Blockchain Data Management System for Off-Chain Storage Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain systems face challenges in reliably managing off-chain data, which is vulnerable to unauthorized manipulation and lacks controlled sharing permissions, especially in consortium blockchains where sensitive data may be inadvertently shared among organizations.
Innovation Solution
A data management system that utilizes a blockchain node and a service server to securely store and share off-chain data by recording access and change provenance on the blockchain, allowing selective data sharing between organizations through a peer-to-peer network, and ensuring data integrity and security through smart contracts and consensus processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If off-chain data is stored outside the blockchain to reduce storage costs and improve scalability, then storage efficiency and system scalability are improved, but data security and integrity are worsened due to vulnerability to unauthorized manipulation
Solution Approach 1:
The patent divides data into two categories: on-chain data (hash values, metadata, provenance records) stored in the blockchain for integrity verification, and off-chain data (actual large-volume data) stored externally for cost-effective storage. This segmentation allows the system to leverage the security of blockchain for critical verification while utilizing external storage for bulk data retention.
Solution Approach 2:
The patent introduces smart contracts as intermediaries that mediate between blockchain nodes and off-chain storage systems. These smart contracts enforce access control policies, record provenance automatically, and verify data integrity without requiring manual intervention, thus maintaining data reliability while enabling external storage.
2Device complexity
If all organizations in a consortium blockchain share all data to simplify permission management, then system complexity is reduced, but data security and organizational privacy are worsened due to inability to control sensitive data sharing
Solution Approach 1:
The patent implements dynamic access control policies where sharing permissions are not fixed but can be adjusted based on data sensitivity, organizational roles, and specific use cases. Smart contracts automatically apply appropriate permission levels to different data types, enabling flexible security management without manual configuration for each data-access scenario.
Solution Approach 2:
The patent applies different security and sharing policies to different data types and organizational contexts. Sensitive data receives stricter access controls and automated provenance tracking, while non-sensitive data allows broader sharing. This localized quality approach ensures that security measures are applied precisely where needed without unnecessarily complicating overall system management.
3Ease of operation
If data registration and update processes are simplified to reduce operational costs, then ease of operation is improved, but data reliability and verification accuracy are worsened due to insufficient validation
Solution Approach 1:
The patent implements self-service mechanisms where smart contracts automatically perform verification, validation, and provenance recording during data registration and updates. The system autonomously checks data integrity, verifies permissions, and records transactions without requiring manual verification steps, thus maintaining high reliability while simplifying user operations.
Solution Approach 2:
The patent incorporates automated feedback loops where the blockchain network continuously verifies data integrity and access permissions through consensus mechanisms. Any attempted unauthorized modifications trigger immediate verification failures and alerts, providing real-time feedback that maintains data reliability without requiring manual intervention in the registration process.
Data Source
AI summary
A data management system according to an embodiment of this invention includes a blockchain node configured to store on-chain data on blockchain and a service server, upon receiving a service request associated with the original data from a client, i) accessing off-chain data stored in a storage node or recording off-chain data in the storage node according to the service request, and ii) sending a transaction proposal to the blockchain node for a record associated with the service request to be stored in the blockchain.