Blockchain Account Level Access Control for Smart Contract Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Blockchain systems lack effective access management mechanisms, allowing malicious parties to access smart contract functions freely, which compromises data security and integrity.
Innovation Solution
Implementing a method and device within the blockchain system to manage access by determining the account levels of requesting and target accounts, permitting access only if the requesting account's level satisfies the conditions set by the target account's level, using a permission fence to manage access to smart contracts and their interfaces.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If free access to smart contract functions is provided through channel establishment, then ease of operation is improved, but security is worsened due to unauthorized access by malicious parties
Solution Approach 1:
The patent introduces account levels as a new parameter to control access to smart contract functions. By establishing different account levels (e.g., first account level and second account level), the system can differentiate between authorized and unauthorized access requests. The access control mechanism checks whether the requesting account's level satisfies the required level for the target function, thereby preventing malicious access while maintaining ease of operation for legitimate users.
2Reliability
If centralized control of read and write permissions is implemented in private blockchain networks, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent implements local quality by assigning different account levels to different accounts based on their specific access requirements. Instead of a uniform permission system, each account is granted appropriate access rights according to its designated level. This allows the system to maintain security through centralized control while avoiding excessive complexity by applying permissions locally to each account-function pair rather than managing complex global permission matrices.
3Reliability
If account level verification is implemented for access control, then security is improved, but productivity is worsened due to additional verification steps
Solution Approach 1:
The patent applies preliminary action by pre-establishing account levels and associating them with specific smart contract functions during system setup or account creation. The access control mechanism then performs a simple level comparison check when processing transactions, rather than conducting complex authorization evaluations at runtime. This preliminary configuration reduces the verification overhead during transaction processing, maintaining security while minimizing impact on productivity.
Data Source
AI summary
Disclosed herein are methods, devices, and apparatuses, including computer programs stored on computer-readable media for managing access to an account in a blockchain system. One of the methods includes: receiving, from a first account of the blockchain system, a request for accessing a second account of the blockchain system; determining an account level of the first account based on the request; determining an account level of the second account; determining whether the account level of the first account satisfies an account condition based on the account level of the second account; and permitting the request for accessing the second account based on a determination that the account level of the first account satisfies the account condition.


