, private keys, and node identifiers are used to authenticate users and secure the data. By incorporating blockchain with the IPFS network, file commit transactions are validated and a clear ledger regarding time of modification and count of file edits is provided.