Decentralized Gateway Access Control Using Ledger-Validated Credentials

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing identity and access management systems in computer networks lack efficient, cost-effective, and versatile solutions for user authentication and authorization, particularly when managing access across multiple authority systems, often requiring extensive custom code and centralized credential management.

Innovation Solution

A decentralized gateway computing system interacts with a distributed ledger to validate user credentials, using self-sovereign identity credentials, reducing the need for diverse protocols and enabling efficient, secure authentication and authorization across networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If existing gateways are used for authentication, then traffic can be proxied to the server, but authentication support is minimal or non-existent requiring custom code

Engineering Contradiction:

Improveauthentication supportVSAvoidcustom code requirement

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The gateway computing system is designed to perform multiple functions: it acts as a reverse proxy for traffic routing while simultaneously providing authentication and authorization services. The system validates credentials against distributed ledgers and manages access policies, making it a universal platform that eliminates the need for separate authentication systems or extensive custom coding.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The gateway computing system serves as an intermediary between users and servers, intercepting requests, validating credentials through distributed ledger technology, and managing authorization. This intermediary role allows the system to handle authentication centrally without requiring custom code at the server or client level.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If centralized credential management is used, then access can be controlled within a single authority system, but managing permissions across multiple authority systems becomes inefficient

Engineering Contradiction:

Improvecredential management efficiencyVSAvoidcross-authority access support

Core Design Contradiction:

ProductivityVSAdaptability or versatility

Solution Approach 1:

The system merges multiple distributed ledgers representing different authority systems into a unified validation framework. The gateway computing system can validate credentials from multiple authorities simultaneously by querying their respective distributed ledgers, enabling efficient cross-authority access management without requiring separate credential validation processes for each authority.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The gateway computing system provides universal credential validation capability that works across multiple authority systems. It can authenticate credentials from different distributed ledgers using a consistent validation process, making it adaptable to cross-authority scenarios while maintaining efficient credential management.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Ease of operation

If existing gateways are used, then traffic proxying is provided, but authentication and authorization require server handling increasing server load

Engineering Contradiction:

Improvetraffic proxyingVSAvoidserver processing load

Core Design Contradiction:

Ease of operationVSPower

Solution Approach 1:

The authentication and authorization functions are extracted from the server and relocated to the gateway computing system. The gateway validates credentials against distributed ledgers and handles authorization decisions before requests reach the server, significantly reducing server processing load while maintaining ease of traffic proxying operations.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The gateway computing system performs authentication and authorization actions preliminary to server processing. By validating credentials and establishing user permissions before requests reach the server, the system reduces the computational burden on servers while maintaining smooth traffic proxying functionality.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS20250392597A1Identity and access management using a decentralized gateway computing system

Publication Date: 2025.12.25 THE BOEING CO

AI summary

An example method is performed by one or more processors of a gateway computing system. The method includes receiving, from a user computing system, a request to access a software application hosted on a server with which the gateway computing system is in communication. The method also includes in response to receiving the request, communicating with the user computing system to obtain a credential for the software application issued to a user of the user computing system. The method also includes comparing the credential to credential data stored on a distributed ledger to determine whether the credential meets a set of conditions. The method also includes in response to determining that the credential meets the set of conditions, establishing an authorized session between the user computing system and the server such that communication between the user computing system and the server passes through the gateway computing system.