JPWO2021084347A5

JPWO2021084347A5 -

Info

Publication number: JPWO2021084347A5
Application number: JP2022525179A
Authority: JP
Publication date: 2023-09-21

Claims

A computer-implemented method for granting permission to a requester to join a first network, the first network comprising a set of bridge nodes and controllable by one or more of the set of bridge nodes. a set of devices, each bridge node also being a respective node of a blockchain network, the computer-implemented method being executed by a registrar;
generating a first blockchain transaction, wherein the first blockchain transaction includes an input that includes a signature linked to a first public key of the registrar, and a first certificate; a first output, the first certificate including an identifier assigned to the requester;
sending the first blockchain transaction to the blockchain network for inclusion in a blockchain.

the first blockchain transaction includes a second output locked to a second public key of the registrar;
The method according to claim 1.

3. The method of claim 2, wherein the first output is time-locked to the second public key of the registrar, the time-lock preventing the first output from being unlocked until after a predetermined period of time. .

4. A method according to claim 2 or 3, wherein the first output is locked to at least the second public key and a different public key of the registration authority.

5. A method according to any one of claims 1 to 4, comprising sending a transaction identifier of the first blockchain transaction to the authorization requester.

6. A method according to any preceding claim, wherein the certificate is encrypted with a cryptographic key, the cryptographic key being generated by the registration authority.

receiving a request to join the network from the requester, wherein the request includes one or more credentials;
validating the request based on the one or more credentials, wherein the generating the first blockchain transaction is conditional on the request being valid;
7. A method according to any one of claims 1 to 6, comprising:

A method according to any one of claims 1 to 7, wherein the set of bridge nodes comprises a master node and a set of intermediate nodes controllable by the master node, and the registration authority is the master node. .

A method according to any one of claims 1 to 8, wherein the set of bridge nodes comprises a master node and a set of intermediate nodes controllable by the master node, and the requester is the master node. .

10. A method according to any one of claims 1 to 9, wherein the requesters are respective nodes of the blockchain network and the certificate includes a public key assigned to the authorization requester.

The requester is a device controllable by one or more bridge nodes of the first network, and the method comprises:
transmitting a set of certificates to the requester, wherein each certificate in the set is transmitted to a respective one of the set of nodes;
9. A method according to any one of claims 1 to 8.

12. A method according to any preceding claim, comprising sending the first certificate to one or more of the set of bridge nodes.

generating a second blockchain transaction, wherein the second blockchain transaction includes an input that references the second output of the first blockchain transaction; contains a signature linked to the public key of 2,
3. A method as claimed in claim 2 or any claim dependent thereon, comprising: transmitting the second blockchain transaction to the blockchain network for inclusion in the blockchain.

A computer-implemented method for requesting permission to join a first network, the first network comprising a set of bridge nodes and a device controllable by one or more of the set of bridge nodes. and each bridge node is also a respective node of a blockchain network, the computer-implemented method being executed by a requestor;
sending a request to join the first network to a registrar;
obtaining a first certificate, wherein the certificate includes an identifier issued by the registration authority and assigned to the requester;
method including.

Said to obtain:
receiving a transaction identifier for a first blockchain transaction including the first certificate;
and retrieving the first blockchain transaction from a blockchain using the transaction identifier.

The first blockchain transaction includes a first input including the certificate and a second output linked to the registration authority's public key, and the method includes:
identifying the public key of the registration authority;
identifying one or more second certificates included in one or more respective transactions sent from the public key of the registrar to the blockchain; is issued to each bridge node or device or said network;
16. The method of claim 15, comprising:

The first certificate includes the requestor's public key, and each second certificate issued to a respective one of the set of bridge nodes of the first network includes the requestor's public key. the method includes a key;
transmitting a third blockchain transaction to at least one of the set of bridge nodes, wherein the third blockchain transaction transmits a third blockchain transaction to the respective public key of the at least one bridge node. including locked outputs,
17. The method according to claim 16.

18. The method of any one of claims 14-17, wherein the obtaining the first certificate comprises receiving the first certificate from the registration authority.

receiving one or more second certificates from the registration authority, wherein each second certificate is a certificate for a respective one of the set of bridge nodes or devices of the first network. issued in one
19. A method according to any one of claims 14 to 18.

The first certificate includes a network address of the requestor, and each second certificate issued to each of the bridge nodes of the first network includes a network address of each of the nodes. The method includes:
sending a message to one or more of the set of bridge nodes, wherein the message is sent from the network address of the requester to the one or more bridge nodes to which the message is sent. sent to said respective network addresses of;
20. The method according to claim 19.

21. A method according to claim 14 or any one of claims 18 to 20, wherein the requester is one of the set of devices of the first network.

22. A method according to any one of claims 14 to 21, wherein the requester is one of the set of nodes of the first network.

23. The method of claim 22, wherein the set of bridge nodes includes a master node and one or more intermediate nodes controllable by the master node, and the requester is the master node.

24. A method according to any one of claims 14 to 23, wherein the request includes one or more credentials of the requester.

25. The method of claim 24, wherein the one or more credentials include an IP address of the requester.

a memory comprising one or more memory units;
a processing device comprising one or more processing units, the memory storing code configured to be executed on the processing device, the code, when on the processing device; configured to carry out the method according to any one of claims 1 to 13;
computer equipment.

27. A computer program product embodied on a computer readable storage and configured to perform a method according to any one of claims 1 to 13 when executed on a computer equipment according to claim 26.

a memory comprising one or more memory units;
a processing device comprising one or more processing units, the memory storing code configured to be executed on the processing device, the code, when on the processing device; configured to carry out the method according to any one of claims 14 to 25;
computer equipment.

26. A computer program product embodied on a computer readable storage and configured to perform a method according to any one of claims 14 to 25 when executed on computer equipment.