Abstract: An incorrect copy of a record of data can be prevented from being transmitted to a distributed ledger system. A first file can be received and can include information, in audio or video form, with a description of a subject matter of the record of data and with an authorization to transmit the copy to the distributed ledger system. The first file can be sent to a device. A second file can be received from the device and can include information that confirms that the description of the subject matter, included in the first file, is correct, and that confirms that an entity, which controlled production of the first file, has permission to authorize causing the copy to be transmitted to the distributed ledger system. The correct copy can be caused, based on a receipt of the first and the second files, to be transmitted to the distributed ledger system.

Abstract: Methods, computer readable media, and devices for escrow of master keys and recovery of previously escrowed master keys may be disclosed. A method for escrow of master keys may include registering a root certificate authority (CA) within each of two first-party hardware security modules (HSMs), initializing each of three third-party HSMs as master escrow recovery devices, performing a bootstrap operation on an authoritative blockchain to generate three master keys, generating a first set of master key shard ciphertexts using a first one of the three master escrow recovery devices, a second set using a second one of the three master escrow recovery devices, and a third set using a third one of the three master escrow recovery devices, and storing the first, the second, and the third set of master key shard ciphertexts as opaque objects in each of the two first-party HSMs.

Abstract: Methods, computer readable media, and devices for escrow of master keys and recovery of previously escrowed master keys may be disclosed. A method for escrow of master keys may include registering a root certificate authority (CA) within each of two first-party hardware security modules (HSMs), initializing each of three third-party HSMs as master escrow recovery devices, performing a bootstrap operation on an authoritative blockchain to generate three master keys, generating a first set of master key shard ciphertexts using a first one of the three master escrow recovery devices, a second set using a second one of the three master escrow recovery devices, and a third set using a third one of the three master escrow recovery devices, and storing the first, the second, and the third set of master key shard ciphertexts as opaque objects in each of the two first-party HSMs.

Abstract: An incorrect copy of a record of data can be prevented from being transmitted to a distributed ledger system. A first file can be received and can include information, in audio or video form, with a description of a subject matter of the record of data and with an authorization to transmit the copy to the distributed ledger system. The first file can be sent to a device. A second file can be received from the device and can include information that confirms that the description of the subject matter, included in the first file, is correct, and that confirms that an entity, which controlled production of the first file, has permission to authorize causing the copy to be transmitted to the distributed ledger system. The correct copy can be caused, based on a receipt of the first and the second files, to be transmitted to the distributed ledger system.

Abstract: An incorrect copy of a record of data can be prevented from being transmitted to a distributed ledger system. A first file can be received and can include information, in audio or video form, with a description of a subject matter of the record of data and with an authorization to transmit the copy to the distributed ledger system. The first file can be sent to a device. A second file can be received from the device and can include information that confirms that the description of the subject matter, included in the first file, is correct, and that confirms that an entity, which controlled production of the first file, has permission to authorize causing the copy to be transmitted to the distributed ledger system. The correct copy can be caused, based on a receipt of the first and the second files, to be transmitted to the distributed ledger system.

Abstract: An incorrect transmission, of a record of data to a distributed ledger system, can be prevented. A first signal can be received. The first signal can include a first instruction to cause the record to be transmitted to the system. One or more items of information in the record can be determined. A delay of time to be elapsed, before a transmission of the record to the system, can be set in response to a receipt of the first signal and a determination of the one or more items. The transmission of the record to the system can be caused to occur after the delay has elapsed. The transmission of the record to the system can be prevented in response to a receipt of a second signal before the delay has elapsed. The second signal can include a second instruction that supersedes the first instruction.

Abstract: Systems, methods, and devices are provided that allow for high-availability, redundant, cryptographically secure storage of secret data and other data on a blockchain. In an embodiment, a plurality of shards of secret data are received from a user and encrypted with shard manager public keys. The encrypted shards are stored on an authoritative blockchain, allowing for secure storage and use of the secret data by the owner and/or the blockchain.

Abstract: An incorrect transmission, of a record of data to a distributed ledger system, can be prevented. A first signal can be received. The first signal can include a first instruction to cause the record to be transmitted to the system. One or more items of information in the record can be determined. A delay of time to be elapsed, before a transmission of the record to the system, can be set in response to a receipt of the first signal and a determination of the one or more items. The transmission of the record to the system can be caused to occur after the delay has elapsed. The transmission of the record to the system can be prevented in response to a receipt of a second signal before the delay has elapsed. The second signal can include a second instruction that supersedes the first instruction.

Abstract: An erroneous transmission, of a record of data, to a distributed ledger system can be prevented. A first operation can confirm that a format of a content within the record of data is correct. A second operation can confirm that formats of elements of a set of information, about authorizations used to cause the record of data to be communicated via the distributed ledger system, are correct. A third operation can confirm that subject matters of the elements and a subject matter of the record of data are the same. A fourth operation can retrieve credentials associated with entities that produced the elements. A fifth operation, using the credentials, can confirm that the entities that produced the elements were authorized to produce them. A sixth operation can confirm that the set of information is sufficient to authorize causing the record of data to be communicated via the distributed ledger system.

Abstract: Methods, computer readable media, and devices for escrow of master keys and recovery of previously escrowed master keys may be disclosed. A method for escrow of master keys may include registering a root certificate authority (CA) within each of two first-party hardware security modules (HSMs), initializing each of three third-party HSMs as master escrow recovery devices, performing a bootstrap operation on an authoritative blockchain to generate three master keys, generating a first set of master key shard ciphertexts using a first one of the three master escrow recovery devices, a second set using a second one of the three master escrow recovery devices, and a third set using a third one of the three master escrow recovery devices, and storing the first, the second, and the third set of master key shard ciphertexts as opaque objects in each of the two first-party HSMs.

Abstract: An erroneous transmission, of a record of data, to a distributed ledger system can be prevented. A first operation can confirm that a format of a content within the record of data is correct. A second operation can confirm that formats of elements of a set of information, about authorizations used to cause the record of data to be communicated via the distributed ledger system, are correct. A third operation can confirm that subject matters of the elements and a subject matter of the record of data are the same. A fourth operation can retrieve credentials associated with entities that produced the elements. A fifth operation, using the credentials, can confirm that the entities that produced the elements were authorized to produce them. A sixth operation can confirm that the set of information is sufficient to authorize causing the record of data to be communicated via the distributed ledger system.

Abstract: An incorrect transmission, of a record of data to a distributed ledger system, can be prevented. A first signal can be received. The first signal can include a first instruction to cause the record to be transmitted to the system. One or more items of information in the record can be determined. A delay of time to be elapsed, before a transmission of the record to the system, can be set in response to a receipt of the first signal and a determination of the one or more items. The transmission of the record to the system can be caused to occur after the delay has elapsed. The transmission of the record to the system can be prevented in response to a receipt of a second signal before the delay has elapsed. The second signal can include a second instruction that supersedes the first instruction.

Abstract: An erroneous transmission, of a record of data, to a distributed ledger system can be prevented. A first operation can confirm that a format of a content within the record of data is correct. A second operation can confirm that formats of elements of a set of information, about authorizations used to cause the record of data to be communicated via the distributed ledger system, are correct. A third operation can confirm that subject matters of the elements and a subject matter of the record of data are the same. A fourth operation can retrieve credentials associated with entities that produced the elements. A fifth operation, using the credentials, can confirm that the entities that produced the elements were authorized to produce them. A sixth operation can confirm that the set of information is sufficient to authorize causing the record of data to be communicated via the distributed ledger system.

Abstract: An incorrect copy of a record of data can be prevented from being transmitted to a distributed ledger system. A first file can be received and can include information, in audio or video form, with a description of a subject matter of the record of data and with an authorization to transmit the copy to the distributed ledger system. The first file can be sent to a device. A second file can be received from the device and can include information that confirms that the description of the subject matter, included in the first file, is correct, and that confirms that an entity, which controlled production of the first file, has permission to authorize causing the copy to be transmitted to the distributed ledger system. The correct copy can be caused, based on a receipt of the first and the second files, to be transmitted to the distributed ledger system.

Abstract: One embodiment of the present invention provides an efficient data-object-related-request-routing method and component used within a dynamic, distributed data-storage system for efficiently routing data objects to component data-storage systems when component data-storage systems frequently become unavailable and new component data-storage systems are frequently added to the dynamic, distributed data-storage system. The data-object-related-request-routing method is employed in data-object store operations and data-object retrieval operations. The data-object store and retrieval operations, in turn, are based on identifying certain preferred component data-storage systems within the distributed data-storage system by a component-data-storage-system-ranking method.

Abstract: A method, apparatus, and system are disclosed for storing chunks within a file system. In one embodiment, the chunks are stored in a file system of a client computer and used to reconstruct the file.

Abstract: One embodiment of the present invention provides an efficient data-object-related-request-routing method and component used within a dynamic, distributed data-storage system for efficiently routing data objects to component data-storage systems when component data-storage systems frequently become unavailable and new component data-storage systems are frequently added to the dynamic, distributed data-storage system. The data-object-related-request-routing method is employed in data-object store operations and data-object retrieval operations. The data-object store and retrieval operations, in turn, are based on identifying certain preferred component data-storage systems within the distributed data-storage system by a component-data-storage-system-ranking method.