Blockchain Access Control for Masked Document Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in controlling data access with an all-or-nothing approach, leading to inefficient resource consumption and vulnerability to attacks, while failing to provide personalized permission settings and timely detection of unauthorized access.
Innovation Solution
A blockchain-based system employing a machine learning model for dynamic access control, allowing personalized permission settings and real-time verification of access privileges, using a distributed ledger to secure data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional systems use an all-or-nothing approach for access control with pre-configured general permission settings, then device complexity is reduced and ease of operation is improved, but manufacturing precision of access control decisions deteriorates and adaptability to individual devices is lost
Solution Approach 1:
The patent segments the monolithic access control system into distributed components: a blockchain network containing multiple nodes, each capable of independently evaluating access requests. This segmentation enables personalized permission settings for each device while distributing the processing load across the network, eliminating the need for centralized configuration management.
Solution Approach 2:
Each device in the network is assigned a unique identifier stored on the blockchain, enabling self-service access control. Devices automatically present their identifiers when requesting access, and the blockchain network autonomously evaluates these requests based on pre-stored permission criteria, eliminating manual configuration and reducing operational complexity.
2Adaptability or versatility
If personalized permission settings are implemented for each device in the network, then adaptability and manufacturing precision of access control decisions are improved, but device complexity increases and processing resource consumption increases
Solution Approach 1:
The patent uses cryptographic copying where each device receives a copy of its unique identifier and relevant permission criteria from the blockchain. This allows devices to make local access control decisions without querying the central system, reducing communication overhead and simplifying the overall system architecture while maintaining personalized control.
Solution Approach 2:
The blockchain serves as an intermediary layer between devices and the access control logic. Permission criteria and device identifiers are stored on the blockchain, which mediates access requests by providing verification mechanisms without requiring complex point-to-point configuration between devices and controllers.
3Adaptability or versatility
If frequent adjustments to permission settings are made, then adaptability is improved, but loss of time for system configuration increases and productivity decreases
Solution Approach 1:
The patent implements dynamic permission settings through the blockchain's inherent ability to update stored identifiers and criteria. When permission needs change, the system simply writes new values to the blockchain, and all devices automatically receive updated information through the distributed ledger mechanism, enabling frequent adjustments without system reconfiguration or downtime.
Solution Approach 2:
The blockchain maintains continuous availability of access control data across all network nodes. Permission settings can be adjusted at any time without interrupting system operation, as the distributed nature of the blockchain ensures that updated permissions are propagated continuously to all devices, maintaining uninterrupted access control functionality.
4Device complexity
If conventional systems store access control data in centralized locations, then device complexity is reduced, but reliability and security against attacks deteriorate
Solution Approach 1:
The patent segments the centralized data storage into distributed storage across multiple blockchain nodes. Each node holds a copy of the access control data, eliminating the single point of failure inherent in centralized storage. This segmentation improves security against attacks while maintaining simple access control logic at each device through the use of standardized blockchain interaction protocols.
Solution Approach 2:
The blockchain acts as an intermediary data storage layer between devices and the access control logic. Rather than devices directly storing and managing access control data, they interact with the blockchain intermediary, which handles data integrity, security, and distribution automatically, simplifying device architecture while enhancing overall system reliability.
Data Source
AI summary
A device configured to provide access to a digital document to a user device and to receive an access request for a first masked data element within the digital document. The device is further configured to generate a first blockchain transaction that identifies a machine learning model that is stored in a blockchain. The device is further configured to publish the first blockchain transaction in a blockchain ledger for the blockchain and to receive a second blockchain transaction from the machine learning model in response to publishing the blockchain transaction in the blockchain ledger. The second transaction indicates whether the user is approved for accessing the masked data element. The device is further configured to provide access to the first masked data element on the user device for the user in response to determining that the user is approved for accessing the masked data element.