Blockchain Integrity Data Structure for Controlled External Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain systems face limitations in data storage capacity and privacy, as they are designed for transparency and lack mechanisms for secure external data storage while maintaining security protocols.
Innovation Solution
The method involves storing data externally and generating an integrity data structure that identifies the storage location, which is then encrypted and stored on a blockchain, allowing selective decryption key provision for controlled access, thereby increasing data capacity and ensuring privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored directly on the blockchain, then data integrity and security are improved, but data storage capacity is limited
Solution Approach 1:
The patent extracts only the essential integrity verification components (hash values and metadata) from the full data and stores them on the blockchain, while the complete data is stored externally. This allows the blockchain to maintain integrity verification capabilities without being constrained by its limited storage capacity.
Solution Approach 2:
The patent introduces an intermediary storage layer between the blockchain and the external data storage. The blockchain stores hash values that act as intermediaries, linking to externally stored data without requiring the full data to reside on the blockchain. This mediator approach resolves the contradiction between limited blockchain storage and the need for data integrity.
2Ease of operation
If blockchain transparency is maintained, then data accessibility is improved, but data privacy is compromised
Solution Approach 1:
The patent applies different quality characteristics to different parts of the data system. Sensitive data portions are encrypted and stored externally with restricted access, while non-sensitive metadata and hash values are stored on the blockchain with full transparency. This local differentiation allows simultaneous achievement of privacy for sensitive data and accessibility for verification purposes.
Solution Approach 2:
The patent segments data into multiple components: sensitive data stored externally with encryption, integrity verification data stored on blockchain, and selective decryption key management. This segmentation allows different access permissions for different data portions, maintaining both privacy and accessibility according to specific needs.
3Quantity of substance
If external data storage is used, then data storage capacity is improved, but security protocol assurance is weakened
Solution Approach 1:
The patent performs preliminary actions by computing and storing hash values of external data on the blockchain before any potential security breaches can occur. These pre-stored hash values serve as immutable reference points that allow future verification of data integrity, ensuring security protocol assurance even though data is stored externally.
Solution Approach 2:
The patent implements a feedback mechanism where stored hash values on the blockchain continuously verify the integrity of externally stored data. Any modification to external data would result in a mismatch with the blockchain-stored hash, providing immediate feedback about data integrity status and maintaining security assurance.
Data Source
AI summary
A method, apparatus and system for providing controlled access to data in a distributed computing environment include storing received data to be accessed via the distributed computing environment in at least one storage device, generating at least one integrity data structure identifying at least a storage location of at least a respective portion of the stored data, storing the generated at least one integrity data structure in a block of a blockchain, encrypting the at least one integrity data structure in the block of the blockchain, and selectively providing at least a portion of at least one decryption key for decrypting the encrypted at least one integrity data structure to enable access to the respective portion of the stored data for which the at least one integrity data structure is generated. Additionally, the stored data can be encrypted and a decryption key can be provided for decrypting the stored data.