Blockchain Access Control via Distributed Ledger Consensus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Access control systems are vulnerable to hacking, allowing unauthorized access by altering the access control list.
Innovation Solution
Implementing a distributed ledger technology, such as a blockchain, to securely manage access control lists across multiple nodes, ensuring that access is granted only when all or a predetermined percentage of nodes confirm authorization, thereby enhancing security and integrity of access control records.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized access control list is used, then the system is easier to operate and manage, but the system becomes vulnerable to hacking and unauthorized access
Solution Approach 1:
The access control list is segmented and distributed across multiple nodes in a peer-to-peer network. Each node maintains a local copy of the access control list, eliminating the single point of failure in centralized systems. This segmentation ensures that compromising one node does not grant unauthorized access to the entire system, as other nodes continue to enforce access control correctly.
Solution Approach 2:
A cryptographic verification mechanism acts as an intermediary between the access control list and the access decision-making process. Before accessing restricted areas, users must present credentials that are verified through cryptographic proofs against the distributed access control list. This intermediary layer ensures that even if some nodes are compromised, unauthorized access cannot be granted without valid cryptographic verification.
2Reliability
If access control information is stored centrally, then data consistency is easier to maintain, but the system becomes a single point of failure
Solution Approach 1:
The centralized access control list is divided and replicated across multiple distributed nodes. Each node stores a local copy of the access control list, creating redundancy. This segmentation ensures that the system remains available even if some nodes fail or are compromised, as other nodes continue to provide access control services.
Solution Approach 2:
All nodes in the distributed network maintain identical copies of the access control list with the same data structure and format. This homogeneity ensures that access control decisions remain consistent across the network, as each node uses the same criteria to verify credentials and grant or deny access.
3Reliability
If a distributed ledger is implemented, then security and tamper-proofing are improved, but the system complexity and computational requirements increase
Solution Approach 1:
Access control credentials are pre-verified against the distributed access control list before users attempt to access restricted areas. The system performs preliminary cryptographic verification of credentials using the distributed ledger, ensuring that access decisions are made quickly based on pre-established authorization rules. This preliminary action prevents the need for complex real-time computations during actual access attempts.
Solution Approach 2:
The patent replaces traditional mechanical access control mechanisms with cryptographic verification based on distributed ledger technology. Instead of relying on centralized databases and physical security tokens, the system uses cryptographic proofs and distributed consensus mechanisms to verify access rights. This substitution provides tamper-proof verification while reducing reliance on vulnerable centralized infrastructure.
Data Source
AI summary
A distributed transaction ledger (e.g. blockchain) is used to control access through access points in an access control system. During normal operation, access control devices (e.g. system controllers and door controllers) generate and broadcast transaction information to a validation network. The validation network maintains a distributed transaction ledger for the access control system, for example, by validating and distributing the transaction information across the validation network according to predetermined consensus criteria. The devices perform access control functions based on transaction information retrieved from the transaction ledger. Door controllers receive identification information from user devices (e.g. identification badges, mobile computing devices) and send the identification information to the validation network. A predetermined number of responding nodes generate verification information based on authorization information in the transaction ledger. If a predetermined proportion of the responding nodes indicate that the occupant is authorized, access is granted by the door controller.