Abstract: Techniques are described for using a decentralized group of authentication server nodes to prevent singular dependence upon any given online platform for authenticating avatars. For each epoch duration of time, a consensus protocol operating on a blockchain is used to elect an authentication server node. The elected node can then act as an authentication server on behalf of the online platform for that fixed epoch duration of time. Within this epoch of time, a client device (e.g., used by a user to access an online platform) performs a periodic heartbeat authentication with the elected authentication server node using an efficient authentication protocol that relies on a keyed-hashing mechanism. A client device can use the described system and authentication methods concurrently with multiple different online platforms (e.g., separate metaverses or other virtual worlds).

Abstract: Techniques are described for providing a computer-implemented hybrid asset management platform and related system components used to manage transactions involving “hybrid” assets comprising both digital and physical components. The hybrid asset management platform provides continual synchronization between digital asset certificates of legal ownership (e.g., data structures managed off-chain in one or more private data stores) with corresponding asset non-fungible tokens (NFTs) that are tradeable on a blockchain or other type of decentralized ledger. Among other benefits, the described hybrid asset management platform provides for efficient and secure transactions involving possibly several different types of users, thereby improving the ability for metaverses, gaming platforms, virtual and real-world marketplaces, and other entities to facilitate transactions involving hybrid assets.

Abstract: Techniques are described for a system architecture, protocols, tokens, and other data structures used to manage the consistency of the state of digital assets and their ownership across one or more metaverse realms (e.g., interactive digital worlds). A digital asset in the form of a token (e.g., a token stored on a decentralized ledger) can be bound to real world physical assets (including physical objects of value) and at the same time can also be bound to a visual symbol or a pictograph (e.g., an avatar) in one or more metaverse realms. In some examples, it is desirable for any changes to the state or ownership of the asset in one of the three realms (that is, in the physical real-world, in the form of a token on a decentralized ledger, or as a digital representation within a metaverse) to also be reflected in the other two realms.

Abstract: Techniques for enabling the creation of a digital asset representation of physical goods (e.g., luxury items) produced in limited quantities or heirloom-goods associated with restricted ownership rules. Anti-counterfeiting mechanisms are proposed for both classes of goods. The provenance of both classes of goods is traced using cryptography and decentralized ledger technology. For example, mechanisms to restrict ownership of heirloom-goods are proposed based on the combination of the DNA biological fingerprint of the patron who originated the goods and smart contract technology. The goods can be represented as digital tokens on the blockchain, binding manufacturing evidence to the token. For heirloom-goods that have restricted ownership rules, persons seeking to acquire the good via the digital token and smart contract are required to prove that they satisfy the entitlement rules based on a biological relationship to the patron.

Abstract: Techniques are described that enable client computer systems to request an attestation provider server to execute a given algorithm as identified by a decentralized algorithm identifier on the blockchain, using a specific data set. In some embodiments, the owners of the algorithms, data schemas, and data sets use their private key to sign/register each of these decentralized identifier structures, which includes a copy of the owner's public key. Ownership of these decentralized identifiers can be validated by verifying the digital signatures on the blockchain. In some embodiments, only the owner can replace or delete (retire) these identifiers by creating a cancellation transaction on the blockchain for each of these identifiers. In some scenarios, the decentralized identifier structures may include payment options for requesting the execution of an algorithm upon a given appropriate data set.

Abstract: Techniques are described for algorithmic confidential computing on personal data and to an insights provider providing access to personal data using limited-use anonymous insights records stored on a blockchain. To enable service providers and other queriers to obtain such insights information in a secure manner, an insights provider creates an anonymous insights record that is recorded on a blockchain responsive a request from a subject indicating that the subject desires to share one or more items of insights information. An anonymous insights record contains a single-use (or limited number of use) random number that is used by the insights provider to index the data in a shards index database for the relevant shards of the insights data file. These multiple segments can then be stored across multiple separate repositories using a decentralized file storage service.

Abstract: Techniques for enabling the creation of a digital asset representation of physical goods (e.g., luxury items) produced in limited quantities or heirloom-goods associated with restricted ownership rules. Anti-counterfeiting mechanisms are proposed for both classes of goods. The provenance of both classes of goods is traced using cryptography and decentralized ledger technology. For example, mechanisms to restrict ownership of heirloom-goods are proposed based on the combination of the DNA biological fingerprint of the patron who originated the goods and smart contract technology. The goods can be represented as digital tokens on the blockchain, binding manufacturing evidence to the token. For heirloom-goods that have restricted ownership rules, persons seeking to acquire the good via the digital token and smart contract are required to prove that they satisfy the entitlement rules based on a biological relationship to the patron.

Abstract: Techniques are described for using a decentralized group of authentication server nodes to prevent singular dependence upon any given online platform for authenticating avatars. For each epoch duration of time, a consensus protocol operating on a blockchain is used to elect an authentication server node. The elected node can then act as an authentication server on behalf of the online platform for that fixed epoch duration of time. Within this epoch of time, a client device (e.g., used by a user to access an online platform) performs a periodic heartbeat authentication with the elected authentication server node using an efficient authentication protocol that relies on a keyed-hashing mechanism. A client device can use the described system and authentication methods concurrently with multiple different online platforms (e.g., separate metaverses or other virtual worlds).

Abstract: Techniques are described for algorithmic confidential computing on personal data and to an insights provider providing access to personal data using limited-use anonymous insights records stored on a blockchain. To enable service providers and other queriers to obtain such insights information in a secure manner, an insights provider creates an anonymous insights record that is recorded on a blockchain responsive a request from a subject indicating that the subject desires to share one or more items of insights information. An anonymous insights record contains a single-use (or limited number of use) random number that is used by the insights provider to index the data in a shards index database for the relevant shards of the insights data file. These multiple segments can then be stored across multiple separate repositories using a decentralized file storage service.

Abstract: Techniques are described for decentralized transaction processing involving digital asset transfer among heterogeneous systems including blockchains and traditional digital asset-providing services. When an application program seeks to modify the state of an asset, it typically strives to ensure that the off-chain real world asset and the digital asset on the blockchain are synchronized. This continuous synchronization is performed to prevent changes in the asset ownership on the blockchain from being conducted without a corresponding state change in the off-chain real world asset. To ensure a correct and consistent state in both the real and digital worlds, the notion of a digital twin is used where a mediating set of computers sit between the two worlds. Furthermore, since transactions in the real world may consist of multiple sub-transactions that occur across various other computers, the notion of a logical unit of work is used to unify the notion of asset-based transactions.

Abstract: Techniques are described that enable client computer systems to request an attestation provider server to execute a given algorithm as identified by a decentralized algorithm identifier on the blockchain, using a specific data set. In some embodiments, the owners of the algorithms, data schemas, and data sets use their private key to sign/register each of these decentralized identifier structures, which includes a copy of the owner's public key. Ownership of these decentralized identifiers can be validated by verifying the digital signatures on the blockchain. In some embodiments, only the owner can replace or delete (retire) these identifiers by creating a cancellation transaction on the blockchain for each of these identifiers. In some scenarios, the decentralized identifier structures may include payment options for requesting the execution of an algorithm upon a given appropriate data set.

Abstract: Techniques are described that enable client computer systems to request an attestation provider server to execute a given algorithm as identified by a decentralized algorithm identifier on the blockchain, using a specific data set. In some embodiments, the owners of the algorithms, data schemas, and data sets use their private key to sign/register each of these decentralized identifier structures, which includes a copy of the owner's public key. Ownership of these decentralized identifiers can be validated by verifying the digital signatures on the blockchain. In some embodiments, only the owner can replace or delete (retire) these identifiers by creating a cancellation transaction on the blockchain for each of these identifiers. In some scenarios, the decentralized identifier structures may include payment options for requesting the execution of an algorithm upon a given appropriate data set.

Abstract: Methods and systems are disclosed for capturing and storing unmalleable evidence regarding the management of cryptographic keys and the application of keys to transaction data, where multiple hardware components are synchronized on an on-going basis to generate an interlinked proof and where the combined evidence are cryptographically merged into a singular hierarchical proof that is then recorded simultaneously on nodes of a distributed ledger system or blockchain system.

Abstract: A system for secure communications between computer devices includes a transmitter device and a receiver device that can communicate in a synchronized manner using unidirectional polarized light, where any physical interference in the light transmissions results in the termination of the communications channel. The system utilizes stream encryption in the transmitter device and the receiver device to encrypt the data payload being communicated.

Abstract: A primary optical path in an optical network is established between first and second edge nodes of the optical network for communication between the first edge node and a primary customer network site coupled to the second edge node. A backup optical path through the optical network from the first edge node to a third edge node of the optical network other than the second edge node is determined for communication between the first edge node and a backup customer network site coupled to the third edge node of the optical network. The backup customer network site is designated to back up the primary customer network site. Communications are forwarded on the primary optical path from the first edge node toward the primary customer network site via the second edge node. Upon detection of a degradation or failure of the primary customer network site, communications are forwarded on the backup optical path from the first edge node toward the backup customer network site via the third edge node.

Abstract: A system, device, and method for receiver access control in an interne television system uses a push mechanism to distribute access control information from a distribution device to an access device. The access device uses the access control information to make receiver access control decisions for a subsequently received request from a host to join a television channel multicast group.

Abstract: A system, device, and method for distributing access control information in a communication system uses a reliable multicast mechanism for distributing access control information by a main server to multiple access control devices. A dedicated multicast group is established for distributing the access control information, and each access control device joins the dedicated multicast group. A reliable multicast mechanism is used to distribute the access control information to the multicast group members. Each access la control device obtains the access control information using the reliable multicast mechanism, and stores the access control information in a database for later use in making receiver access control decisions.

Abstract: A system, device, and method for receiver access control in an interne television system uses a push mechanism to distribute access control information from a distribution device to an access device. The access device uses the access control information to make receiver access control decisions for a subsequently received request from a host to join a television channel multicast group.

Abstract: A primary optical path in an optical network is established between first and second edge nodes of the optical network for communication between the first edge node and a primary customer network site coupled to the second edge node. A backup optical path through the optical network from the first edge node to a third edge node of the optical network other than the second edge node is determined for communication between the first edge node and a backup customer network site coupled to the third edge node of the optical network. The backup customer network site is designated to back up the primary customer network site. Communications are forwarded on the primary optical path from the first edge node toward the primary customer network site via the second edge node. Upon detection of a degradation or failure of the primary customer network site, communications are forwarded on the backup optical path from the first edge node toward the backup customer network site via the third edge node.

Abstract: A system, device, and method for receiver access control in an internet television system uses a push mechanism to distribute access control information froth a distribution device to an access device. The access device uses the access control information to make receiver access control decisions for a subsequently received request from a host to join a television channel multicast group.