Blockchain Access Control Interface for Smart Contract Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The blockchain and smart contract ecosystem lacks efficient and secure solutions for extending contract security, with application developers having minimal control over their applications post-publication and limited protection against malicious attacks.
Innovation Solution
A computer-implemented method involving storing a private cryptographic key on a blockchain, receiving access control settings, reviewing metadata, generating a digital signature, and requiring successful verification by a public cryptographic key for request processing, with optional machine learning model compliance checks and decentralized access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If smart contracts are deployed on blockchain, then decentralization and immutability are achieved, but control over the application after publication is lost and security against malicious attacks is insufficient
Solution Approach 1:
The patent introduces an access control interface as an intermediary layer between users and the smart contract. This interface receives access control settings from the publisher and enforces them by verifying digital signatures on function calls. The publisher can dynamically update access control policies without changing the underlying smart contract code, thus maintaining both security control and post-publication management capability.
2Reliability
If access control settings are implemented with digital signature verification, then security against malicious attacks is improved, but device complexity increases
Solution Approach 1:
The access control interface is designed as a universal layer that can work with any smart contract on the blockchain. It handles multiple functions including receiving access control settings, verifying digital signatures, and enforcing policies. The interface uses standard cryptographic operations (digital signatures) that are already widely supported in blockchain ecosystems, reducing the need for custom complex security mechanisms.
3Stability of the object's composition
If minimal control is provided to developers after smart contract publication, then blockchain immutability is maintained, but protection from malicious attacks is limited
Solution Approach 1:
The patent segments the security control mechanism into two independent parts: the immutable smart contract code on the blockchain and the mutable access control interface. The smart contract remains unchanged and immutable, while the access control interface can dynamically update security policies. This segmentation allows the system to maintain blockchain immutability while providing adaptive protection against malicious attacks through updated access control settings.
Data Source
AI summary
An access control server may store a private cryptographic key. The private cryptographic key corresponds to a public cryptographic key. The public cryptographic key is stored on a blockchain as part of an autonomous program protocol. The access control server may receive access control setting related to the autonomous program protocol. The access control server may receive a request for accessing the autonomous program protocol stored on the blockchain. The access control server may review the request. The access control server may determine the request is in compliance with the policies specified in the setting. The access control server may create, using the private cryptographic key, a digital signature for the request and generate a response including the digital signature. A successful verification of the digital signature using the public cryptographic key stored in the autonomous program protocol is required by the autonomous program protocol to process the request.