US 11,888,965 B2
Method and system for IOT device digital asset permission transfer system using blockchain network
Hui Fang, Singapore (SG); Bensam Joyson, Singapore (SG); Anupam Sharma, North West Singapore (SG); and Zunhua Wang, Singapore (SG)
Assigned to MASTERCARD ASIA/PACIFIC PTE. LTD., Singapore (SG)
Filed by MASTERCARD ASIA/PACIFIC PTE. LTD., Singapore (SG)
Filed on Dec. 10, 2019, as Appl. No. 16/708,630.
Prior Publication US 2021/0176039 A1, Jun. 10, 2021
Int. Cl. H04L 9/06 (2006.01); G06F 21/60 (2013.01); H04L 9/30 (2006.01); H04L 9/32 (2006.01); H04L 9/00 (2022.01)
CPC H04L 9/0637 (2013.01) [G06F 21/602 (2013.01); H04L 9/3073 (2013.01); H04L 9/3239 (2013.01); H04L 9/3247 (2013.01); H04L 9/3297 (2013.01); H04L 9/50 (2022.05)] 16 Claims
OG exemplary drawing
 
1. A method for protection of data transfers for internet of things devices using a blockchain, comprising:
receiving, by a receiver of a node in a blockchain network, a data message from an internet of things (IoT) device, the data message being formatted according to an IoT messaging protocol and including at least a device identifier associated with the IoT device and encrypted data;
generating, by a processor of the node in the blockchain network, a new block, including a block header and one or more data values, wherein the one or more data values includes the received data message, which includes (i) at least the device identifier associated with the IoT device from which the data message is received, and (ii) the encrypted data, and wherein the block header includes at least a timestamp, a block reference value, and a data reference value based on the one or more data values;
transmitting, by a transmitter of the node in the blockchain network, the generated new block to a plurality of additional nodes in the blockchain network;
confirming, by each additional node of the plurality of additional nodes in the blockchain network, the new block by verifying the block reference value and data reference value;
receiving, by the node of the blockchain network, confirmation of the new block from each additional node of the plurality of additional nodes;
upon receiving confirmation of the new block, transmitting, by the transmitter of the node in the blockchain network, the new block to all of the blockchain nodes in the blockchain network for addition to the blockchain;
receiving, by the receiver of the node, a data request from an external device, the data request including at least an external identifier associated with the external device;
verifying, by the node, permission of the external device to access the encrypted data based on at least the external identifier and the device identifier by accessing permission information stored in an active directory system that is external to the blockchain network, said permission information includes at least the external identifier, the device identifier and information regarding the permission; and
transmitting, by the transmitter of the node, the encrypted data to the external device.