Application US20190065709

DIGITAL ASSET TRACEABILITY AND ASSURANCE USING A DISTRIBUTED LEDGER
[+] Show Details

US20190065709

1. One or more tangible media including logic for execution by one or more processors and when executed operable for facilitating digital asset traceability in a networked computing environment, the method comprising: (2) (7)

determining a request to register a digital asset in the networked computing environment;

computing a first hash of an initial source file of the digital asset;

ascertaining a version of the initial source file;

electing one or more nodes of a distributed ledger of the networked computing environment to commit the first hash to the distributed ledger in association with a version of the digital asset corresponding to the version of the initial source file;

converting the source file into a binary file, resulting in a binary version of the digital asset;

computing a second hash, wherein the second hash is of the binary file; and

committing the second hash to the distributed ledger in association with the version of the digital asset.

2. The one or more tangible storage media of claim 1, further including: (2) (1)

using version information associated with the second hash and version information associated with the first hash to associate one or more binary file hashes in the distributed ledger with one or more source files in a source file repository, a workstation from which the source file originated, and a developer of the source file, wherein the distributed ledger includes a blockchain, and wherein the digital asset includes software.

3. The one or more tangible storage media of claim 2, further including: (1) (1)

selectively making the binary file available to one or more client devices and associated one or more respective authenticated and permissioned users of the networked computing environment, in accordance with one or more permissions allocated to the one or more authenticated and permissioned users, wherein the one or more client devices include one or more computers of one or more customers of one or more cloud services provided in the networked computing environment.

4. The one or more tangible storage media of claim 3, further including: (1) (1)

6. The one or more tangible storage media of claim 2, wherein electing further includes: (1) (1)

selecting, in accordance with a proof-of-stake mechanism, one or more nodes of the networked computing environment to implement committing the first hash, and for committing the second hash, to the blockchain, wherein the proof-of-stake mechanism implements the following steps: referencing identifying information and associated permissions of the one or more nodes, to confirm that the one or more nodes are permissioned to commit one or more blocks to the blockchain, resulting in a set of one or more confirmed nodes;

determining which of the one or more confirmed nodes first received a source file or binary file;

selecting a node from among the one or more confirmed nodes to perform a calculation to commit a registration entry to the blockchain, resulting in a selected node; and

using the selected node to commit the registration entry to the blockchain in combination with an indicator of the selected node that commits the registration entry to the blockchain as a block, whereby the block includes the indicator.

7. The one or more tangible storage media of claim 6, further including: (1) (3)

submitting the binary file to a production server;

storing the source file in a source code repository that is accessible to one or more quality control mechanism; and

storing the binary file in a binary code repository.

8. The one or more tangible storage media of claim 7, further including: (0) (2)

9. The one or more tangible storage media of claim 1, wherein the request to register a digital asset originates from a computer with which the source file was developed or from which it was submitted, and wherein the first hash is computed using a first hash function that receives, as input, a digital fingerprint of the source file, a user IDentification (ID), a Central Processing Unit (CPU) ID, and a Media Access Control (MAC) address, all associated with or characterizing the computer. (1) (0)

11. A method for facilitating digital asset traceability in a networked computing environment comprising the following acts: (2) (7)

determining a request to register a digital asset in the networked computing environment;

computing a first hash of an initial source file of the digital asset;

ascertaining a version of the initial source file;

converting the source file into a binary file, resulting in a binary version of the digital asset;

computing a second hash, wherein the second hash is of the binary file; and

committing the second hash to the distributed ledger in association with the version of the digital asset.

12. The method of claim 11, further including: (2) (1)

13. The method of claim 12, further including: (1) (1)

14. The method of claim 13, further including: (1) (1)

16. The method of claim 12, wherein electing further includes: (1) (1)

determining which of the one or more confirmed nodes first received a source file or binary file;

selecting a node from among the one or more confirmed nodes to perform a calculation to commit a registration entry to the blockchain, resulting in a selected node; and

17. The method of claim 16, further including: (1) (3)

submitting the binary file to a production server;

storing the source file in a source code repository that is accessible to one or more quality control mechanism; and

storing the binary file in a binary code repository.

18. The method of claim 17, further including: (0) (2)

19. The method of claim 11, wherein the request to register a digital asset originates from a computer with which the source file was developed or from which it was submitted, and wherein the first hash is implemented by a hash function that receives, as input, a digital fingerprint of the source file, a user IDentification (ID), a Central Processing Unit (CPU) ID, and a Media Access Control (MAC) address, all associated with or characterizing the computer, and wherein the first hash is accessible to one or more software quality control servers, and further including: (0) (1)

20. An apparatus comprising: (0) (9)

one or more processors;

logic encoded in one or more tangible media for execution by the one or more processors and when executed operable for:

determining a request to register a digital asset in a networked computing environment;

computing a first hash of an initial source file of the digital asset;

ascertaining a version of the initial source file;

converting the source file into a binary file, resulting in a binary version of the digital asset;

computing a second hash, wherein the second hash is of the binary file; and

committing the second hash to the distributed ledger in association with the version of the digital asset.

View Abstract and Specification Size

PDF with Images and Document Face >

Full Text Publication >

Application US20190065709

DIGITAL ASSET TRACEABILITY AND ASSURANCE USING A DISTRIBUTED LEDGER

Patent Matrix® Search