Office Action 1: Notice of Allowance (2025-04-02)

CLAIMS:
Claims

1\. A method for supporting sharing of digital health data of travelers in a travel environment, wherein the travelers' identity is managed using a distributed ledger system, wherein the distributed ledger system includes a global identity blockchain, several security blockchains and a health blockchain, wherein the global identity blockchain is employed as a registry to authenticate entities of the distributed ledger system, wherein a security blockchain is employed for a predetermined travel segment, such that the security blockchain is accessible by entities of the distributed ledger system that are involved in the predetermined travel segment, wherein the health blockchain is employed for sharing health data of the travelers in a key-value store of the health blockchain, wherein a health data record is stored against a hashed access key, wherein the health data record includes a hashed previous access key and health data information, the method comprising:
Sending, from a security blockchain to a traveler, a request to share a predetermined number of health data records;
Receiving, by the security blockchain, consecutive access keys for the
requested health data records and a zero knowledge proof from the traveler;
Verifying, by the security blockchain, the zero knowledge proof received from the traveler, wherein the zero knowledge proof is utilized to validate a latest access key of the access keys provided by the traveler;
Upon successful verification of the zero knowledge proof, retrieving, by the
security blockchain, the health data records from the health blockchain based on hashed access keys, wherein the hashed access keys are generated from the access keys provided by the traveler;
Verifying, by the security blockchain, access keys provided by the traveler using hashed previous access keys included in the retrieved health data records, in
order to check whether the traveler has provided the access keys required for the health data records as requested.

2\. The method according to claim 1, wherein a previous access key, which is included as hash in a health data record of the traveler, represents the access key for the previous health data record of the traveler on the health blockchain.

3\. The method according to claim 1 or 2, wherein a first hash function is used to compute the hashed access keys that are used as keys for health data records in the key-value store of the health blockchain, and wherein a second hash function is used to compute hashed previous access keys that are stored as values for health data records in the key-value store of the health blockchain.

4\. The method according to any one of claim 1 to 3, wherein the traveler provides a physician entity with secret information and a zero knowledge proof for the secret information, wherein the zero knowledge proof is used to verify the secret information by the physician entity, and wherein the secret information is used to register a new health data record on the health blockchain.

5\. The method according to claim 4, wherein the secret information includes an access key and a previous access key.

6\. The method according to claim 4 or 5, wherein the physician entity verifies that the secret information has not been used yet on the health blockchain.

7\. The method according to any one of claims 4 to 6, wherein a multiplicative cyclic group G of prime order q with public generators g and h is used for sharing health data of the traveler on the health blockchain, wherein a private key x of the traveler is picked as a random xE Zq and a public key of the traveler is y = gx, wherein Zq is a multiplicative group of integers that are co-prime with q, wherein the traveler keeps track of a variable n referring to a total number of health data records of the traveler, and
wherein the traveler computes the access key for the nth health data record as hn = hxn and a previous access key as hn\_1 = hx based on the private key x of the traveler.

8\. The method according to claim 7, wherein the zero knowledge proof for the secret information provided by the traveler to the physician entity comprises:
Generating, by the traveler, commitments th = (hn\_1)r1, tg = gri and tk - gr2 using rl,r2 drawn uniformly at random from Zq,
Sending, by the traveler, the commitments th, tg and tk to the physician entity, Sending, by the physician entity, challenges c1, c2 to the traveler, wherein the physician entity generates the challenges cl and c2 drawn uniformly at random from Sending, by the traveler, responses s1, s2 to the physician entity, wherein the traveler generates the responses s, s2 as s1 = r1+ cl \* x and s2 = r2 + c2xn, wherein the physician entity accepts the zero knowledge proof, if gsi is equal to t\* yC and (hn\_1)sl is equal to th \* (hn)c1 and hs2 is equal to tk \* (hn)c2

9\. The method according to any one of claims 4 to 8, wherein the health blockchain receives from the physician entity a register transaction for adding a new health data record for the traveler to the health blockchain, wherein the register transaction comprises a hashed access key, a hashed previous key and health data information, wherein the new health data record is stored against the hashed access key, and wherein the hashed previous key and the health data information is stored as value of the new health data record in the key-value store of the health blockchain.

10\. The method according to claim 9, wherein the health data information includes a sample number that is used to identify the new health data record, preferably by a laboratory entity, wherein the new health data record on the health blockchain is updated upon receiving an update transaction, preferably from the laboratory entity, such that the health data record comprises updated health data information.

11\. The method according to claim 9 or 10, wherein the health data information and/or the updated health data information includes information about health data of the traveler, in particular a viral test result, vaccination information, and/or a medical health test result.

12\. The method according to any one of claims 1 to 11, further comprising:
verifying, by the security blockchain, that the health data of the traveler satisfies a predetermined policy setup.

13\. The method according to any one of claims 1 to 12, wherein the consecutive access keys that are provided by the traveler represent together with the associated health data records a time frame.

14\. The method according to any one of claims 1 to 13, wherein a physician entity verifies credential information provided by the traveler using the global identity blockchain in order to authenticate the traveler at the physician entity.
15\. A distributed ledger system for supporting sharing of digital health data of travelers in a travel environment, in particular for executing a method according to any one of claims 1 to 14, wherein the distributed ledger system includes a global identity blockchain, several security blockchains and a health blockchain, wherein the global identity blockchain is employed as a registry to authenticate entities of the distributed ledger system, wherein a security blockchain is employed for a predetermined travel segment, such that the security blockchain is accessible by entities of the distributed ledger system that are involved in the predetermined travel segment, wherein the health blockchain is employed for sharing health data of the travelers in a key-value store of the health blockchain, wherein a health data record is stored against a hashed access key, wherein the health data record includes a hashed previous access key and health data information, wherein a security blockchain is configured to send to a traveler a request to share a predetermined number of health data records, wherein the security blockchain is configured to receive consecutive access keys for the requested health data records and a zero knowledge proof from the traveler, wherein the security blockchain is configured to verify the zero knowledge proof received from the traveler, wherein the zero knowledge proof is utilized to validate a latest access key of the access keys provided by the traveler, wherein, upon successful verification of the zero knowledge proof, the security blockchain is configured to retrieve the health data records from the health blockchain based on hashed access keys, wherein the hashed access keys are generated from the access keys provided by the traveler, wherein the security blockchain is configured to verify access keys provided by the traveler using hashed previous access keys included in the retrieved health data records, in order to check whether the traveler has provided the access keys required for the health data records as requested. 5 10 15 20 25 30

OFFICE ACTION:
DETAILED ACTION
Response to Amendment
The Preliminary Amendment filed on 03/22/2023 has been entered. New claims 16-17 have been added. Claims 1-17 are pending in the application.
REASONS FOR ALLOWANCE
Claims 1-17 are allowed.
The following is an examiner’s statement of reasons for allowance:
The prior art in the field, such as Chen (US 20200168307 A1) teaches a blockchain-implemented method and a system for accessing electronic medical and health records by blockchain. The newly-added electronic EMR/EHR records can be encrypted using the patient's public key and uploaded to the database. The authorized user can firstly obtain the indexes for the EMR/EHR records from the blockchain by decrypting the blockchain records using a blockchain key (KEY). The software process running in the device will require the user to key in a blockchain key PIN to retrieve the private key so as to decrypt the blockchain records.
Chari (US 20190165943 A1) teaches a method improves security in a blockchain network of devices by protecting security, privacy and ownership assurance of identity assets, where the blockchain network of devices supports a blockchain. The identity asset provider device directs a first member of the blockchain network of devices to associate identities of the identity asset provider and the entity based on their co-ownership of the identity asset by using commitments between the identity asset provider and the entity and based on collaborative proof of ownership of the identity asset using zero knowledge proofs in the blockchain network of devices.
Davison (How blockchain technology can help revive air travel) teaches the concept of traveler digital identity, based on the principle that an individual traveler maintains control over the use of his or her own identity and personal information. This decentralization of control over the components of their identity enables travelers to push proof of their identity — secured by distributed ledger technology and cryptography — to governmental and private-sector entities throughout their journey. Similar technology is being applied to travelers’ Covid-19 status. The blockchain can also be used to track and trace travelers’ “Covid-19 status.”.
However, the prior art of record fail to explicitly teach each and every limitation of the detailed limitations recited independent claim 1 and claim 15.
Any comments considered necessary by applicant must be submitted no later than the payment of the issue fee and, to avoid processing delays, should preferably accompany the issue fee.  Such submissions should be clearly labeled “Comments on Statement of Reasons for Allowance.”
Conclusion



CITED REFERENCE SUMMARIES: Ref US20190165943A1: Claims:
A processor-implemented method of improving security in a blockchain network of devices by protecting security, privacy and ownership assurance of identity assets, wherein the blockchain network of devices supports a blockchain, and wherein the processor-implemented method comprises: establishing, by an identity asset provider device, co-ownership of an identity asset for an identity asset provider and an entity; and directing, by the identity asset provider device, a first member of the blockchain network of devices to associate identities of the identity asset provider and the entity based on their co-ownership of the identity asset by using commitments between the identity asset provider and the entity and based on collaborative proof of ownership of the identity asset using zero knowledge proofs in the blockchain network of devices.
establishing, by an identity asset provider device, co-ownership of an identity asset for an identity asset provider and an entity; and
directing, by the identity asset provider device, a first member of the blockchain network of devices to associate identities of the identity asset provider and the entity based on their co-ownership of the identity asset by using commitments between the identity asset provider and the entity and based on collaborative proof of ownership of the identity asset using zero knowledge proofs in the blockchain network of devices.
The processor-implemented method of claim 1 , further comprising: registering, by the identity asset provider device, details of a creation of the identity asset with a trusted registrar service; posting, by the identity asset provider device, a signed declaration of anonymous ownership of the identity asset along with a unique hash value of the identity asset to the trusted registrar service; verifying, by the trusted registrar service, whether a posted hash value of the identity asset is a duplicate of one of previously posted unique hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and rejecting, by the trusted registrar service, a declaration of anonymous ownership of the identity asset in response to the hash value of the identity asset being found to be a duplicate.
registering, by the identity asset provider device, details of a creation of the identity asset with a trusted registrar service;
posting, by the identity asset provider device, a signed declaration of anonymous ownership of the identity asset along with a unique hash value of the identity asset to the trusted registrar service;
verifying, by the trusted registrar service, whether a posted hash value of the identity asset is a duplicate of one of previously posted unique hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and
rejecting, by the trusted registrar service, a declaration of anonymous ownership of the identity asset in response to the hash value of the identity asset being found to be a duplicate.
The processor-implemented method of claim 1 , further comprising: registering, by the identity asset provider device, details of a creation of the identity asset with a trusted registrar service; posting, by the identity asset provider device, a signed declaration of anonymous ownership of the identity asset along with a unique hash value of the identity asset to the trusted registrar service; verifying, by the trusted registrar service, whether a posted hash value of the identity asset is a duplicate of one of previously posted unique hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and posting, by the trusted registrar service, the declaration of anonymous ownership of the identity asset to the blockchain network of devices in response to the hash value of the identity asset not being found to be a duplicate.
posting, by the trusted registrar service, the declaration of anonymous ownership of the identity asset to the blockchain network of devices in response to the hash value of the identity asset not being found to be a duplicate.
The processor-implemented method of claim 1 , further comprising: receiving, by the identity asset provider device, a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network; encrypting, by the identity asset provider device, a unique hash value of the identity asset with the public key received from the blockchain network of devices; posting, by the identity asset provider device, the encrypted hash value of the identity asset along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices; verifying collaboratively, by the blockchain network of devices, whether a currently posted encrypted hash value of the identity asset is a duplicate of one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and rejecting collaboratively, by the blockchain network of devices, the declaration of anonymous ownership of the identity asset in response to the encrypted hash value of the identity asset being found to be a duplicate.
receiving, by the identity asset provider device, a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network;
encrypting, by the identity asset provider device, a unique hash value of the identity asset with the public key received from the blockchain network of devices;
posting, by the identity asset provider device, the encrypted hash value of the identity asset along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices;
verifying collaboratively, by the blockchain network of devices, whether a currently posted encrypted hash value of the identity asset is a duplicate of one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and
rejecting collaboratively, by the blockchain network of devices, the declaration of anonymous ownership of the identity asset in response to the encrypted hash value of the identity asset being found to be a duplicate.
The processor-implemented method of claim 1 , further comprising: receiving, by the identity asset provider device, a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network; encrypting, by the identity asset provider device, a unique hash value of the identity asset with the public key received from the blockchain network of devices; posting, by the identity asset provider device, the encrypted hash value of the identity asset along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices; verifying collaboratively, by the blockchain network of devices, whether a currently posted encrypted hash value of the identity asset is a duplicate of one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and accepting collaboratively, by the blockchain network of devices, the declaration of anonymous ownership of the identity asset, in response to the encrypted hash value of the identity asset being found not to be a duplicate.
accepting collaboratively, by the blockchain network of devices, the declaration of anonymous ownership of the identity asset, in response to the encrypted hash value of the identity asset being found not to be a duplicate.
The processor-implemented method of claim 1 , further comprising: receiving, by the identity asset provider device, a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network of devices; encrypting, by the identity asset provider device, a unique hash value of the identity asset with the public key received from the blockchain network of devices; performing computation in an encrypted domain, by the identity asset provider device, on the encrypted hash value of the identity asset and a previously posted combination of encrypted hash values of identity assets; posting, by the identity asset provider device, a result of the computation along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices; verifying collaboratively, by the blockchain network of devices, whether the posted result of the computation indicates a duplication of an encrypted hash value of the identity asset with one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and accepting collaboratively, by the blockchain network of devices, a declaration of anonymous ownership of the identity asset, in response to a result of the computation indicating a duplication.
receiving, by the identity asset provider device, a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network of devices;
performing computation in an encrypted domain, by the identity asset provider device, on the encrypted hash value of the identity asset and a previously posted combination of encrypted hash values of identity assets;
posting, by the identity asset provider device, a result of the computation along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices;
verifying collaboratively, by the blockchain network of devices, whether the posted result of the computation indicates a duplication of an encrypted hash value of the identity asset with one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and
accepting collaboratively, by the blockchain network of devices, a declaration of anonymous ownership of the identity asset, in response to a result of the computation indicating a duplication.
The processor-implemented method of claim 1 , further comprising: receiving, by the identity asset provider device, a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network of devices; encrypting, by the identity asset provider device, a unique hash value of the identity asset with the public key received from the blockchain network of devices; performing computation in an encrypted domain, by the identity asset provider device, on an encrypted hash value of the identity asset and a previously posted combination of encrypted hash values of identity assets; posting, by the identity asset provider device, a result of the computation along with signed declarations of anonymous ownership of the identity asset to the blockchain network of devices; verifying collaboratively, by the blockchain network of devices, whether the posted result of the computation indicates a duplication of an encrypted hash value of the identity asset with one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and rejecting collaboratively, by the blockchain network of devices, a declaration of anonymous ownership of the identity asset in response to a result of the computation indicating a duplication.
performing computation in an encrypted domain, by the identity asset provider device, on an encrypted hash value of the identity asset and a previously posted combination of encrypted hash values of identity assets;
posting, by the identity asset provider device, a result of the computation along with signed declarations of anonymous ownership of the identity asset to the blockchain network of devices;
rejecting collaboratively, by the blockchain network of devices, a declaration of anonymous ownership of the identity asset in response to a result of the computation indicating a duplication.
The processor-implemented method of claim 1 , wherein the identity asset provider device is a first computer that is controlled by a first bank, wherein an identity asset consumer device is a second computer that is controlled by a second bank, and wherein the identity asset is loan application information that was created by the first bank for the entity using the identity information supplied by the entity and supplemental information supplied by the first bank for a loan application.
The processor-implemented method of claim 1 , wherein the identity provider asset device is a first computer that is controlled by a first enterprise, wherein an identity asset consumer device is a second computer that is controlled by a second enterprise, and wherein the identity asset is employment application information that was created by the first enterprise for the entity using the identity information supplied by the entity and supplemental information supplied by the first enterprise for an employment application for the entity.
A computer program product for improving security in a blockchain network of devices by protecting identity asset confidentiality, wherein the blockchain network of devices supports a blockchain, wherein the computer program product comprises a non-transitory computer readable storage device having program instructions embodied therewith, the program instructions readable and executable by a computer to perform a method comprising: establishing co-ownership of an identity asset for an identity asset provider and an entity; and directing a first member of the blockchain network of devices to associate identities of the identity asset provider and the entity based on their co-ownership of the identity asset by using commitments between the identity asset provider and the entity and based on collaborative proof of ownership of the identity asset using zero knowledge proofs in the blockchain network of devices.
establishing co-ownership of an identity asset for an identity asset provider and an entity; and
directing a first member of the blockchain network of devices to associate identities of the identity asset provider and the entity based on their co-ownership of the identity asset by using commitments between the identity asset provider and the entity and based on collaborative proof of ownership of the identity asset using zero knowledge proofs in the blockchain network of devices.
The computer program product of claim 10 , wherein the method further comprises: registering details of a creation of the identity asset with a trusted registrar service; posting a signed declaration of anonymous ownership of the identity asset along with a unique hash value of the identity asset to the trusted registrar service; verifying whether a posted hash value of the identity asset is a duplicate of one of previously posted unique hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; rejecting a declaration of anonymous ownership of the identity asset in response to the hash value of the identity asset being found to be a duplicate; and posting the declaration of anonymous ownership of the identity asset to the blockchain network of devices in response to the hash value of the identity asset not being found to be a duplicate.
registering details of a creation of the identity asset with a trusted registrar service;
posting a signed declaration of anonymous ownership of the identity asset along with a unique hash value of the identity asset to the trusted registrar service;
verifying whether a posted hash value of the identity asset is a duplicate of one of previously posted unique hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets;
rejecting a declaration of anonymous ownership of the identity asset in response to the hash value of the identity asset being found to be a duplicate; and
posting the declaration of anonymous ownership of the identity asset to the blockchain network of devices in response to the hash value of the identity asset not being found to be a duplicate.
The computer program product of claim 10 , wherein the method further comprises: registering details of a creation of the identity asset with a trusted registrar service; posting a signed declaration of anonymous ownership of the identity asset along with a unique hash value of the identity asset to the trusted registrar service; verifying whether a posted hash value of the identity asset is a duplicate of one of previously posted unique hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and posting the declaration of anonymous ownership of the identity asset to the blockchain network of devices in response to the hash value of the identity asset not being found to be a duplicate.
verifying whether a posted hash value of the identity asset is a duplicate of one of previously posted unique hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and
The computer program product of claim 10 , wherein the method further comprises: receiving a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network; encrypting a unique hash value of the identity asset with the public key received from the blockchain network of devices; posting the encrypted hash value of the identity asset along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices; verifying collaboratively whether a currently posted encrypted hash value of the identity asset is a duplicate of one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and rejecting collaboratively a declaration of anonymous ownership of the identity asset in response to the encrypted hash value of the identity asset being found to be a duplicate.
receiving a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network;
encrypting a unique hash value of the identity asset with the public key received from the blockchain network of devices;
posting the encrypted hash value of the identity asset along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices;
verifying collaboratively whether a currently posted encrypted hash value of the identity asset is a duplicate of one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; and
rejecting collaboratively a declaration of anonymous ownership of the identity asset in response to the encrypted hash value of the identity asset being found to be a duplicate.
The computer program product of claim 10 , wherein the method further comprises: receiving a public key from the blockchain network of devices whose private key is shared between each device of the blockchain network; encrypting a unique hash value of the identity asset with the public key received from the blockchain network of devices; posting the encrypted hash value of the identity asset along with a signed declaration of anonymous ownership of the identity asset to the blockchain network of devices; verifying collaboratively whether a currently posted encrypted hash value of the identity asset is a duplicate of one of previously posted encrypted hash values of identity assets related to previously posted declarations of anonymous ownership of identity assets; 
[Truncated to input limit]