Distributed Ledger Permissions for Fine-Grained User Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain systems, particularly private ones, lack effective mechanisms for users to control access to their data in a fine-grained manner, leading to potential exposure of user data inconsistent with the user's desires.
Innovation Solution
Implement mechanisms in a distributed ledger trust network (DLTN) that allow users to set and manage permissions for accessing their data based on categories and roles, with expiration options, enabling selective granting or revoking of access through protocols and channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a private blockchain is used to store user data, then data security and access control are improved, but users lack fine-grained control over who can access their specific data categories
Solution Approach 1:
The patent segments user data into different categories (e.g., personal information, financial data, health records) and implements separate permission controls for each category. Users can grant or revoke access to specific data categories independently, enabling fine-grained control while maintaining the security benefits of private blockchain storage.
Solution Approach 2:
The patent implements dynamic permission management where users can update their access preferences at any time. The system allows users to grant temporary or permanent access, revoke permissions, and modify which users or user roles can access specific data categories, making the access control mechanism adaptable to changing user needs.
2Device complexity
If users have limited options for controlling access to their data, then system complexity is reduced, but user data exposure becomes inconsistent with user desires
Solution Approach 1:
The patent implements preliminary action by providing users with default permission settings and pre-configured access control policies when they first join the system. Users can set up their preferred access rules in advance before any data sharing occurs, allowing them to proactively control their data exposure without requiring complex real-time decisions.
Solution Approach 2:
The patent enables self-service permission management where users can independently configure their own access controls, view who has access to their data, and modify permissions without requiring system administrator intervention. This empowers users to manage their own data privacy while keeping the system relatively simple.
3Adaptability or versatility
If fine-grained permission control is implemented, then user data control is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal permission management system that handles multiple data categories, user roles, and access scenarios through a single integrated framework. The same permission infrastructure supports different types of users (individuals, organizations), different data categories, and various access patterns (temporary, permanent, conditional), reducing overall system complexity despite the fine-grained control capabilities.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Mechanisms to manage permissions to access user data in a distributed ledger trust network ("DLTN") are described. A given user can share access to user data in a fine-grained way. Access to user data can depend on the category of the user data and/or the role of another user (e.g., whether the other user is recognized as a connection). Access to user data can be limited in duration. Permissions to access user data can be set proactively or reactively. A protocol allows a potential reviewer to request access to the user data of a given user, with the given user selectively approving or rejecting access by the reviewer. In this way, a given user can control access to user data in the DLTN, selectively granting (or revoking) access to some of the user data or all of the user data, by selected other users or by all other users.