Blockchain Access Control Using Distributed Ledger Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional access control systems are vulnerable to single points of failure due to Distributed Denial of Service (DDoS) attacks on centralized authentication servers, leading to system failures.
Innovation Solution
Implement an access control method using a blockchain-based system that verifies terminal identity through private key signature information and blockchain ledger data, including public key information, terminal identification, and hash values, to distribute access control functions and enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized authentication server is used for access control, then access control functionality is achieved, but the system becomes vulnerable to DDoS attacks and single point of failure
Solution Approach 1:
The centralized authentication server is segmented into multiple distributed authentication nodes forming a blockchain network. Each node maintains a copy of the authentication ledger, distributing the authentication function across multiple independent entities. This segmentation eliminates the single point of failure while maintaining authentication capability, as the system can tolerate failures of individual nodes without compromising overall system reliability.
Solution Approach 2:
A blockchain ledger serves as an intermediary between terminals and authentication nodes. The ledger stores authentication records and terminal identities in a decentralized manner, mediating the authentication process without requiring a centralized controller. This intermediary structure enables distributed consensus-based authentication, improving system reliability by removing the vulnerable centralized server while the blockchain protocol manages the complexity of coordination.
2Object-affected harmful factors
If authentication information is stored in a centralized database, then access control is efficient, but the system is exposed to network attacks
Solution Approach 1:
The centralized authentication database is segmented into a distributed blockchain ledger replicated across multiple nodes. Authentication information is no longer stored in a single vulnerable database but distributed across the network. This segmentation protects against DDoS attacks by eliminating the single target while maintaining authentication efficiency through parallel processing capabilities of the distributed network and optimized consensus mechanisms.
Solution Approach 2:
The authentication ledger is copied and replicated across multiple blockchain nodes rather than stored centrally. Each node maintains an identical copy of the authentication records, eliminating the single point of failure. The copying mechanism ensures that authentication efficiency is maintained because any node can process authentication requests, and the system can handle multiple concurrent requests across different nodes simultaneously.
3Object-affected harmful factors
If a blockchain-based distributed system is implemented, then resistance to DDoS attacks is improved, but system complexity increases
Solution Approach 1:
The blockchain protocol and smart contracts serve as intermediaries that automate and standardize the authentication process. These intermediaries encapsulate the complexity of distributed consensus, cryptographic verification, and ledger management, presenting a simplified interface to terminals. This intermediary layer protects against DDoS attacks by providing a standardized, decentralized authentication mechanism while managing system complexity through automated protocols rather than manual coordination.
Solution Approach 2:
The blockchain network implements self-service mechanisms where nodes automatically verify authentication requests using cryptographic proofs and consensus algorithms without requiring centralized coordination. Terminals can independently interact with any authentication node using standard protocols, eliminating the need for complex centralized management. This self-service approach reduces DDoS vulnerability by removing centralized control points while managing complexity through automated, standardized processes.
Data Source
AI summary
The present disclosure provides an access control method, an access control apparatus, a network side device, a terminal and a blockchain node, wherein the access control method includes: receiving relevant information to be verified that is sent by a terminal and corresponds to an access request, wherein the relevant information to be verified includes private key signature information of the terminal and position information of preset information in the blockchain; acquiring the preset information from the blockchain according to the position information; verifying the terminal according to the private key signature information and the preset information; acquiring, in a case that verification is passed, attribute information of the terminal from a blockchain ledger according to the preset information; and feedbacking a request response for access control to the terminal according to the attribute information.