-
公开(公告)号:US20190108350A1
公开(公告)日:2019-04-11
申请号:US15999360
申请日:2016-02-17
摘要: A method for storing data on a storage entity (SE) includes: computing a file identifier for a file to be stored on the SE; checking if the file has already been stored using the file identifier; generating a user-specific private and public identifier; updating or computing tags of the file by the client such that the updating or computing is homomorphic in the user-specific private identifier and in parts of the file; providing the user-specific public identifier, the updated tags and a proof of possession of the secret identifier to the SE; verifying the proof-of-possession; verifying validity of the tags; upon successful checking, storing a public identifier for the file incorporating the user-specific public identifier and the updated tags by the SE; and upon a case where it is determined that the file has not already been stored, storing the file.
-
公开(公告)号:US11048805B2
公开(公告)日:2021-06-29
申请号:US15999360
申请日:2016-02-17
IPC分类号: G06F21/00 , G06F21/60 , H04L9/00 , G06F21/62 , G06F21/64 , G09C1/00 , G06F16/00 , G06F3/06 , H04L9/32 , H04L29/06
摘要: A method for storing data on a storage entity (SE) includes: computing a file identifier for a file to be stored on the SE; checking if the file has already been stored using the file identifier; generating a user-specific private and public identifier; updating or computing tags of the file by the client such that the updating or computing is homomorphic in the user-specific private identifier and in parts of the file; providing the user-specific public identifier, the updated tags and a proof of possession of the secret identifier to the SE; verifying the proof-of-possession; verifying validity of the tags; upon successful checking, storing a public identifier for the file incorporating the user-specific public identifier and the updated tags by the SE; and upon a case where it is determined that the file has not already been stored, storing the file.
-
公开(公告)号:US11914721B2
公开(公告)日:2024-02-27
申请号:US17608759
申请日:2020-06-09
发明人: Michael Rodler , Lucas Davi , Ghassan Karame , Wenting Li
CPC分类号: G06F21/577 , G06F8/656 , G06F21/64 , G06Q20/389 , G06F2221/033
摘要: A blockchain smart contract rewriting framework system has a vulnerability detection tool, a rewriter tool, and a deployment component. The deployment component obtains a permission to upgrade the smart contract, which granted by a smart contract creator/owner. The contract rewriting framework system retrieves the smart contract from the blockchain network, and passes it to the vulnerability detection tool. The vulnerability detection tool detects a vulnerability in the smart contract, and determines a type of the vulnerability and an instruction location of the vulnerability. The rewriter tool rewrites the smart contract to include a patch for fixing the vulnerability, a patched smart contract being generated by the rewriter tool based on the type of the vulnerability and the instruction location of the vulnerability. The deployment component issues an upgrade transaction including the patched smart contract to the blockchain network, such that the patched smart contract is deployed in the blockchain network.
-
公开(公告)号:US20240020425A1
公开(公告)日:2024-01-18
申请号:US17879805
申请日:2022-08-03
CPC分类号: G06F21/725 , G06F2221/033 , G06F21/74 , G06F21/53
摘要: A method provides trusted timing services to an enclave of a computer having memory and a trusted hardware timer. The computer executes a privileged management program and an untrusted operating system. The privileged management program has access to the memory and the trusted hardware timer, has higher privileges than the untrusted operating system, and exposes a system call to the enclave for requesting the trusted timing services. The method includes: receiving, by the privileged management program, a request for timing services from the enclave, via the system call; reserving, by the privileged management program, a memory region of the memory for tracking time; and writing, by the privileged management program, at least one value of the trusted hardware timer into the memory region.
-
公开(公告)号:US11362841B2
公开(公告)日:2022-06-14
申请号:US16454136
申请日:2019-06-27
发明人: Ghassan Karame , Claudio Soriente
摘要: A method secures a system that includes an application owner, a master application, and a plurality secure platforms. The master application receives from the application owner an application and an input. The application computes a function to calculate an output from the input. The master application deploys replicas of the application on a number of the secure platforms. The master application establishes a secure channel with each of the replicas, and sends at least a portion of the input to the replicas. The master application receives a result calculated by each of the replicas. The result is determined according to the function and the at least the portion of input. The master application determines the output based on the result received from each of the replicas; and sends to the application owner, the output.
-
公开(公告)号:US20220067150A1
公开(公告)日:2022-03-03
申请号:US17009791
申请日:2020-09-02
发明人: Ghassan Karame , Claudio Soriente
摘要: A method for providing a trusted service to a trusted execution environment running on a remote host machine includes receiving a message from the trusted execution environment and incrementing a counter of the trusted service. A response message is sent to the trusted execution environment using a value of the incremented counter.
-
公开(公告)号:US11184168B2
公开(公告)日:2021-11-23
申请号:US15999349
申请日:2016-02-19
摘要: A method for storing data on a storage entity (SE) includes the steps of: (a) dividing a file to be stored into a plurality of chunks by a client; (b) computing a secret key for each of the chunks of the file; (c) computing for each of the chunks a chunk identifier by the client; (d) checking, by the SE, whether one or more of the chunks have already been stored based on the computed chunk identifiers; and (e) it a case where it is determined that one or more of the chunks have not already been stored, performing the following: encoding the corresponding chunks; computing chunk tags for the chunks using the computed secret key; and storing the encoded chunks and the chunk tags.
-
公开(公告)号:US11170371B2
公开(公告)日:2021-11-09
申请号:US16081035
申请日:2016-03-03
发明人: Ghassan Karame , Wenting Li
摘要: A method for managing data in a decentralized blockchain consensus network of nodes interrelated with each other according to a tree-like structure includes publishing, by a root node, a product contract description for a new product, the product contract description including at least product information and product state information. The method further includes generating, by the root node, at least one product item for the new product by publishing a product item contract including at least item identification information, the product contract for the item, item state information, and valid modifier information for information of at least one node to be able to modify the item state. The method also includes updating, by the root node upon generating a new item for a product, the product contract description by including item information into the product contract description.
-
9.
公开(公告)号:US20200296111A1
公开(公告)日:2020-09-17
申请号:US16351637
申请日:2019-03-13
发明人: Ghassan Karame , Wenting Li
摘要: A method for electing a leader in a blockchain network using a role-based consensus protocol includes generating a new block by a node in the blockchain network and computing an effective resources metric for the node based on a role of the node, resources of the node and a role-based weight profile for the resources of the node. Eligibility proof of the node is generated based on eligibility information that includes a blockheader of the new block, an identity of the node, a difficulty target, T, of the blockchain network, and the effective resources metric. The new block and the eligibility proof is broadcast to the blockchain network, to enable one or more other nodes in the blockchain network to verify eligibility of the node as a leader.
-
公开(公告)号:US20190394047A1
公开(公告)日:2019-12-26
申请号:US16481497
申请日:2017-02-24
发明人: Ghassan Karame , Jens-Matthias Bohli , Wenting Li
摘要: A method for mining a block in a decentralized blockchain consensus network (DBCN) includes sending, by a mining computing entity (MCE), a signing request for mining a new block of a blockchain to a trusted execution environment computing entity (TEE-CE), the signing request including block information, the block information including block height information, and comparing, by the TEE-CE, the block height information of the signing request with block height information from a last signing request and providing a matching, when the difference between the block height information of the signing request and the block height information from the last signing request satisfies a defined value. The method further comprises, upon providing the matching, signing, by the TEE-CE, the new block based on the block information, and providing, by the MCE, the new signed block to the DBCN.
-
-
-
-
-
-
-
-
-