Blockchain Identity Assurance via Entitlement Contracts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Decentralized applications on blockchain systems face security and efficiency risks due to the inability to differentiate between authorized and unauthorized transactions, allowing malicious transactions to disrupt operations and steal assets.
Innovation Solution
An identity assurance system is implemented within the blockchain system, utilizing entitlement and registry contracts to verify and authorize transactions, ensuring only authorized transactions are processed while maintaining user privacy by not revealing identities to the decentralized application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If decentralized applications accept transactions from any address without verification, then the system maintains simplicity and ease of operation, but security and reliability deteriorate due to unauthorized transactions and malicious attacks
Solution Approach 1:
The patent introduces an identity assurance system as an intermediary component between transaction senders and decentralized applications. This mediator verifies user identities and generates cryptographic proofs that confirm authorization without revealing underlying identity information. The intermediary layer resolves the contradiction by adding necessary verification complexity in a modular, standardized manner that protects the core application from direct complexity exposure.
Solution Approach 2:
The identity assurance system is segmented into distinct functional components: identity verification modules, cryptographic proof generation, and transaction validation layers. This segmentation allows each component to be independently developed, tested, and maintained, reducing overall system complexity while maintaining comprehensive security functionality.
2Reliability
If identity verification is implemented to prevent unauthorized transactions, then security improves, but processing efficiency and speed deteriorate due to additional verification steps
Solution Approach 1:
User identities are verified and cryptographic proofs are generated in advance, before transactions are submitted to the blockchain. This preliminary action ensures that when transactions arrive, the verification work has already been completed, minimizing processing delays and maintaining high transaction throughput while ensuring security.
Solution Approach 2:
The system uses cryptographic copies and proofs of identity verification rather than repeatedly performing full identity checks for each transaction. A single verification result can be copied and reused across multiple transactions, significantly reducing processing time while maintaining security assurance.
3Measurement precision
If user identities are verified and stored, then authorization accuracy improves, but user privacy deteriorates due to potential identity exposure
Solution Approach 1:
The system extracts only the essential verification information needed for authorization decisions while leaving sensitive personal identity data separate and protected. Cryptographic proofs contain sufficient information to verify authorization accuracy without exposing underlying identity details, thus maintaining both verification precision and user privacy.
Solution Approach 2:
Different parts of the identity verification system have different quality requirements: the verification mechanism requires high precision for accurate authorization, while the stored identity information requires high privacy protection. The system applies local quality control by using cryptographic transformations that provide precise verification where needed while protecting privacy where stored.
Data Source
AI summary
An embodiment of a method of providing identity assurance for a decentralized application (DApp) includes executing, by at least one distributed node of a blockchain system, an entitlement contract stored on the blockchain to perform a read call from a DApp contract stored on the blockchain, the read call including an address signing a transaction to the DApp contract. Performing the read call may include reading a list of registered addresses stored on the blockchain, determining whether the list includes the signing address; and providing an output indicating whether the list includes the signing address. The method may further include executing, by the at least one distributed node, a registry contract stored on the blockchain to perform a read call from the DApp contract, the read call including an identifier of the decentralized application. Performing the read call may include reading a list of registered applications stored on the blockchain; determining whether the list includes the identifier; and if so, providing an output indicating an address of the entitlement contract.