Systems, methods, and storage media for permissioned delegation in a computing environment

FIELD OF THE DISCLOSURE

0001The present disclosure relates to systems, methods, and storage media, for delegation of transaction permissions in a computing environment.

BACKGROUND

0002When working within a distributed computing environment it is often necessary to authenticate a user device. For example, when using a social media platform, a user will be asked to log in to an account, using a username and password for example, to verify the user and expose the user to the appropriate information and services. A similar situation arises when a user accesses a site, such as a news site, that provides subscription content. When navigating the World Wide Web, or other networked computing systems, users are often asked to log into multiple web sites to access their corresponding account for each web site.

0003In some instances, a trusted third party will act as a certificate authority to provide identity/permissions to a user for multiple web sites in multiple domains. For example, GOOGLE^™ provides "Google Sign-In", an authentication system, and a corresponding application programming interface (API), that enables users to log into various cooperating web sites with their GOOGLE^™ account. Platforms like Google Sign-In, often referred to as "single sign-on" systems (SSO), greatly reduce the friction associated with authentication in a distributed computing environment. In an SSO, the administrator, such as a GOOGLETM, acts as a centralized identity provider that verifies the identity of users for the service provider and provides a certificate that delegates access.

0004However, there are several limitations with known SSO systems. As an example, service providers must expose their user data to the third-party identity provider. Further, while some SSO providers cover a broad range of users, a service provider cannot be sure an acceptable subset of their potential users will be covered, leaving the need for an alternative mechanism for authentication. Also, there is a single point of failure in authentication when an SSO provider goes down. Additionally, the SSO model requires a trusted centralized party to maintain identity records and issue identity certificates. This arrangement is entirely incompatible with many new "decentralized" architectures that are based on distributed ledger technology (DLT) such as blockchain technology. Such architectures, by design, are peer-to-peer and avoid centralized trusted parties.

0005GOOGLE^™ "macaroons" are flexible authorization credentials for Cloud services that support decentralized delegation between principals. Macaroons are based on a construction that uses nested, chained MACs (e.g., HMACs). Macaroons are bearer credentials, like Web cookies, but which can specify when, where, by who, and for what purpose a target service should authorize requests. However, macaroons also require a trusted centralized party to issue the credentials and thus are entirely incompatible with many decentralized architectures such as blockchain technology.

0006Due to the nature of blockchain technology, blockchain access control is focused on two solutions: 1) transactions submitted by applications are signed by a single device; and 2) transactions signed by an application are "executed" by a permissioned identity smart contract. These approaches may be used together in various ways if necessary, but the result is largely the same. When transactions are signed by a single device, every signature must be approved manually (there is no way to trust an application for certain actions), and the user must have access to the device while using the applications. When transactions are executed by a permissioned smart contract, permissions cannot be enforced against deep internal transactions and there is a need for increased network resources (and related fees such as Gas in the Ethereum protocol). Further, in current blockchain implementations, attenuated permissions (i.e., permissions that are some subset of a full permission set) is difficult to achieve. The signing mechanism of such implementations essentially require the user to authorize every interaction/transaction without delegation. Reusing/delegating permission is important to achieve the balance of security and usability in applications. Smart contracts, i.e. executable code recorded on a blockchain can address this to some level. However, these implementations are expensive, difficult to use, and are unable to enforce permissions adequately, leaving users vulnerable.

SUMMARY

0007The present disclosure relates to a system and method in which cryptographic proofs and signatures are leveraged to allow any party to act as an issuer of permissions certificates and for any other party to verify the permissions certificate. The permissions certificate includes identities and permissions and thus can be used to delegate various transaction permissions to other parties. Disclosed implementations reduce or eliminate many of the limitations of current authentication systems such as SSO systems.

0008One aspect of the present disclosure relates to a system for enforcing transaction permissions delegation in a computing environment. The system may include one or more hardware processors configured by machine-readable instructions. The processor(s) may be configured to receive a permissions request, from a requesting computing system, for a permissions certificate. The permissions request may specify permissions to execute a transaction and a cryptographic public key associated with the requesting computing system. The processor(s) may be configured to transmit a login request to a user computing system associated with a user. The login request may cause a login interface to be displayed on the user computing system. The processor(s) may be configured to receive an acceptance from the user in response to the login request. The processor(s) may be configured to generate a permissions certificate data structure in response to the acceptance. The data structure may include the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object. The processor(s) may be configured to return the permissions certificate to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system.

0009Another aspect of the present disclosure relates to a method for enforcing transaction permissions delegation in a computing environment. The method may include receiving a permissions request, from a requesting computing system, for a permissions certificate. The permissions request may specify permissions to execute a transaction and a cryptographic public key associated with the requesting computing system. The method may include transmitting a login request to a user computing system associated with a user. The login request may cause a login interface to be displayed on the user computing system. The method may include receiving an acceptance from the user in response to the login request. The method may include generating a permissions certificate data structure in response to the acceptance. The data structure may include the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object. The method may include returning the permissions certificate to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system.

0010Yet another aspect of the present disclosure relates to a non-transient computer-readable storage medium having instructions embodied thereon, the instructions being executable by one or more processors to perform a method, implemented by a certificate issuer computing system, for transaction permissions delegation in a computing environment. The method may include receiving a permissions request, from a requesting computing system for a permissions certificate. The permissions request may specify permissions to execute a transaction and a cryptographic public key associated with the requesting computing system. The method may include transmitting a login request to a user computing system associated with a user. The login request may cause a login interface to be displayed on the user computing system. The method may include receiving an acceptance from the user in response to the login request. The method may include generating a permissions certificate data structure in response to the acceptance. The data structure may include the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object. The method may include returning the permissions certificate to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system.

0011In particular, the present disclosure relates to a certificate issuer computing system for enforcing permissions delegation in a computing environment according to claim 1, a method implemented by a certificate issuer computing system, for permissions delegation in a computing environment according to claim 13, a non-transient computer-readable storage medium according to claim 25 and a method for verifying a permissions certificate issued by a certificate issuer computer system for delegating transaction permissions in a computing environment according to claim 26.

0012These and other features, and characteristics of the present technology, as well as the methods of operation and functions of the related elements of structure and the combination of parts and economies of manufacture, will become more apparent upon consideration of the following description and the appended claims with reference to the accompanying drawings, all of which form a part of this disclosure, wherein like reference numerals designate corresponding parts in the various figures. It is to be expressly understood, however, that the drawings are for the purpose of illustration and description only and are not intended as a definition of the limits of the claimed invention. As used in the specification and in the claims, the singular form of "a", "an", and "the" include plural referents unless the context clearly dictates otherwise.

BRIEF DESCRIPTION OF THE DRAWINGS

0013<ul id="ul0001" list-style="none"><li><figref idref="f0001">FIG. 1</figref> schematically illustrates a computing architecture for the delegation of transaction permissions in a computing environment, in accordance with one or more implementations.</li><li><figref idref="f0002">FIG. 2</figref> is a flowchart of a method, implemented by a certificate issuer computing system, for enforcing transaction permissions delegation in accordance with one or more implementations.</li><li><figref idref="f0003">FIG. 3</figref> illustrates data flow in an example where access to a service is provided through a permissions delegation.</li></ul>

DETAILED DESCRIPTION

0014There is a need for a decentralized app ecosystem with powerful, seamless authentication and access control. Distributed applications (D-Apps) in blockchain ecosystems will be hindered from achieving mainstream appeal as long as the authentication experience lags behind that provided by centralized applications. Given the dangers of private key transmission and the consumer requirement for good user experience (UX), an identity/permissions system other than on-chain identity contracts is needed for decentralized environments. The implementations disclosed herein address this problem. The concept is a simple yet powerful one, enabling a classical "centralized" user experience in various computing environments, including a blockchain or other decentralized environment. At its simplest, the disclosed permissions certificate is a certificate delegating access, or other permissions, from one address (entity) to another.

0015The invention leverages the known concept of "digital signatures", sometimes referred to as "cryptographic signatures." A cryptographic signature is a mechanism that binds a person/entity to digital data. This binding can be independently verified by a receiving party as well as any third party in a known manner, such as through the verification process described below. The signature is a cryptographic value that is calculated from the data and a secret key ("private key") known only by the signing party.

0016Cryptographic signature schemes are based on public key cryptography and can be used to verify the source of information. Each party has a public-private key pair. The private key is used for signing and the public key can be used as the verification key. The private key cannot be derived from the public key. Typically, the signing party generates a hash value (using a hash algorithm such as SHA1, MD5, SHA256 ... ) based on specific data as the input to the hash algorithm. The hash value and private key are then fed to the signature algorithm, such as the RSA algorithm for example, which produces the signature on given hash. The signature is appended to the data and then both are sent to the verifying party. Since the private key is something only the signing party has, it can be the basis of identity/trust. To verify a signature, the verifying party calculates a hash of the same data, decrypts the digital signature using the signing party's public key, and compares the 2 hash values. If the hash values match, the signature is deemed to be valid, i.e. verified.

0017<figref idref="f0001">FIG. 1</figref> illustrates a system 100 including certificate issuer computing system 102 for acting as a certificate issuer for permissions delegation in a computing environment in accordance with one or more implementations. It will be seen that, any/all system(s) in a computing architecture can act as a certificate issuer. The certificate issuer need not be a dedicated or centralized party but can be any one or more of the systems in the environment such as a service provider web site.

0018Therefore, system 100 may include one or more certificate issuer computing systems 102, which may be configured to communicate with one or more other computing platforms, such as remote computing platforms 104 according to a peer-to-peer architecture, a client/server architecture and/or other architectures. Remote computing platform(s) 104 may be configured to communicate with other remote computing platforms according to a peer-to-peer architecture and/or other architectures. Users may request various transactions, such as access to a computing environment, via remote computing platform(s) 104, which can be associated with a user and which are sometimes referred to as "user devices" herein. Remote computing platforms also can be service provider computing systems. Note that Certificate issuer system 102 and remote computing platforms are shown in <figref idref="f0001">FIG. 1</figref> as distinct devices, based on function, for the sake of clarity. However, each device on a network, including remote platforms 104, can act as a certificate issuer. Further, certificate issuer computing system 102 can be a remote computing platform 104.

0019Each certificate issuer computing system 102 may be configured by machine-readable instructions 106. Machine-readable instructions 106 may include one or more computer program instruction modules. The instruction modules may include one or more of request receiving module 108, login request transmittal module 110, acceptance receiving module 112, certificate data structure generating module 114, certificate returning module 116, and/or other instruction modules.

0020Request receiving module 108 may be configured to receive a permissions request, from a requesting computing system, such as a remote computing platform 104 associated with a service provider, for a permissions certificate which delegates permissions to the remote computing platform 104. The permissions request may further specify a public address of the certificate issuer computing system 102.

0021Login request transmittal module 110 may be configured to transmit a login request to a user computing system, such as a remote computing platform 104, associated with a user who has permissions to access the certificate issuer computing system. The login request may cause a login interface to be displayed on the user computing system. Acceptance receiving module 112 may be configured to receive an acceptance from the user in response to the login request. The acceptance indicates that the user approves delegated permissions for the remote computing platform 104 making the permissions request.

0022Certificate data structure generating module 114 may be configured to generate a permissions certificate data structure in response to the acceptance. By way of non-limiting example, the data structure may include the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object. The permissions may include at least one permissions domain. The permissions object may specify the permissions and a permissions domain.

0023Generating the permissions certificate may include calculating the certificate signature of the issuer private key against the certificate object. Generating the permissions certificate may include creating an empty certificate object. Generating the permissions certificate may include attaching the public cryptographic key associated with the requesting computing device to the certificate object. Generating the permissions certificate may include attaching a public cryptographic key associated with the issuer computing system. Generating the permissions certificate may include attaching a permissions object to the certificate object. Generating the permissions certificate may include attaching the signature to permissions certificate. The permissions request may specify permissions to execute a transaction and a cryptographic public key associated with the requesting computing system.

0024By way of non-limiting example, the permissions request may be for multiple permissions certificates, each corresponding to a specific transaction. The permissions certificate may include an expiration condition and wherein the verifying includes checking to see if the expiration condition has been satisfied. As described in greater detail below, the requesting computing system may be configured to build a request for the transaction, attach a generated permissions certificate to the request for the transaction, generate a cryptographic proof of the transaction request, and transmit the transaction request. The transaction may be access to at least one of computing resources and/or a physical property.

0025The concept of "proofs" is well known in cryptography. Proofs are a mechanism by which one party (the prover) can prove to another party (the verifier) that they know a value x, without necessarily conveying any information apart from the fact that they know the value x. "Zero-knowledge proofs" are proofs where the prover does not convey the underlying information. Examples of proof protocols are the Schnorr Protocol and Sigma Protocols. A proof can be verified in various known manners, such as through one or more challenges such that the responses from the prover will convince the verifier if and only if prover does possess the claimed knowledge. Therefore, the proof allows a party to verify that the issuer of the permissions certificate is a party that receives the permissions request.

0026The permissions indication may be a data structure indicating a subset of permissions held by the user for the issuer computer system or full permissions. An empty permissions indicator can indicate a default, such as full permissions.

0027Certificate returning module 116 may be configured to return the permissions certificate to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system. The transacting party may verify the permissions certificate by verifying the certificate signature and verifying the cryptographic proof. The verifying may further include checking for revocation of the permissions certificate.

0028The permissions certificate may indicate the right for the holder of the certificate to grant further permissions to another party. The further permissions may be a subset of permissions held by the issuer computer system. For example, the holder can request a permission certificate from an issuer and the issuer constructs a certificate that specifies a relationship of holder and issuer with their public keys respectively. The issuer signs the certificate to lock in the relationship as well as create a verifiable proof and returns the certificate to the holder. The holder when actioning the delegation (i.e., acting as an issuer for a specified permission), attaches the certificate with the transactions sent to the transaction party and the transaction party interprets the certificate and, if the certificate is valid, allows the holder to act as the issuer as defined by the attenuated permissions object.

0029In some implementations, multiple permissions certificates are generated for each specific transaction. In some implementations, the permission certificate may be part of a tree of permissions certificates that can be used to verify a permission through a chain of multiple parties. In some implementations, the computing environment may be a decentralized computing environment. In some implementations, the computing environment may include a blockchain ledger and peer-to-peer nodes.

0030The various devices, platforms, and systems may be operatively linked via one or more electronic communication links. For example, such electronic communication links may be established, at least in part, via a network such as the Internet and/or other networks. Certificate issuer computing platforms(s) 102 and remote computing platform(s) 104 may include electronic storage 120, one or more processors 122, and/or other components. The platforms may include communication lines, or ports to enable the exchange of information with a network and/or other computing platforms. The computing platforms may include a plurality of hardware, software, and/or firmware components operating together to provide the functionality attributed herein.

0031<figref idref="f0002">FIG. 2</figref> illustrates a method 200 for transaction permissions delegation in a computing environment, in accordance with one or more implementations. Method 200 can be implemented by certificate issuer platform 102 of <figref idref="f0001">FIG. 1</figref>, for example. The operations of method 200 presented below are intended to be illustrative. In some implementations, method 200 may be accomplished with one or more additional operations not described, and/or without one or more of the operations discussed. Additionally, the order in which the operations of method 200 are illustrated in <figref idref="f0002">FIG. 2</figref> and described below is not intended to be limiting.

0032In some implementations, method 200 may be implemented in one or more processing devices (e.g., a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a state machine, and/or other mechanisms for electronically processing information). The one or more processing devices may include one or more devices executing some or all of the operations of method 200 in response to instructions stored electronically on an electronic storage medium. The one or more processing devices may include one or more devices configured through hardware, firmware, and/or software to be specifically designed for execution of one or more of the operations of method 200.

0033An operation 202 may include receiving a permissions request, from a requesting computing system for a permissions certificate. The permissions request may specify permissions to execute a transaction and a cryptographic public key associated with the requesting computing system. Operation 202 may be performed by one or more hardware processors configured by machine-readable instructions including a module that is the same as or similar to request receiving module 108, in accordance with one or more implementations.

0034An operation 204 may include transmitting a login request to a user computing system associated with a user. The login request may cause a login interface to be displayed on the user computing system. Operation 204 may be performed by one or more hardware processors configured by machine-readable instructions including a module that is the same as or similar to login request transmittal module 110, in accordance with one or more implementations.

0035An operation 206 may include receiving an acceptance from the user in response to the login request. The acceptance can be in response to a user inputting their username and password, or other identifying indicia, into a user interface on the user device. Operation 206 may be performed by one or more hardware processors configured by machine-readable instructions including a module that is the same as or similar to acceptance receiving module 112, in accordance with one or more implementations.

0036An operation 208 may include generating a permissions certificate data structure in response to the acceptance. The data structure may include the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object. Operation 208 may be performed by one or more hardware processors configured by machine-readable instructions including a module that is the same as or similar to certificate data structure generating module 114, in accordance with one or more implementations.

0037An operation 210 may include returning the permissions certificate to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system. Operation 210 may be performed by one or more hardware processors configured by machine-readable instructions including a module that is the same as or similar to certificate returning module 116, in accordance with one or more implementations.

0038An operation 212 may include various checks to verify the permissions certificate, as described in greater detail below. Verification may include checking for revocation of, checking for expiration of, and checking validity of, the permissions certificate. Operation 212 is shown in dashed box in <figref idref="f0002">FIG. 2</figref> as it is often accomplished as a separate workflow from the request and generation procedures of operations 201-210.

0039<figref idref="f0003">FIG 3</figref> illustrates the data flow of a specific example of permissions delegation. In <figref idref="f0003">FIG 3</figref>, User 302 wishes to use service 304 through delegation of permissions from Issuer 306. In this example, user 302 and service 304 each can correspond to a remote computing Platform 104 of <figref idref="f0001">FIG. 1</figref> and issuer 306 can correspond to certificate issuer computing platform 102 of <figref idref="f0001">FIG. 1</figref>. Revocation DB 310 is described in greater detail below in connection with a verification operation. Operations corresponding to operations of <figref idref="f0002">FIG. 2</figref> are labeled with the same reference numerals as in <figref idref="f0002">FIG. 2</figref>.

0040As shown in <figref idref="f0003">FIG. 3</figref>, a request for access to service 304 is sent from user 302 to service 304. As an example, service 304 can be a social network, a content provider, a car rental service, or any other service available over a computer network. Service 304 can also be access to a physical device where the permissions certificate is used to gain such access such as by opening a computer-controlled door or lock. In response to the request for access, service 304 generates a cryptographic private/public key pair and transmits a permissions request to issuer 306. Note that the key pair can be created in response to the request or can be preexisting. Therefore, the phrase "generate a key pair" as used herein includes creating a new key pair or using an existing key pair. Issuer 306 can be any platform for which user 302 has permissions through a preexisting account or the like. The permissions request can specify the requested permissions (login access in this example) and the public key of service 304. Further, the permissions request can specify a public address of issuer 306. As an example of access to a physical device, service 304 is the holder, and could be a device with NFC/RFID technology or the like, capable of transmitting the certificate to an access verifier. The original request for permission would have been made when the device was set up, and the issuer could have been the building's access control system. The verifier then knows to trust the access control system's issuer address as a valid issuer, and can trust certificates issued by it.

0041At this time a login request will be displayed on a Ul of user 302 (step 204 of <figref idref="f0002">FIG. 2</figref>) and, assuming user 302 accepts the login request, by entering a username and password or merely indicating acceptance for example, a permissions certificate will be created to delegate the requested permission from issuer 306 to service 304 (step 208 in <figref idref="f0002">FIG. 2</figref>). The permissions certificate is then transmitted to service 304 (step 210 in <figref idref="f0002">FIG. 2</figref>) to allow the user to access service 304. Service 304 is then able to verify that issuer has delegated the permissions to holder. In the case of attenuated permissions, service 304 could use the permissions certificate to act as issuer of other permissions certificates as allowed by the delegated permissions. This is described in greater detail below with reference to the data structure of a permissions certificate in accordance with an implementation. The permissions certificate can be verified through known checks such as a check with revocation DB 309 to see if the permissions certificate has been revoked by issuer 306. As shown at 220 in <figref idref="f0003">FIG. 3</figref> (but not shown in <figref idref="f0002">FIG. 2</figref>), if the user declines the login instead of accepting at 206, the permissions delegation request is rejected by issuer 306 and a permissions certificate is not created. Further, the access request could be accepted by 1) another user, or 2) by an automated service.

0042It can be seen that the permissions certificate is a delegation of permissions from one party (issuer) to another (holder). The permissions certificate can be used to delegate permissions to accomplish various transactions such as a login transaction or any transaction on a blockchain or other decentralized network. In the case of blockchain transactions, the permissions certificate can be issued off-chain from one private key (the issuer) to another (the holder). The permissions certificate allows the holder to act as the issuer to others, with a subset of permissions.

0043Permissions certificates can be verified anywhere. This makes them very efficient to manage and use. Permissions certificates of the implementations are only valid when paired with a signature from the holder, helping to mitigate cases where the certificate is stolen. Permissions certificates are cryptographically verifiable access tokens that may be attenuated off-chain. Verifying that the certificate indeed belongs to the Holder (rather than being stolen, for example) can be performed by the transacting party y checking the holder's public key against the transaction proof. When the Holder sends the transaction with a permissions certificate, it will generate a proof and attach to that transaction.

0044As noted above, a permissions certificate is represented by a data structure. As an example, the data structure can include the following fields and corresponding formats. The field names in the example below are intended to be human readable but can be shortened to decrease data requirements. The inventors have coined the mark DOUGHNUT^™ to use in connection with the permissions certificate described herein and thus this term is found in field names in the example below. <tables id="tabl0001" num="0001"><img file="EP4513832A2_D0001.tif" /></tables>

0045An example of permissions certificate data structure is set forth below Other examples could use default encoding in a compact, unreadable binary. The example below does not include revocation management data. <img file="EP4513832A2_D0002.tif" />

0046The holder or the issuer may revoke the permissions certificate at any time before it expires at a time indicated in the certificate.expires field. Once the expiration time has passed, the permissions certificate becomes invalid. The permissions certificate can be validated/verified through the following checks: <ul id="ul0002" list-style="bullet"><li>the issuer (doughnut.certificate.issuer) can verify the signature (doughnut, signature);</li><li>the holder (doughnut.certificate.holder) can verify the transaction proof (transaction.proof);</li><li>the expiration time (doughnut.certificate.expires), if applicable, must not have passed; and</li><li>the certificate must not have been revoked.</li></ul>

0047When executing a permissions transaction, the permissions certificate must be valid and contain a at least one valid permissions domain as indicated in the certificate.permissions.[domain] field (where domain may be one of many domains). The delegated permissions are indicated by the doughnut.certificate.permissions.cennznet field (where cennznet is the permissions domain in this example) and can be extracted. As noted above, this field can be empty to indicate full permissions or another default set of permissions. The specified target and arguments, and all consequent internal transactions, should be a subset of the permission set.

0048As indicated above, in addition to TTL (time- based) expiration, it is often important to include token-revocation in an access token specification to lessen the attack surface of an account, and to provide a means of mitigating a malicious access scenario once detected. There are not many good ways to do this in a decentralized environment such as blockchain, as these generally involve storing hashes for a period of time, e.g. until the TTL runs out, which may be costly.

0049The disclosed implementations can use a rolling-nonce based revocation system, where every address has a revocation nonce associated with it, and only certificates with a matching nonce are valid. An issuer may increment their nonce at any time, effectively revoking all currently issued certificates (assuming they all used the current revocation nonce - it's possible that doing this could validate a previously invalid certificate with an n+1 n once and a valid TTL). This allows is for a simple "log out all apps" revocation pattern. The rolling nonce based revocation has a small storage footprint, does not require storing hashes/IDs, and does not require an issuer to remember or discover which permissions certificates are in circulation. However, this mechanism cannot revoke a single certificate, making the logout scenario less ideal in some circumstances. The holder is expected to delete the doughnut and holder private key thoroughly.

0050It is also possible to revoke all certificates issued by a given issuer, and associated with a given holder, using an address revocation scheme. As holder key pairs are only intended to live for the login session duration, and malicious actors are identifiable by their holder address, this mechanism is effective for both logout and malicious actor mitigation scenarios. This approach can rely on an on-chain black/whitelist of addresses. An address revocation scheme allows an attacker to have their access revoked without impacting behaving holders. Also, an issuer may discover the address of a malicious party via auditing and revoke access without needing to discover to which certificates the attacker has access. However, this scheme can have complexity in culling old blacklisted certificates from state and has relatively high storage costs.

0051It is possible for a hash to be derived from, or another ID assigned to, a permission certificate. This identifier can be used to revoke the certificate. This approach can rely on an on-chain black/whitelist of hashes/IDs. This scheme can be used to revoke specific certificates. However, it is complex to cull old blacklisted certificates from state. Further, the issuer must generate the ID, or calculate the hash, and store it to be used for later revocation.

0052Permissions certificates inherently require some sort of permissions definitions. The implementations disclosed herein are flexible, so a permissions domain may contain any definition format the domain wants (so long as the domain enforcer knows how to read it). In order to make permissions enforceable against any contract or address entity, contracts and runtime modules should not implement any permission enforcement themselves. Such an implementation requirement may lead to vulnerabilities that would be exploitable. Instead, permissions enforcement should be carried out solely by the transaction party. Transaction parties can attach permissions to their execution interface instead. For example, the code below can be used to attach the permissions certificate to the runtime environment of a blockchain. Various arguments could also be added to the code, such as time periods and other controls. <img file="EP4513832A2_D0003.tif" />

0053Electronic storage 120 may comprise non-transitory storage media that electronically stores information. The electronic storage media of electronic storage 120 may include one or both of system storage that is provided integrally (i.e., substantially non-removable) and/or removable storage that is removably, for example, a port (e.g., a USB port, a firewire port, etc.) or a drive (e.g., a disk drive, etc.). Electronic storage 120 may include one or more of optically readable storage media (e.g., optical disks, etc.), magnetically readable storage media (e.g., magnetic tape, magnetic hard drive, floppy drive, etc.), electrical charge-based storage media (e.g., EEPROM, RAM, etc.), solid-state storage media (e.g., flash drive, etc.), and/or other electronically readable storage media. Electronic storage 120 may include one or more virtual storage resources (e.g., cloud storage, a virtual private network, and/or other virtual storage resources). Electronic storage 120 may store software algorithms, information determined by processor(s) 122, information received from server(s) 102, information received from client computing platform(s) 104, and/or other information that enables server(s) 102 to function as described herein. Any mechanism for data transmission/exchange can be used. For example, permissions certificates and other data can be transmitted over a network or can be transmitted physically, such as through a QR code or other portable data structure.

0054Implementations have been described above. However, various modifications can be made as will be apparent to those of skill in the art. Various computing devices and architectures can be used to accomplish the implementations. Processor(s) 122 may be configured to provide information processing capabilities in server(s) 102. As such, processor(s) 122 may include one or more of a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a state machine, and/or other mechanisms for electronically processing information. Although processor(s) 122 is shown in <figref idref="f0001">FIG. 1</figref> as a single entity, this is for illustrative purposes only. In some implementations, processor(s) 122 may include a plurality of processing units. These processing units may be physically located within the same device, or processor(s) 122 may represent processing functionality of a plurality of devices operating in coordination. Processor(s) 122 may be configured to execute modules 108, 110, 112, 114, and/or 116, and/or other modules. Processor(s) 122 may be configured to execute modules 108, 110, 112, 114, and/or 116, and/or other modules by software; hardware; firmware; some combination of software, hardware, and/or firmware; and/or other mechanisms for configuring processing capabilities on processor(s) 122. As used herein, the term "module" may refer to any component or set of components that perform the functionality attributed to the module. This may include one or more physical processors during execution of processor readable instructions, the processor readable instructions, circuitry, hardware, storage media, or any other components.

0055It should be appreciated that although modules 108, 110, 112, 114, and/or 116 are illustrated in <figref idref="f0001">FIG. 1</figref> as being implemented within a single processing unit, in implementations in which processor(s) 122 includes multiple processing units, one or more of modules 108, 110, 112, 114, and/or 116 may be implemented remotely from the other modules. The description of the functionality provided by the different modules 108, 110, 112, 114, and/or 116 described below is for illustrative purposes, and is not intended to be limiting, as any of modules 108, 110, 112, 114, and/or 116 may provide more or less functionality than is described. For example, one or more of modules 108, 110, 112, 114, and/or 116 may be eliminated, and some or all of its functionality may be provided by other ones of modules 108, 110, 112, 114, and/or 116. As another example, processor(s) 122 may be configured to execute one or more additional modules that may perform some or all of the functionality attributed below to one of modules 108, 110, 112, 114, and/or 116.

0056Although the present technology has been described in detail for the purpose of illustration based on what is currently considered to be the most practical and preferred implementations, it is to be understood that such detail is solely for that purpose and that the technology is not limited to the disclosed implementations, but, on the contrary, is intended to cover modifications and equivalent arrangements that are within the spirit and scope of the appended claims. For example, it is to be understood that the present technology contemplates that, to the extent possible, one or more features of any implementation can be combined with one or more features of any other implementation. The invention is further defined according to the following aspects: <ul id="ul0003" list-style="none"><li>Aspect 1. A certificate issuer computing system for enforcing permissions delegation in a computing environment, the system comprising: one or more hardware processors configured by machine-readable instructions to: <ul id="ul0004" list-style="none" compact="compact"><li>receive a permissions request, from a requesting computing system, for a permissions certificate, the permissions request specifying permissions to execute a transaction and a cryptographic public key associated with the requesting computing system;</li><li>transmit a login request to a user computing system associated with a user, the login request causing a login interface to be displayed on the user computing system;</li><li>receive an acceptance from the user in response to the login request;</li><li>generate a permissions certificate data structure in response to the acceptance, the permissions certificate data structure including the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object; and</li><li>return the permissions certificate data structure to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate data structure paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system.</li></ul></li><li>Aspect 2. The system of aspect 1, wherein the requesting computing device is configured to: <ul id="ul0005" list-style="none" compact="compact"><li>build a request for the transaction;</li><li>attach the permissions certificate to the request for the transaction;</li><li>generate a cryptographic proof of the transaction request; and</li><li>transmit the transaction request.</li></ul></li><li>Aspect 3. The system of aspect 2, wherein the permissions certificate is verified by at least one of; the certificate issuer verifying the signature, and/or the requesting computing system verifying the transaction proof.</li><li>Aspect 4.The system of aspect 1, wherein the permissions request further specifies a public address of the issuer computing system.</li><li>Aspect 5. The system of aspect 1, wherein the permissions request is for multiple permissions certificates, each corresponding to a specific transaction, and the generating comprises generating multiple permissions certificates for each specific transaction.</li><li>Aspect 6. The system of aspect 3, wherein the verifying further includes checking for revocation of the permissions certificate.</li><li>Aspect 7. The system of aspect 1, wherein the transaction is access to at least one of computing resources and/or a physical property.</li><li>Aspect 8. The system of aspect 3, wherein the permissions certificate includes an expiration condition and wherein the verifying includes checking to see if the expiration condition has been satisfied.</li><li>Aspect 9. The system of aspect 1, wherein the permissions include at least one permissions domain.</li><li>10. The system of aspect 1, wherein the permission certificate is part of a tree of permissions certificates that can be used to verify a permission through a chain of multiple parties.</li><li>Aspect 11. The system of aspect 1, wherein generating the permissions certificate comprises: <ol id="ol0001" compact="compact"><li>a) creating an empty certificate object;</li><li>b) attaching the public cryptographic key associated with the requesting computing device to the certificate object;</li><li>c) attaching a public cryptographic key associated with the issuer computing system;</li><li>d) attaching a permissions object to the certificate object, the permissions object specifying the permissions and a permissions domain;</li><li>e) calculating the certificate signature of the issuer private key against the certificate object; and</li><li>f) attaching the signature to permissions object.</li></ol></li><li>Aspect 12. The system of aspect 1, wherein the computing environment is a decentralized computing environment.</li><li>Aspect 13. The system of aspect 12, wherein the computing environment comprises a blockchain ledger stored on peer-to-peer nodes.</li><li>Aspect 14. The system of aspect 1, wherein the permissions indication is a data structure indicating a subset of permissions held by the issuer computer system.</li><li>Aspect 15. The system of aspect 1, wherein the permission indication indicates a delegation of full rights held by the issuer computer system.</li><li>Aspect 16. The system of aspect 15, wherein the permissions indication is the absence of a permissions data structure.</li><li>Aspect 17. The system of aspect 14, wherein the permissions indicator indicates the right for the holder of the certificate to grant further permissions to another party.</li><li>Aspect 18. The system of aspect 17, wherein the further permissions are a subset of permissions held by the issuer computer system.</li><li>Aspect 19. A method, implemented by a certificate issuer computing system, for permissions delegation in a computing environment, the method comprising: <ul id="ul0006" list-style="none" compact="compact"><li>receiving a permissions request, from a requesting computing system for a permissions certificate, the permissions request specifying permissions to execute a transaction and a cryptographic public key associated with the requesting computing system;</li><li>transmitting a login request to a user computing system associated with a user, the login request causing a login interface to be displayed on the user computing system;</li><li>receiving an acceptance from the user in response to the login request;</li><li>generating a permissions certificate data structure in response to the acceptance, the data structure including the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object; and</li><li>returning the permissions certificate to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system.</li></ul></li><li>Aspect 20. The method of aspect 19, further comprising the requesting computing device: <ul id="ul0007" list-style="none" compact="compact"><li>building a request for the transaction;</li><li>attaching the permissions certificate to the request for the transaction;</li><li>generating a cryptographic proof of the transaction request; and</li><li>transmitting the transaction request.</li></ul></li><li>Aspect 21. The method of aspect 20, wherein the permissions certificate is verified by at least one of; the certificate issuer verifying the signature and/or the requesting computing system verifying the transaction proof.</li><li>Aspect 22. The method of aspect 19, wherein the permissions request further specifies a public address of the issuer computing system.</li><li>Aspect 23. The method of aspect 19, wherein the permissions request is for multiple permissions certificates, each corresponding to a specific transaction, and the generating comprises generating multiple permissions certificates for each specific transaction.</li><li>Aspect 24. The method of aspect 21, wherein the verifying further includes checking for revocation of the permissions certificate.</li><li>Aspect 25. The method of aspect 19, wherein the transaction is access to at least one of computing resources and/or a physical property.</li><li>Aspect 26. The method of aspect 21, wherein the permissions certificate includes an expiration condition and wherein the verifying includes checking to see if the expiration condition has been satisfied.</li><li>Aspect 27. The method of aspect 19, wherein the permissions include at least one permissions domain.</li><li>Aspect 28. The method of aspect 19, wherein the permission certificate is part of a tree of permissions certificates that can be used to verify a permission through a chain of multiple parties.</li><li>Aspect 29. The method of aspect 19, wherein generating the permissions certificate comprises: <ol id="ol0002" compact="compact"><li>a) creating an empty certificate object;</li><li>b) attaching the public cryptographic key associated with the requesting computing device to the certificate object;</li><li>c) attaching a public cryptographic key associated with the issuer computing system;</li><li>d) attaching a permissions object to the certificate object, the permissions object specifying the permissions and a permissions domain;</li><li>e) calculating the certificate signature of the issuer private key against the certificate object; and</li><li>f) attaching the signature to permissions object.</li></ol></li><li>Aspect 30. The method of aspect 19, wherein the computing environment is a decentralized computing environment.</li><li>Aspect 31. The method of aspect 30, wherein the computing environment comprises a blockchain ledger stored on peer-to-peer nodes.</li><li>Aspect 32. The method of aspect 19, wherein the permissions indication is a data structure indicating a subset of permissions held by the issuer computer system.</li><li>Aspect 33. The method of aspect 19, wherein the permission indication indicates a delegation of full rights held by the issuer computer system.</li><li>Aspect 34. The method of aspect 33, wherein the permissions indication is the absence of a permissions data structure.</li><li>Aspect 35. The method of aspect 32, wherein the permissions indicator indicates the right for the holder of the certificate to grant further permissions to another party.</li><li>Aspect 36. The method of aspect 35, wherein the further permissions are a subset of permissions held by the issuer computer system.</li><li>Aspect 37. A non-transient computer-readable storage medium having instructions embodied thereon, the instructions being executable by one or more processors to perform a method, implemented by a certificate issuer computing system, for permissions delegation in a computing environment, the method comprising: <ul id="ul0008" list-style="none" compact="compact"><li>receiving a permissions request, from a requesting computing system for a permissions certificate, the permissions request specifying permissions to execute a transaction and a cryptographic public key associated with the requesting computing system;</li><li>transmitting a login request to a user computing system associated with a user, the login request causing a login interface to be displayed on the user computing system;</li><li>receiving an acceptance from the user in response to the login request;</li><li>generating a permissions certificate data structure in response to the acceptance, the data structure including the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate signature of the issuer private key against the certificate object; and</li><li>returning the permissions certificate to the requesting computing system whereby the requesting computing system will be permitted to accomplish the transaction with a transacting party in place of the issuer computing system based on possession of the permissions certificate paired with a cryptographic signature based on a private cryptographic key associated with the requesting computing system.</li></ul></li><li>Aspect 38. A method for verifying a permissions certificate issued by a certificate issuer computer system for delegating transaction permissions in a computing environment, the method comprising: receiving a permissions certificate, wherein the permissions certificate was constructed by: <ul id="ul0009" list-style="none" compact="compact"><li>receiving a permissions request, from a requesting computing, system for a permissions certificate, the permissions request specifying permissions to execute a transaction and a cryptographic public key associated with the requesting computing system;</li><li>transmitting a login request to a user computing system associated with a user, the login request causing a login interface to be displayed on the user computing system;</li><li>receiving an acceptance from the user in response to the login request; and</li><li>generating a permissions certificate data structure in response to the acceptance, the permissions certificate data structure including the cryptographic public key associated with the requesting computing device, a cryptographic public key associated with the issuer computing system, a permissions indication indicating permissions held by the issuer computer system, and a certificate</li><li>signature of the issuer private key against the certificate object;</li><li>checking the validity of the permissions certificate by at least one of; the certificate issuer verifying the signature, the requesting computing system verifying the transaction proof, a check that an expiration time specified in the permissions certificate has not passed and/or a check that the permissions certificate has not have been revoked.</li></ul></li></ul>