US 11,657,164 B2
Decentralized policy publish and query system for multi-cloud computing environment
Pengfei Wu, Shanghai (CN); Stephen J. Todd, Center Conway, NH (US); and Kun Wang, Beijing (CN)
Assigned to EMC IP Holding Company LLC, Hopkinton, MA (US)
Filed by EMC IP Holding Company LLC, Hopkinton, MA (US)
Filed on Sep. 24, 2020, as Appl. No. 17/31,282.
Application 17/031,282 is a division of application No. 16/048,785, filed on Jul. 30, 2018, granted, now 10,824,740.
Prior Publication US 2021/0004473 A1, Jan. 7, 2021
Int. Cl. H04L 29/06 (2006.01); G06F 21/60 (2013.01); H04L 9/06 (2006.01); H04L 9/40 (2022.01)
CPC G06F 21/602 (2013.01) [H04L 9/0637 (2013.01); H04L 63/0823 (2013.01); H04L 63/0876 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
sending a request from a given node in a decentralized system of nodes to a blockchain network, wherein the request is associated with a given policy file that defines a policy that applies to at least a subset of nodes in the decentralized system of nodes;
receiving policy file retrieval metadata at the given node from the blockchain network in response to the request, wherein the policy file retrieval metadata comprises address information associated with storage of the given policy file in a decentralized storage network, the address information comprises a content-based address generated for the given policy file, and the content-based address comprises a computed hash value of the given policy file;
sending the address information from the given node to the decentralized storage network; receiving the given policy file at the given node from the decentralized storage network; and
verifying an integrity of the given policy file by comparing the content-based address to a hash digest of the given policy file to determine whether the hash digest is the same as the content-based address;
wherein the policy file retrieval metadata comprises a key-value pair and the key of the key-value pair comprises a policy type associated with the given policy file;
wherein the request sent from the given node to the blockchain network comprises a command specifying the policy type associated with the given policy file; and
wherein the given node is implemented via at least one processing device comprising a processor coupled to a memory.