Blockchain-based resource access token distribution and resource usage monitoring method

Abstract

The invention discloses a block chain-based resource access token distribution and resource use monitoring method. According to the invention, the secure distribution of the access tokens and the effective monitoring of resource utilization are realized in a block chain transaction form. A content provider grants an access token to a content requester in the form of an access token granting transaction, and indicates that the access token can be shared by the content requester to other users or entrusted to a third party if the content requester has a sharing authority or entrusted authority of the access token. The content requester accesses the content using the obtained access token, and the corresponding content access operation is recorded on the block chain in the form of a content access transaction. In addition, the revocation of the access token is realized through token revocation transaction, so that the security of access control is enhanced. According to the invention, theverification efficiency of the access token is improved, so that the access efficiency of the whole system is improved.

Description

technical field [0001] The present invention relates to the technical field of block chain, access control and access token, in particular to a block chain-based resource access token distribution and resource usage monitoring method. Background technique [0002] Access tokens were originally a concept in Windows operating system security. When a user logs in, the system creates an access token that contains the SID returned during the user's login process and the list of privileges distributed to the user and the user's security groups by local security policy. The system uses tokens to control which securable objects a user can access, but it only applies to local login access. In the current access control schemes using access tokens, the access token is used as a credential for remote access to content, but the following problems generally exist in these access control schemes with tokens: [0003] (1) Security and privacy issues of access token transmission. In the ...

AI Technical Summary

Problems solved by technology

In the current access control scheme, the access token is either directly transmitted or encrypted, which will bring about security and privacy issues for the access token. If it is transmitted directly, the token is easy to be forged, fraudulently used, etc. Although it is impossible to know the specific content of the token, it is easy to leak the identity and privacy of the user through packet capture

[0004] (2) There is a problem of difficult access token revocation

In traditional solutions, the revocation of access tokens is often not considered enough, either completely revoked, which will bring huge computing and communication overhead, or partially revoked, which allows the previous access tokens to still perform normal content access

[0005] (3) Resource usage monitoring is not considered

The characteristics of the blockchain such as tamper-proof modification, anonymity, and decentralization can well solve the above problems, but in the blockchain, every time a query is made for a certain content recorded on the blockchain, The entire blockchain must be traversed, and as the number of blockchains grows, it will bring a lot of computational overhead

Images