ADAPTIVE SECURITY FOR SMART CONTRACTS USING HIGH GRANULARITY METRICS

    公开(公告)号:US20220337397A1

    公开(公告)日:2022-10-20

    申请号:US17850269

    申请日:2022-06-27

    Applicant: eBay Inc.

    Abstract: Technologies are shown for HGM based control for smart contract execution. HGM control rules control function calls at a system level utilizing function boundary detection instrumentation in a kernel that executes smart contracts. The detection instrumentation generates a call stack that represents a chain of function calls in the kernel for a smart contract. The HGM control rules are applied to HGMs collected from the call stack to allow or prohibit specific HGMs observed in functions or function call chains. HGM control rules can use dynamic state data in the function call chain. If the dynamic state data observed in function call chains does not meet the requirements defined in the HGM control rules, then the function call can be blocked from executing or completing execution. The HGM control rules can be generated by executing known sets of acceptable or vulnerable smart contracts and collecting the resulting HGMs.

    SYSTEM LEVEL FUNCTION BASED ACCESS CONTROL FOR SMART CONTRACT EXECUTION ON A BLOCKCHAIN

    公开(公告)号:US20220129546A1

    公开(公告)日:2022-04-28

    申请号:US17571371

    申请日:2022-01-07

    Applicant: EBAY INC.

    Abstract: Technologies are shown for system level function based access control for smart contract execution on a blockchain. Access control rules control function calls at a system level by utilizing function boundary detection instrumentation in a kernel that executes smart contracts. The detection instrumentation generates a call stack that represents a chain of function calls in the kernel for execution of a smart contract. The access control rules are applied to the function call stack to allow or prohibit specific functions or function call chains. Access control rules can also define allowed or prohibited parameter data in the function call chain. If the function call chain or parameters do not meet the requirements defined in the access control rules, then the function call can be blocked from executing or completing execution. The access control rules can produce sophisticated access control policies based on complex function call chains.

    SYSTEM LEVEL FUNCTION BASED ACCESS CONTROL FOR SMART CONTRACT EXECUTION ON A BLOCKCHAIN

    公开(公告)号:US20200175155A1

    公开(公告)日:2020-06-04

    申请号:US16429656

    申请日:2019-06-03

    Applicant: eBay Inc.

    Abstract: Technologies are shown for system level function based access control for smart contract execution on a blockchain. Access control rules control function calls at a system level by utilizing function boundary detection instrumentation in a kernel that executes smart contracts. The detection instrumentation generates a call stack that represents a chain of function calls in the kernel for execution of a smart contract. The access control rules are applied to the function call stack to allow or prohibit specific functions or function call chains. Access control rules can also define allowed or prohibited parameter data in the function call chain. If the function call chain or parameters do not meet the requirements defined in the access control rules, then the function call can be blocked from executing or completing execution. The access control rules can produce sophisticated access control policies based on complex function call chains.

    HIGHLY SCALABLE PERMISSIONED BLOCK CHAINS
    6.
    发明公开

    公开(公告)号:US20240028711A1

    公开(公告)日:2024-01-25

    申请号:US18375851

    申请日:2023-10-02

    Applicant: eBay Inc.

    CPC classification number: G06F21/54 H04L9/0637 G06Q20/405 G06Q20/3678

    Abstract: Technologies are shown for function level permissions control for smart contract execution to implement permissions policy on a blockchain. Permissions control rules control function calls at a system level utilizing function boundary detection instrumentation in a kernel that executes smart contracts. The detection instrumentation generates a call stack that represents a chain of function calls in the kernel for a smart contract. The permissions control rules are applied to the call stack to implement permissions control policy. Permissions control rules can use dynamic state data in the function call chain. If the dynamic state data observed in function call chains does not meet the requirements defined in the permissions control rules, then the function call can be blocked from executing or completing execution. The permissions control rules can be generated for a variety of different entities, such as a domain, user or resource.

    RESOURCE TRUST MODEL FOR SECURING COMPONENT STATE DATA FOR A RESOURCE USING BLOCKCHAINS

    公开(公告)号:US20220035623A1

    公开(公告)日:2022-02-03

    申请号:US17499649

    申请日:2021-10-12

    Applicant: EBAY INC.

    Abstract: Technologies are shown for storing sub-component state data for a resource on a blockchain involving generating a resource data block that corresponds to a resource that includes links that correspond to sub-components of the resource, generating a first sub-component state data block for a sub-component of the resource on a blockchain that includes first state data for the first sub-component, and setting the link for the sub-component to reference the first sub-component state data block. Subsequently, a second sub-component state data block can be generated for the sub-component with second state data and the second sub-component state data block linked to the first sub-component state data block.

    HIGHLY SCALABLE PERMISSIONED BLOCK CHAINS

    公开(公告)号:US20220100846A1

    公开(公告)日:2022-03-31

    申请号:US17549027

    申请日:2021-12-13

    Applicant: EBAY INC.

    Abstract: Technologies are shown for function level permissions control for smart contract execution to implement permissions policy on a blockchain. Permissions control rules control function calls at a system level utilizing function boundary detection instrumentation in a kernel that executes smart contracts. The detection instrumentation generates a call stack that represents a chain of function calls in the kernel for a smart contract. The permissions control rules are applied to the call stack to implement permissions control policy. Permissions control rules can use dynamic state data in the function call chain. If the dynamic state data observed in function call chains does not meet the requirements defined in the permissions control rules, then the function call can be blocked from executing or completing execution. The permissions control rules can be generated for a variety of different entities, such as a domain, user or resource.

Patent Agency Ranking