Blockchain Data Authorization via Privacy Computing Platform
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain technologies lack an efficient method for secure and transparent data authorization between data owners and users, which is crucial for ensuring data reliability and privacy in decentralized systems.
Innovation Solution
A blockchain-based data authorization method and apparatus that utilizes a data authorization smart contract to verify user authorization and provide authorization tokens, enabling secure access to target data while ensuring data privacy through encryption and trusted execution environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If blockchain technology is used for data authorization, then data reliability and transparency are improved, but system complexity increases
Solution Approach 1:
The patent introduces a privacy computing platform as an intermediary between the blockchain network and data access operations. This platform handles complex cryptographic operations and data processing locally, while the blockchain only stores authorization results and metadata. The intermediary absorbs system complexity away from the core blockchain structure, maintaining reliability through decentralized verification while reducing overall system complexity.
Solution Approach 2:
The system segments functionality into distinct modules: the blockchain layer handles authorization verification and token issuance, the privacy computing platform handles data processing and encryption, and data owners/users handle their respective data assets. This segmentation allows each component to be optimized independently, reducing the complexity burden on any single system while maintaining overall reliability.
2Reliability
If smart contracts are used to verify authorization, then authorization security is improved, but processing time increases
Solution Approach 1:
The system performs preliminary authorization setup in advance through data authorization smart contracts that establish authorization rules, token formats, and verification logic beforehand. When actual data access is needed, the pre-established smart contracts can quickly verify authorization status without requiring complex real-time computations, thus improving authorization security while reducing processing time for actual data operations.
Solution Approach 2:
The patent uses authorization tokens as simplified copies or representations of complex authorization states. Instead of executing full smart contract verification logic every time data access is requested, the system uses these token copies to represent authorized status, enabling fast verification while maintaining the security guarantees of the underlying smart contract system.
3Reliability
If data encryption is implemented, then data privacy is improved, but data accessibility decreases
Solution Approach 1:
The privacy computing platform performs self-service by executing data processing, encryption, and decryption operations locally without requiring continuous blockchain verification for each operation. The platform uses private keys and cryptographic protocols to autonomously protect data privacy while maintaining accessibility for authorized users, thus improving data privacy without significantly impacting data accessibility.
Data Source
AI summary
One or more implementations of the present specification provide a blockchain-based data authorization method and apparatus. The method can include receiving, by a blockchain node, an authentication transaction submitted by a privacy computing platform, where the authentication transaction queries whether a data user has obtained authorization of target data possessed by a data owner, and in response to determining that the data user has obtained authorization of the target data, executing, by the blockchain node, a smart contract invoked by the authentication transaction to provide an authorization token to the privacy computing platform that instructs the privacy computing platform to obtain the target data, and send a computational result of one or more predetermined computational operations based on the target data to the data user.