Blockchain Access Control Using Key Metadata Constraints
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain systems lack effective mechanisms to control access to private data while maintaining transparency, leading to risks of unauthorized access, data manipulation, and exposure of sensitive information.
Innovation Solution
Implementing an access management module that uses private keys and metadata to manage access between internal and external blockchains, enforcing restrictions, time constraints, and authorization rules to control data access and communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public blockchains are used for data storage to provide transparency and immutability, then data integrity and transparency are improved, but access control and security of confidential data deteriorate
Solution Approach 1:
The patent segments the blockchain into different types (public/permissionless and private/permitted) based on access requirements. This allows different data to be stored on different blockchain types, enabling both transparency for public data and security for confidential data, thus resolving the contradiction between data integrity and unauthorized access prevention
Solution Approach 2:
The patent introduces an access management module as an intermediary between external blockchains and internal blockchains. This module mediates access requests by evaluating metadata constraints and private keys, allowing controlled access to internal blockchain data while preventing unauthorized access, thus maintaining both transparency and security
2Object-affected harmful factors
If access control mechanisms are implemented to prevent unauthorized access, then security of confidential data is improved, but system complexity and ease of operation deteriorate
Solution Approach 1:
The patent implements preliminary action by pre-storing access constraints and metadata in the blockchain before data is accessed. The access management module retrieves these pre-stored constraints and automatically evaluates them against access requests, eliminating the need for complex real-time authentication systems and reducing operational complexity while maintaining security
Solution Approach 2:
The access management module performs self-service by automatically retrieving, evaluating, and enforcing access constraints without requiring manual intervention. The system autonomously processes access requests by comparing private keys against stored metadata constraints, reducing system complexity and improving ease of operation while maintaining strong access control
3Object-affected harmful factors
If metadata constraints and private keys are used to manage access, then data security and access control are improved, but computational requirements and processing time deteriorate
Solution Approach 1:
The patent applies partial action by implementing access control only for specific data and specific users who need access, rather than requiring authentication for all data access. The access management module selectively evaluates metadata constraints only for requests that require authentication, reducing computational overhead and processing time for routine access while maintaining security for protected data
Data Source
AI summary
Techniques are described for managing access to data stored in a blockchain, and for managing the communication of blockchain data to other entities. A private key may be generated and issued to an external entity to enable the external entity to access an internal (e.g., private blockchain). The external entity may be an external (e.g., public) blockchain, device, process, or user that is outside an internal network. The key may be associated with metadata that includes constraints, conditions, or rules governing access to the blockchain. An authorized entity may employ the key to request access to the blockchain via access management module(s), and the access management module(s) may employ the metadata to determine whether to approve the request. The access management module(s) may also employ rules governing outbound communication of data from internal blockchain(s) to external entities.