Blockchain Data Authorization via Privacy Computing Platform

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current blockchain technologies lack an efficient method for secure and transparent data authorization between data owners and users, which is crucial for ensuring data reliability and privacy in decentralized systems.

Innovation Solution

A blockchain-based data authorization method and apparatus that utilizes a data authorization smart contract to verify user authorization and provide authorization tokens, enabling secure access to target data while ensuring data privacy through encryption and trusted execution environments.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If blockchain technology is used for data authorization, then data reliability and transparency are improved, but system complexity increases

Engineering Contradiction:
Improvedata reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a privacy computing platform as an intermediary between the blockchain network and data users. This platform handles complex cryptographic operations and data processing locally, while the blockchain only stores authorization results and verification data. The intermediary approach maintains blockchain's reliability benefits while offloading computational complexity to specialized hardware modules (TEE/SGX), thus resolving the contradiction between data reliability and system complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If data is encrypted to protect privacy, then data security is improved, but data accessibility deteriorates

Engineering Contradiction:
Improvedata securityVSAvoiddata accessibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces traditional cryptographic verification mechanisms with trusted execution environment (TEE) based verification. Instead of requiring users to manually handle encrypted data and complex decryption protocols, the TEE/SGX hardware automatically verifies data authenticity and performs computations on encrypted data. This substitution maintains strong encryption for security while making data accessible to authorized users through automated hardware-based verification, thus resolving the contradiction between data security and data accessibility.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Device complexity

If traditional authorization methods are used, then system complexity is reduced, but data privacy protection deteriorates

Engineering Contradiction:
Improvesystem complexityVSAvoiddata privacy protection
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent extracts the complex privacy protection logic from the main blockchain system and implements it within isolated trusted execution environments (TEE/SGX). The authorization smart contracts on the blockchain only handle high-level authorization decisions, while the actual data processing and privacy verification occur within the extracted TEE modules. This extraction maintains relative system simplicity at the blockchain level while achieving strong data privacy protection through specialized hardware, thus resolving the contradiction between system complexity and data privacy protection.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11251963B2Blockchain-based data authorization method and apparatus
Publication Date: 2022.02.15 ANTCHAIN TECHNOLOGY PTE LTD
  • US11251963B2 patent drawing
  • US11251963B2 patent drawing
  • US11251963B2 patent drawing

AI summary

One or more implementations of the present specification provide a blockchain-based data authorization method and apparatus. The method can include receiving, by a blockchain node, an authentication transaction submitted by a privacy computing platform, where the authentication transaction queries whether a data user has obtained authorization of target data possessed by a data owner, and in response to determining that the data user has obtained authorization of the target data, executing, by the blockchain node, a smart contract invoked by the authentication transaction to provide an authorization token to the privacy computing platform that instructs the privacy computing platform to obtain the target data, and send a computational result of one or more predetermined computational operations based on the target data to the data user.