US 12,118,127 B1
Data stream integrity in a tiered blockchain structure
Christopher Cordi, San Francisco, CA (US); Nathaniel G. McKervey, Tallahassee, FL (US); Siegfried Puchbauer, San Francisco, CA (US); and Antoine Toulme, San Francisco, CA (US)
Assigned to SPLUNK INC., San Francisco, CA (US)
Filed by SPLUNK INC., San Francisco, CA (US)
Filed on Oct. 29, 2021, as Appl. No. 17/514,738.
Int. Cl. G06F 21/64 (2013.01); H04L 9/00 (2022.01); H04L 9/32 (2006.01)
CPC G06F 21/64 (2013.01) [H04L 9/3236 (2013.01); H04L 9/50 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by one or more servers of a network platform, machine data items from one or more networked devices, the one or more networked devices generating intermediate data in generating the machine data items;
grouping the machine data items into time-based data groupings the time-based data groupings comprising a full data grouping that includes a first set of the machine data items and a first intermediate dataset of the intermediate data, the time-based data groupings further comprising a current data grouping in which a second set of the machine data items are stored;
generating a first data grouping batch hash in a first blockchain system, the first data grouping batch hash generated by combining a hash of the first set of machine data items with hashes of the first intermediate dataset, the hashes of the first intermediate dataset being further stored in a second blockchain system that generates blocks faster than the first blockchain system;
generating hashes of a second intermediate dataset of the intermediate data in the second blockchain system, the hashes of a second intermediate dataset being stored in the second blockchain system while the current data grouping is not full and new items of the second set of the machine data items are being stored in the current data grouping; and
generating a second data grouping batch hash in the first blockchain system in response to the current data grouping being full, the second data grouping batch hash generated by combining a hash of the second set of machine data items with the hashes of the second intermediate dataset.