Distributed Access Control via Consensus Miners
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Centralized access control systems in computer networks are vulnerable to manipulation and attack vectors due to their centralized nature, which can compromise security and integrity.
Innovation Solution
A distributed access control system is implemented using a distributed ledger and consensus mechanism in a peer-to-peer network architecture, where user data and authentication units are processed across multiple nodes (miners) to verify user access and update the ledger securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a centralized access control system is used, then the system is easier to manage and control, but the system becomes vulnerable to manipulation and attack vectors
Solution Approach 1:
The centralized access control system is segmented into multiple distributed nodes (minors) that collectively perform authentication and authorization functions. Each node maintains a copy of the authentication ledger, distributing the management function across the network while eliminating the single point of failure inherent in centralized systems.
Solution Approach 2:
A distributed ledger acts as an intermediary between users and resources, recording authentication units and access permissions immutably. This intermediary layer eliminates the need for a trusted central authority while maintaining system-wide consistency through cryptographic verification and consensus mechanisms.
2Speed
If authentication data is stored centrally, then access control decisions are faster to make, but the system is vulnerable to data corruption and manipulation
Solution Approach 1:
Each minor node in the distributed network maintains a local copy of the authentication ledger with relevant authentication units. This allows access control decisions to be made locally at each node based on its stored data, maintaining fast decision speeds while the distributed nature of the ledger ensures data integrity through redundancy and cryptographic verification.
3Reliability
If a distributed ledger is implemented, then security and resilience to attacks are improved, but the system complexity increases
Solution Approach 1:
The distributed ledger implementation serves multiple functions simultaneously: it stores authentication units, maintains access permissions, provides cryptographic verification, and enables consensus-based validation. This multi-functionality reduces the need for separate security infrastructure components, thereby managing system complexity while achieving high security resilience.
4Reliability
If consensus mechanisms are used for verification, then the system becomes more secure against manipulation, but the authentication process takes longer
Solution Approach 1:
The consensus mechanism requires only a threshold number of minors (excessive action beyond a single node) to verify authentication units, providing security without requiring all nodes to participate in every authentication decision. This partial consensus approach maintains security while reducing authentication time compared to requiring full network consensus.
Data Source
Figure 1
Figure 2~3
AI summary
A distributed access control system is disclosed. A payload is received at a voted principal from the client. The voted principal is selected from the plurality of minors. The payload is passed to the minors, and the user is verified by a consensus of the minors. A response packet, which includes an authentication unit, is prepared via a consensus of minors. The response packet can be provided to the client via the voted principal. The ledger is updated to include the authentication unit.