Blockchain Account Level Access Control for Smart Contract Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Blockchain systems lack effective access management mechanisms, allowing malicious parties to access smart contract functions freely, which compromises data security and integrity.

Innovation Solution

Implementing a method and device within the blockchain system to manage access by determining the account levels of requesting and target accounts, permitting access only if the requesting account's level satisfies the conditions set by the target account's level, using a permission fence to manage access to smart contracts and their interfaces.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If free access to smart contract functions is provided through channel establishment, then ease of operation is improved, but security is worsened due to unauthorized access by malicious parties

Engineering Contradiction:
Improveaccess to smart contract functionsVSAvoiddata security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces account levels as a new parameter to control access to smart contract functions. By establishing different account levels (e.g., first account level and second account level), the system can differentiate between authorized and unauthorized access requests. The access control mechanism checks whether the requesting account's level satisfies the required level for the target function, thereby preventing malicious access while maintaining ease of operation for legitimate users.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If centralized control of read and write permissions is implemented in private blockchain networks, then security is improved, but device complexity is worsened

Engineering Contradiction:
Improveaccess control securityVSAvoidpermission management system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements local quality by assigning different account levels to different accounts based on their specific access requirements. Instead of a uniform permission system, each account is granted appropriate access rights according to its designated level. This allows the system to maintain security through centralized control while avoiding excessive complexity by applying permissions locally to each account-function pair rather than managing complex global permission matrices.

Inventive Principle:
Principle #3Local quality

3Reliability

If account level verification is implemented for access control, then security is improved, but productivity is worsened due to additional verification steps

Engineering Contradiction:
Improveaccess authorization securityVSAvoidtransaction processing speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies preliminary action by pre-establishing account levels and associating them with specific smart contract functions during system setup or account creation. The access control mechanism then performs a simple level comparison check when processing transactions, rather than conducting complex authorization evaluations at runtime. This preliminary configuration reduces the verification overhead during transaction processing, maintaining security while minimizing impact on productivity.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11157897B2Methods and devices for managing access to account in blockchain system
Publication Date: 2021.10.26 ADVANCED NEW TECHNOLOGIES CO LTD
  • US11157897B2 patent drawing
  • US11157897B2 patent drawing
  • US11157897B2 patent drawing

AI summary

Disclosed herein are methods, devices, and apparatuses, including computer programs stored on computer-readable media for managing access to an account in a blockchain system. One of the methods includes: receiving, from a first account of the blockchain system, a request for accessing a second account of the blockchain system; determining an account level of the first account based on the request; determining an account level of the second account; determining whether the account level of the first account satisfies an account condition based on the account level of the second account; and permitting the request for accessing the second account based on a determination that the account level of the first account satisfies the account condition.