Off-Chain Storage Server for Encrypted Data Recovery

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Individual blockchain transactions have limited data storage capacity, typically in the order of single kilobytes, which restricts the amount of data that can be stored within a blockchain network, necessitating off-chain backend storage solutions to accommodate larger data volumes required by decentralized applications (DApps).

Innovation Solution

Implementing off-chain decentralized storage systems that utilize arbitrary backend storage providers, such as cloud or local storage, with a storage server interfacing these providers to offer a consistent interface to DApps, allowing users to manage their data and grant authorization to multiple DApps while maintaining control over encrypted data through cache-specific private keys and encryption keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Volume of stationary object

If off-chain backend storage is implemented to increase storage capacity, then storage volume is improved, but data security and access control become more complex

Engineering Contradiction:
Improvestorage capacityVSAvoidsystem complexity
Core Design Contradiction:
Volume of stationary objectVSDevice complexity

Solution Approach 1:

A storage server acts as an intermediary component between the blockchain network and backend storage providers. The storage server receives data from DApps, manages encryption key storage, handles authorization requests, and coordinates with multiple backend storage providers. This intermediary layer abstracts the complexity of off-chain storage management from DApps while enabling scalable storage capacity through arbitrary backend providers.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Volume of stationary object

If data is stored off-chain to increase storage capacity, then storage volume is improved, but data security and unauthorized access risks increase

Engineering Contradiction:
Improvestorage capacityVSAvoidunauthorized access
Core Design Contradiction:
Volume of stationary objectVSObject-affected harmful factors

Solution Approach 1:

Data is encrypted before being stored in the backend storage providers. The encryption process occurs prior to storage, ensuring that even if the stored data is accessed unauthorizedly, it remains inaccessible without the decryption keys. The storage server manages key generation, encryption, and secure key storage, implementing security measures in advance rather than attempting to secure already-stored data.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If multiple DApps are granted access to shared storage, then storage versatility is improved, but access control complexity increases

Engineering Contradiction:
Improvestorage accessibilityVSAvoidaccess control complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The storage server implements an authorization mechanism where DApps must present valid credentials to access stored data. The server verifies authorization tokens, checks access permissions, and provides feedback by granting or denying access requests. This feedback-based access control enables multiple DApps to share storage resources while maintaining security through automated verification and permission management.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11283595B1Systems and methods for securing cached data stored off-chain in a blockchain-based network
Publication Date: 2022.03.22 HIRO SYST PBC
  • US11283595B1 patent drawing
  • US11283595B1 patent drawing
  • US11283595B1 patent drawing

AI summary

A storage server communicating with a backend storage provider, such as a cloud-based provider, performs processes for backing up encrypted data in the backend storage in a data cache shared by multiple decentralized applications, to allow a user of a frontend client to revert to a prior version of an encrypted file if that encrypted file has been compromised by one of the decentralized applications, where the storage server performs no encryption of the data and is not exposed to encryption keys.