Blockchain Identity Access Management With Three-Cluster Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional identity access management systems rely on a single source of data records, making them vulnerable to unauthorized access when data is compromised.
Innovation Solution
Implementing a multi-blockchain cluster verification process involving three distinct blockchain clusters - nodes, users/objects, and passwords clusters - to verify application authorization, user existence, and credentials, requiring simultaneous compromise of a majority of nodes in each cluster for unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single source of data records is used for identity verification, then the system is simpler to operate, but security is compromised when data is breached
Solution Approach 1:
The identity management system is segmented into three independent blockchain clusters: a first cluster storing application authorization data, a second cluster storing user identity data, and a third cluster storing credential data. Each cluster operates independently with its own set of nodes, so that compromising one cluster does not expose all security layers. This segmentation directly resolves the contradiction by improving security through data separation while maintaining operational simplicity through standardized verification protocols.
2Reliability
If multiple blockchain clusters are used for verification, then security is enhanced, but the verification process becomes more complex
Solution Approach 1:
The system implements a universal verification protocol that can authenticate users across all three blockchain clusters using a standardized process. The verification mechanism universally checks: (1) application authorization in the first cluster, (2) user identity in the second cluster, and (3) credentials in the third cluster. This multi-functional approach enhances security by verifying all three data sources while maintaining ease of operation through a single, consistent verification workflow that handles all clusters uniformly.
3Reliability
If data records are stored in a single location, then the system is easier to maintain, but unauthorized access can occur when that location is compromised
Solution Approach 1:
Data records are segmented and distributed across three separate blockchain clusters, each storing different types of sensitive information. The first cluster stores application authorization data, the second stores user identity data, and the third stores credential data. This segmentation ensures data integrity by preventing single-point compromises, while the modular blockchain architecture allows for straightforward deployment of each cluster independently, reducing overall system deployment complexity.
Data Source
AI summary
Systems and methods include a computer-implemented method for verifying blockchain transaction. A request is received in a blockchain for a user to use an application. A three-blockchain cluster verification process is performed in response to receiving the request. Verification that the application is authorized is performed using a nodes blockchain cluster in the blockchain based on user-application data pre-verified by at least two administrators and stored in the nodes blockchain cluster. Verification that the user exists and is authorized is performed using a users/objects blockchain cluster in the blockchain different from the nodes blockchain cluster, where the verifying is based on the user-application data pre-verified by the at least two administrators and stored in the users/objects blockchain cluster. Verification that credentials for the user exist is performed using a passwords blockchain cluster in the blockchain different from the nodes blockchain cluster and the users/objects blockchain cluster, where the verifying is based on the user-application data pre-verified by the at least two administrators and stored in the passwords blockchain cluster. Access to the application is granted to the user in response to successfully completing the three-blockchain cluster verification process, including verification using the nodes blockchain cluster, the users/objects blockchain cluster, and the passwords blockchain cluster.