Blockchain Access Control for Secure Data Deletion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Blockchain storage systems, while secure against data tampering, pose challenges in data deletion, making it difficult for users to manage and delete personal information once it is stored.
Innovation Solution
An access control apparatus that separates data storage and privilege information, using a blockchain storage for privilege information and a conventional storage for data, allowing for secure access control and data deletion while maintaining the security of privilege information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in a blockchain storage, then data security against tampering is improved, but data deletion capability deteriorates
Solution Approach 1:
The patent segments the storage system into two distinct components: a blockchain storage (second storage apparatus) for storing privilege information, and a conventional storage apparatus (first storage apparatus) for storing actual data. This segmentation allows each storage type to be used for its strengths - blockchain for secure, immutable privilege management and conventional storage for flexible data operations including deletion.
Solution Approach 2:
The patent introduces an access control apparatus as an intermediary that manages access between terminals and the storage system. This intermediary controls access to both the blockchain storage and conventional storage, enabling data deletion from conventional storage while maintaining the integrity of privilege information in blockchain storage.
2Reliability
If privilege information is stored in blockchain storage, then access control security is improved, but system complexity increases
Solution Approach 1:
The system is segmented into distinct functional components: blockchain storage for privilege information, conventional storage for data, and an access control apparatus for management. This segmentation organizes complexity into manageable, specialized modules rather than a monolithic system.
Solution Approach 2:
The patent uses cryptographic copying where privilege information is stored in blockchain storage and access control rules are copied/enforced by the access control apparatus. This allows the system to leverage blockchain's security properties without requiring all system components to be blockchain-based, reducing overall complexity.
Data Source
AI summary
An access control apparatus (2000) acquires a request (20) for access to data stored in a first storage apparatus 30. The access control apparatus (2000) acquires privilege information (70) from a blockchain storage (40). The privilege information (70) represents access privilege pertaining to access to the first storage apparatus (30). The access control apparatus (2000) determines whether requested access is within a range of the access privilege of a target entity (10) being a subject of the request (20), by using the privilege information (70) of the target entity (10). When it is determined that the access is within the range of the access privilege of the target entity (10), the access control apparatus (2000) executes the access.