Blockchain Data Access Authorization via Random Number Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain technologies lack an effective authorization scheme to protect user data privacy while ensuring data services, particularly in banking applications where repeated data access requests need to be managed securely.
Innovation Solution
A blockchain data access authorization method that involves a blockchain platform verifying random numbers and data scopes in data access requests from third-party institutions, ensuring that only authorized data access occurs and that user privacy is maintained through encryption and timed access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the card service provider directly provides data services to the card issuing bank using blockchain technology, then data service efficiency is improved, but data privacy and ownership protection deteriorates
Solution Approach 1:
The patent implements preliminary authorization action by requiring users to pre-configure authorization rules, data scopes, and time limits in the client terminal before any data access occurs. The blockchain platform stores these authorization parameters in advance, so when data access requests are made, the system can automatically verify and control access based on pre-set rules, eliminating the need for repeated user authorizations while maintaining privacy protection.
Solution Approach 2:
The blockchain platform serves as an intermediary between the card service provider and the card issuing bank. It stores encrypted user data and authorization parameters, and controls data access by verifying requests against stored authorization rules. This intermediary mechanism enables efficient data services while maintaining user privacy control, as the blockchain platform mediates all data access without exposing raw user data to either party.
2Object-affected harmful factors
If the card issuer obtains user authorization to access data, then data privacy is protected, but data service accessibility deteriorates
Solution Approach 1:
The system performs preliminary authorization configuration where users set up their data access preferences, scopes, and time limits in advance. Once configured, the blockchain platform stores these parameters and automatically processes subsequent data access requests without requiring repeated user authorization actions. This eliminates the operational burden on users while maintaining privacy protection.
Solution Approach 2:
The blockchain platform implements self-service data access control by automatically verifying data access requests against stored authorization parameters. The system autonomously determines whether access should be granted based on pre-configured rules, data scopes, and time limits, without requiring manual user intervention for each access request. This enables seamless data services while maintaining user control.
3Reliability
If random numbers are generated for each authorization request, then authorization security is improved, but system complexity deteriorates
Solution Approach 1:
The blockchain platform acts as an intermediary that manages random number generation and verification. The client terminal generates random numbers locally for authorization requests, and the blockchain platform stores these random numbers along with their corresponding authorization parameters. When data access requests are made, the blockchain platform verifies the random numbers against stored values, providing security without requiring complex verification logic in the client terminal.
Data Source
AI summary
A method for authorizing a blockchain data access on a blockchain platform includes: obtaining from a third-party institution a data access request containing a user ID of data access, a data scope, and a random number of a signature, which is generated by the third-party institution after receiving a random number sent by a client terminal and signing on the received random number; performing a verification on the random number of the signature and the data scope; and after the verification is passed, sending data ciphertext corresponding to the user ID to the third-party institution, such that the third-party institution decrypts the data ciphertext using a data secret key sent by the client terminal.