Blockchain Access Delegation via PKI and SSO Key Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain access methods are cumbersome for users and do not facilitate access via internal public key infrastructure or single sign-on solutions, and there is a need for efficient delegation of access rights to blockchain operations.
Innovation Solution
A method and device for delegating access to a blockchain using an access delegation device that receives an encrypted execution request, obtains decryption keys based on user identifiers, decrypts the command, and transmits it to the blockchain for execution, allowing seamless interaction and delegation of operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional blockchain access methods are used with cryptographic keys, then security is maintained, but user enrollment becomes cumbersome and time-consuming
Solution Approach 1:
The patent introduces an access delegation device as an intermediary between users and the blockchain. This device holds decryption keys and translates user actions into blockchain commands, eliminating the need for users to directly manage cryptographic keys while maintaining security through the intermediary's key management
2Adaptability or versatility
If direct blockchain access is implemented, then operational autonomy is achieved, but integration with internal public key infrastructure and single sign-on solutions becomes difficult
Solution Approach 1:
The access delegation device serves as a mediator that bridges traditional authentication systems (like internal PKI and SSO) with blockchain operations. It receives authenticated user requests from these systems and translates them into blockchain-compatible commands, enabling seamless integration without requiring users to manage multiple access methods
Solution Approach 2:
The access delegation device is designed to work with multiple authentication systems simultaneously, providing a universal interface that supports various access methods (internal PKI, SSO, and direct blockchain access) through a single unified system
3Reliability
If users manage their own cryptographic keys, then security control is maintained, but delegation of blockchain operations to service providers becomes difficult
Solution Approach 1:
The access delegation device acts as a trusted intermediary that users can grant limited access to without exposing their private keys. The device translates user actions into blockchain operations while the user retains ultimate security control through their authentication credentials, enabling service provider delegation without key exposure
Solution Approach 2:
The system segments the authentication process from the blockchain operation execution. Users authenticate through their existing systems while the access delegation device handles the translation to blockchain commands, separating security control (user's domain) from operation execution (delegated to service providers)
Data Source
AI summary
A method for delegating access to a blockchain. The method is carried out by an access delegation device and includes: receiving an execution request from a terminal, including at least one identifier of a user and at least one command to execute an action within the blockchain, the command being encrypted via at least one encryption key belonging to the user; obtaining, according to the at least one identifier of the received user, at least one decryption key of the user for decrypting the execution command; decrypting the execution command; and sending, to the blockchain, a request for executing the decrypted execution command via the at least one decryption key.