System and computer program product for certified confidential data collaboration using blockchains

Abstract

A method for providing certified confidential data collaboration between untrusted parties, including creating a changeset proposal, remotely performing a certified operation and passing the changeset proposal to the certified operation, creating a unique changeset reference validating the changeset proposal and creating a state-at-changeset structure extracting a section-state-at-changeset structure from the changeset proposal, performing a cryptographic hash of the state-at-changeset structure and the section-state-at-changeset structure, writing to a local transactional database a changeset fat twin record communicating a changeset reference notification for each fat twin record to the parties, performing a certified operation in a blockchain a certified thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure and the cryptographically hashed section-state-at-changeset structure, validating that a previous certified operation with the same changeset reference does not exist, writing to the blockchain a new thin twin record and performing a proof-of-certified-operation on the thin twin smart contract.

1 . A method for providing certified confidential data collaboration communication between two or more of a plurality of parties where an established trust relationship is not required between the plurality of parties, the method comprising:
 creating, by a first party, a changeset proposal, the changeset proposal comprising a comment and a list of parties;   remotely performing, by the first party, a certified operation on a computer associated with a semi-trusted governor party and passing the changeset proposal to the certified operation;   creating, by the semi-trusted governor party, a first globally unique changeset reference in a certified thread;   validating, by the semi-trusted governor party, the changeset proposal and creating, by the semi-trusted governor party, a state-at-changeset structure comprising the validated changeset proposal and a timestamp;   performing, by the semi-trusted governor party, a cryptographic hash of the state-at-changeset structure;   writing, by the semi-trusted governor party, a changeset fat twin record comprising the state-at-changeset structure;   communicating, by the semi-trusted governor party, a changeset reference notification for each fat twin record to each of the one or more parties;   performing, by the semi-trusted governor party, the certified operation in a blockchain a certified thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure; and   writing by the thin twin smart contract to the blockchain a new thin twin record containing the changeset reference and the cryptographically hashed state-at-changeset structure.   
     
     
         2 . The method of  claim 1 , wherein the changeset proposal further comprises a list of versioned and typed data sections. 
     
     
         3 . The method of  claim 2 , wherein the method further comprises:
 extracting, by the semi-trusted governor party, a section-state-at-changeset structure from the changeset proposal, wherein the section-state-at-changeset structure is a subset of a total state of the list of versioned and typed data sections;   performing, by the semi-trusted governor party, a cryptographic hash of the section-state-at-changeset structure;   writing, by the semi-trusted governor party, to a local transactional database a changeset fat twin record comprising the changeset reference and the associated state-at-changeset structure and section-state-at-changeset structure;   wherein performing, by the semi-trusted governor party, the certified operation in a blockchain a certified thin twin smart contract further includes passing the cryptographically hashed section-state-at-changeset structure; and   wherein the new thin twin record, written by the thin twin smart contract to the blockchain, further contains the cryptographically hashed section-state-at-changeset structure.   
     
     
         4 . The method of  claim 3 , wherein the changeset proposal further comprises a list of attachments. 
     
     
         5 . The method of  claim 1 , wherein whether the certified operation expressed by the changeset reference occurred may be proved by each of the list of parties by:
 performing a proof-of-certified-operation on the thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure and cryptographically hashed state-at-changeset structure, wherein the proof may be determined even where the semi-trusted governor party is unresponsive after performance of the certified operation, and wherein the blockchain thin twin record constrains the semi-trusted governor party that becomes untrustworthy from re-issuing the certified operation with tampered timestamps, tampered identities, tampered attachments or tampered comment to one or more of the list of parties, the blockchain thin twin record constraining the ability of the semi-trusted governor party that is no longer trustworthy from re-issuing the certified operation with at least one selected from the group consisting of tampered timestamps, tampered identities, tampered attachments and tampered comment.   
     
     
         6 . The method of  claim 5 , wherein the first globally unique changeset reference comprises a first globally unique thread tracking number and a related sequential changeset number. 
     
     
         7 . A method for providing certified confidential data collaboration between two or more of a plurality of parties where an established trust relationship is not required between the plurality of parties, the method comprising:
 creating, by a first party, a changeset proposal, the changeset proposal comprising a comment, a list of parties, and a list of versioned, modifiable sections;   remotely performing, by the first party, a certified operation on a computer associated with a decentralized governor running in a trusted execution enclave and passing the changeset proposal to the decentralized governor, wherein the decentralized governor cannot execute the certified operation incorrectly without detection and is not required to be trusted to accurately execute the certified operation, wherein the trusted enclave environments performs the certified operation without revealing any confidential information to a third party other than the two or more of the plurality of parties to the collaboration and specifically not revealing any confidential information to even if the third party is in communication with the decentralized governor, and without requiring the decentralized governor to be trusted;   creating, by the decentralized governor, a first globally unique changeset reference in a certified thread;   validating, by decentralized governor, the changeset proposal and creating, by the decentralized governor, a state-at-changeset structure comprising the validated changeset proposal and a timestamp;   extracting, by the decentralized governor, a section-state-at-changeset structure from the changeset proposal, wherein the section-state-at-changeset structure is a subset of a total state of the list of modifiable sections;   performing, by the decentralized governor, a cryptographic hash of the state-at-changeset structure;   performing, by the decentralized governor, a cryptographic hash of the section-state-at-changeset structure;   writing, by the decentralized governor, a changeset fat twin record within the trusted execution enclave comprising the changeset reference and the associated state-at-changeset structure and section-state-at-changeset structure.   communicating, by the decentralized governor, a changeset reference notification for each fat twin record to each of the one or more parties;   allowing, by the decentralized governor, access to the fat twin record to each of the or more parties to the collaboration, but not allowing access to the third party even if the third party is in communication with the decentralized governor;   performing, by the decentralized governor, the certified operation on a blockchain certified thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure and the cryptographically hashed section-state-at-changeset structure; and   writing by the thin twin smart contract to the blockchain a new thin twin record containing the changeset reference, the cryptographically hashed state-at-changeset structure and the cryptographically hashed section-state-at-changeset structure.   
     
     
         8 . The method of  claim 7 , wherein the certified operation expressed by the changeset reference, the section-state-at-changeset structure including the timestamp and identities of the parties, and the state-at-changeset structure including the timestamp and a list of identities for each of the list of parties, occurred may be proved by each of the list of parties by:
 cryptographically hashing the state-at-changeset structure and the section-state-at-changeset structure associated with the certified operation; and   performing a proof-of-certified-operation on the thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure and cryptographically hashed state-at-changeset structure, wherein the proof may be determined even where the decentralized governor is unresponsive after performance of the certified operation, and wherein the blockchain thin twin record constrains the decentralized governor that becomes untrustworthy from re-issuing the certified operation with tampered timestamps, tampered identities, tampered attachments, tampered sections or tampered comment to one or more of the list of parties, the blockchain thin twin record constraining the ability of the decentralized governor that is no longer trustworthy from re-issuing the certified operation with at least one selected from the group consisting of tampered timestamps, tampered identities, tampered attachments, tampered sections and tampered comment.   
     
     
         9 . The method of  claim 8 , wherein the method further comprises validating, by the certified thin twin smart contract, that there does not exist a previous certified operation with the same changeset reference. 
     
     
         10 . A method for providing certified confidential data collaboration between two or more of a plurality of parties where an established trust relationship is not required between the plurality of parties, wherein a separate one of a plurality of governors is individually associated with each of the two or more of the plurality of parties to the collaboration respectively, the method comprising:
 creating, by a first party, a changeset proposal, the changeset proposal comprising a comment and a list of parties;   performing, by the first party, a certified operation on a computer associated with the first party, wherein the governor is associated with the first party has a changeset proposal to the certified operation;   creating, by the governor associated with the first party, a first globally unique changeset reference in a certified thread;   creating, by the governor associated with the first party, a state-at-changeset structure comprising the changeset proposal and a timestamp performing, by the governor associated with the first party, a cryptographic hash of the a changeset fat twin record comprising the changeset reference and the associated state-at-changeset structure;   generating, by the governor associated with the first party, a changeset encryption key;   encrypting, by the governor associated with the first party, the state-at-changeset structure using the changeset encryption key to produce an encrypted-state-at-changeset structure;   writing, by the governor associated with the first party, to a decentralized file system on a remote computer the encrypted fat twin record comprising the encrypted-state-at-changeset structure to ensure that a third party other than the two or more of the plurality of parties to the collaboration and their respective party associated governors does not have access to the fat twin record and to ensure end-to-end encryption and confidentiality, wherein one end of an end-to-end encryption is defined as the combination of a party and its party associated governor;   communicating, by the governor associated with the first party, a changeset reference notification for each encrypted fat twin record on the decentralized file system to each of the one or more parties;   performing, by the governor associated with the first party, the certified operation on a blockchain certified thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure;   writing by the thin twin smart contract to the blockchain a new thin twin record containing the changeset reference, the cryptographically hashed state-at-changeset structure and the cryptographically hashed section-state-at-changeset structure; and distributing by the governor associated with the first party the changeset encryption key to all the other parties on the collaboration at the changeset.   
     
     
         11 . The method of  claim 10 , wherein the governor associated with the first party, encrypts the changeset encryption key, with the respective public key of each of the other collaborating parties, and wherein the method further comprises:
 writing the list of encrypted changeset encrypted keys to the thin twin smart contract, retrieving, by a second party, the encrypted changeset encryption key from the thin twin smart contract;   decrypting, by the second party, the encrypted changeset encryption key using their private key to obtain the changeset encryption key; and   decrypting, by the second party, the encrypted fat twin record from the decentralized file system using the changeset encryption key to obtain the fat twin record.   
     
     
         12 . The method of  claim 10 , wherein the changeset proposal further comprises a list of modifiable sections and a list of attachments. 
     
     
         13 . The method of  claim 11 , wherein the certified operation expressed by the changeset reference, the section-state-at-changeset structure including the timestamp and identities of the parties, and the state-at-changeset structure including the timestamp and a list of identities for each of the list of parties, occurred may be proved by each of the list of parties by
 cryptographically hashing the state-at-changeset structure and the section-state-at-changeset structure associated with the certified operation; and   performing a proof-of-certified-operation on the thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure and cryptographically hashed state-at-changeset structure, wherein the blockchain thin twin record constrains each of the party associated governors that becomes untrustworthy from re-issuing the certified operation with tampered timestamps, tampered identities, tampered attachments, tampered sections or tampered comment to one or more of the list of parties, the blockchain thin twin record constraining the ability of each of the party associated governors that is no longer trustworthy from re-issuing the certified operation with at least one selected from the group consisting of tampered timestamps, tampered identities, tampered attachments, tampered sections and tampered comment.   
     
     
         14 . The method of  claim 13 , wherein each of the party associated governors may play the role of an auditor VAP and validate the correspondence between the encrypted fat twin and the blockchain-based thin twin and write validation attestations to the blockchain associated with the changeset reference.