Blockchain Access Control for Distributed Telecom Network Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control mechanisms for telecommunications networks are inflexible and complex, particularly when managing access for connected objects and fleets of mobile terminals, and require complex solutions involving specific information systems and cryptographic material provisioning.
Innovation Solution
Implementing a blockchain-based access control mechanism that decouples access functions from access control functions, allowing third-party operators to manage access policies and profiles, using XACML for access control and decentralized authorization applications, and utilizing a distributed ledger technology to secure and track access events.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional access control mechanisms are used, then access verification can be performed, but the system becomes complex and inflexible when managing connected objects and terminal fleets
Solution Approach 1:
The patent segments the access control system into independent components: terminal identifiers stored on terminals, access requests published to blockchain, profile data stored separately, and verification logic distributed across the blockchain network. This segmentation eliminates the need for a centralized complex information system while improving adaptability to different terminal types and access scenarios.
Solution Approach 2:
The blockchain serves multiple functions simultaneously: it acts as a distributed ledger for storing access requests, a database for profile information, a communication channel for verification requests, and a trust mechanism for access control. This multi-functionality reduces overall system complexity while enhancing versatility across different access control scenarios.
2Adaptability or versatility
If MVNO solutions are implemented, then third-party operators can manage access policies, but complex information systems and cryptographic material provisioning are required
Solution Approach 1:
The blockchain acts as an intermediary layer between terminal operators and network operators, enabling third-party access management without requiring complex MVNO information systems. The blockchain's distributed ledger and smart contract capabilities provide the necessary mediation functions while simplifying the overall architecture compared to traditional MVNO solutions.
Solution Approach 2:
Instead of provisioning complex cryptographic materials and information systems in each terminal, the patent uses simplified terminal identifiers that are copied and verified through the blockchain. The full access control logic and profile data are stored on the blockchain rather than in each terminal, reducing terminal complexity while maintaining robust access control.
3Reliability
If cryptographic elements are verified at access time, then security is maintained, but the mechanism is difficult to implement for connected objects without subscription profiles
Solution Approach 1:
The patent changes the fundamental parameters of access control by moving from cryptographic element verification to identifier-based verification on a blockchain. Instead of verifying complex cryptographic credentials at access time, the system verifies simple terminal identifiers against blockchain-stored profiles, maintaining security while dramatically improving ease of implementation for connected objects.
Solution Approach 2:
The blockchain system provides self-service access control verification where the distributed network automatically validates access requests against stored profiles without requiring manual cryptographic verification. This self-service mechanism maintains security while eliminating the need for complex implementation procedures in each terminal or operator system.
Data Source
AI summary
An access method is described, as well as an access control method implemented by an access application and an access control application registered in a blockchain. The access control application may be subscribed to the events published by the access application. Upon receipt of an access request, the access application publishes in the blockchain, a request to verify a right for the access. It receives a response to the verification request, a response determined by the access control application based on an access control policy defined by this access control application and processes the access request based on this response.