Blockchain Ledger Secures Confidential Data Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Organizations face challenges in securely sharing sensitive data due to concerns over access permissions management, as existing data storage systems are vulnerable to breaches and lack transparency in access control, especially when multiple entities are involved.

Innovation Solution

Implementing a blockchain ledger system that manages and updates access permissions through a smart contract, ensuring consensus among a community of organizations, thereby providing transparent and immutable storage of access permissions for secure data sharing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional data storage systems are used to secure sensitive data, then data can be stored and accessed, but access permissions management lacks transparency and is vulnerable to breaches

Engineering Contradiction:
Improvesecurity of data accessVSAvoidtransparency of access permissions
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent introduces a blockchain ledger as an intermediary system between data storage and access control. The ledger immutably records all access permission changes and data access events, providing transparent audit trails without compromising data security. Smart contracts act as automated intermediaries that enforce access policies based on pre-defined rules, eliminating manual permission management vulnerabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If access permissions are shared among multiple entities, then data sharing capability is improved, but the risk of breaches increases due to lack of centralized control

Engineering Contradiction:
Improvedata sharing capabilityVSAvoidrisk of breaches
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system implements continuous feedback mechanisms where the blockchain ledger records and monitors all access permission changes and data access events in real-time. This creates an immutable audit trail that provides visibility into who accessed what data and when, enabling organizations to detect and respond to potential breaches immediately while maintaining multi-entity data sharing capabilities.

Inventive Principle:
Principle #23Feedback

3Ease of operation

If traditional access control systems are used, then access management can be implemented, but audit trails are insufficient for tracking access permissions changes

Engineering Contradiction:
Improveaccess permissions managementVSAvoidaudit trail completeness
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The system performs preliminary actions by pre-defining access control policies and rules in smart contracts before any data access occurs. These smart contracts automatically enforce permission requirements and log all access attempts on the blockchain, ensuring complete audit trails are created proactively rather than retroactively. This approach simplifies ongoing access management while guaranteeing comprehensive audit coverage.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12045372B2Securing access to confidential data using a blockchain ledger
Publication Date: 2024.07.23 ORACLE INT CORP
  • US12045372B2 patent drawing
  • US12045372B2 patent drawing
  • US12045372B2 patent drawing

AI summary

Methods and systems are provided for securing access to confidential data using a blockchain ledger. An update to access permissions can be received from a first entity on behalf of a second entity, the update can change access permissions to a confidential data store. A smart contract that validates the update can be called. Upon consensus from a blockchain community, the update to the access permissions for the second entity can be executed. The blockchain community can be a plurality of different organizations that share access to the confidential data store, and the update can be appended to a blockchain ledger that stores access permissions for the blockchain community.