Methods for controlling access to decentralized network resources and devices thereof
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In decentralized networks, there is no central authority to maintain access control lists (ACLs), making it impossible to prove identity authorization for resource operations, thus lacking efficient access control methods.
Innovation Solution
Implementing an access control apparatus that uses asymmetric cryptography and tokens to authorize operations on decentralized network resources, where resource providers do not hold private keys, maintaining them client-side or by a trusted gateway service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control lists are used in centralized networks, then network security is improved, but the system cannot be deployed in decentralized networks without a central authority
Solution Approach 1:
The patent introduces tokens as intermediary objects that mediate between resource owners and resource users in decentralized networks. These tokens encapsulate authorization information and can be verified without requiring a central authority, thus enabling access control in decentralized environments while maintaining security.
Solution Approach 2:
The patent replaces the traditional centralized ACL management system with a cryptographic verification system using asymmetric cryptography. Instead of relying on a central authority to manage access lists, the system uses mathematical proofs (digital signatures) to verify authorization, enabling deployment in trustless decentralized networks.
2Ease of operation
If private keys are stored centrally for authorization, then access control is simplified, but security is compromised as central storage creates vulnerability to attacks
Solution Approach 1:
The patent segments the access control system into distributed components where each node maintains its own private keys locally. Authorization is achieved through cryptographic verification of tokens rather than central key storage, eliminating the single point of failure while maintaining operational simplicity through standardized token verification processes.
Solution Approach 2:
The patent enables resource owners to self-manage their private keys and authorization tokens without requiring a central authority. Each participant in the decentralized network independently controls their own credentials and can verify others' authorization through cryptographic proofs, eliminating central key storage while maintaining ease of operation through automated verification.
Data Source
AI summary
Methods, non-transitory computer-readable media, and access control apparatuses are disclosed that, after creating a resource in response to a creation request, provide a resource identifier for the resource and a public key of a key pair to an authorizer service for insertion into a mapping. An authorization request is sent to the authorizer service in response to an operation request to perform an operation on the resource that comprises the resource identifier and a token signed with a private key of the key pair. The authorization request comprises the resource identifier, the operation, and the token and the token identifies a capability. The operation is then executed on the resource when a signature of the token is validated by the authorizer service using the public key retrieved from the mapping and the operation is validated based on a match of the operation and the capability.