Blockchain Cost Data Access Control for Confidential Construction Records
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing construction cost management platforms face challenges in ensuring data accountability and confidentiality due to the transparency of blockchain networks, which contradicts the confidential nature of cost-sensitive information, and traditional access control methods are inadequate for decentralized architectures.
Innovation Solution
A framework integrating symmetric and asymmetric encryption with proxy re-encryption mechanisms is developed to create an access control model that ensures only authorized stakeholders can access sensitive cost data on the blockchain, while allowing dynamic access transfer for new project members.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If blockchain is used for construction cost management, then data accountability and traceability are improved, but data confidentiality deteriorates due to network transparency
Solution Approach 1:
The patent segments cost data into sensitive and non-sensitive categories, applying different handling methods to each type. Sensitive cost data is encrypted and stored off-chain, while non-sensitive data is stored on-chain for transparency. This segmentation allows the system to maintain both accountability through on-chain verification and confidentiality through off-chain encryption.
Solution Approach 2:
The patent extracts sensitive cost information from the blockchain ledger and stores it in external encrypted databases. Only cryptographic hashes and access control information remain on-chain, while the actual sensitive data is taken out and protected separately. This extraction resolves the contradiction by removing the conflict between transparency and confidentiality.
2Reliability
If traditional access control methods are applied to blockchain, then data security is improved, but system complexity increases due to architectural differences
Solution Approach 1:
The patent introduces smart contracts as intermediaries that automatically enforce access control policies on the blockchain. These smart contracts act as mediators between traditional access control requirements and blockchain's decentralized architecture, translating security policies into automated verification logic that reduces manual complexity while maintaining security.
Solution Approach 2:
The patent develops a universal access control framework that can be applied across different blockchain platforms and construction management scenarios. The framework provides multi-functional capabilities including authentication, authorization, encryption key management, and audit logging through a unified system architecture, reducing overall system complexity despite the decentralized environment.
3Reliability
If sensitive cost data is stored on blockchain, then data traceability is improved, but unauthorized access risk increases
Solution Approach 1:
The patent applies different quality characteristics to different parts of the data storage system. On-chain storage provides traceability and immutability for metadata and hashes, while off-chain encrypted storage provides security for sensitive values. This local differentiation of storage qualities allows the system to optimize for traceability where needed and security where needed, preventing unauthorized access while maintaining traceability.
Solution Approach 2:
The patent implements preliminary encryption of sensitive cost data before it is stored or transmitted to the blockchain. Access control permissions and cryptographic keys are established in advance through smart contracts. This preliminary action ensures that even if data is accessed on-chain, it remains unintelligible without proper authorization, preventing unauthorized access while maintaining traceability of access attempts.
Data Source
AI summary
A system for cost management using blockchain and encryption is provided. The system includes an access interface, a recorder, a determinator, a key generator, an encryptor, and a decryptor. The access interface is configured to provide a platform for users to log in. The recorder is for recording cost information. The determinator is configured to determine whether the cost information recorded in the recorder is non-sensitive. When the cost information is determined as being non-sensitive, the cost information is directly uploaded to and recorded on a blockchain network via a smart contractor module. When the cost information is determined as being sensitive, the key generator generates a symmetric key randomly. The encryptor is configure to encrypt the cost information using the symmetric key to obtain ciphertext information and encrypt the symmetric key using public keys to obtain encrypted keys. The encryptor sends the ciphertext information to the blockchain network.