Proxy Access Control Protecting Autonomous Blockchain Protocols
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The blockchain ecosystem lacks efficient and secure solutions for extending built-in security to applications after publication, with developers having minimal control over their applications and no means to protect them from malicious attacks.
Innovation Solution
An access control server provides security features and protocols to protect autonomous program protocols on a blockchain, allowing developers to specify access control policies and generate cryptographic signatures for authorization, using a proxy protocol to verify access requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If smart contracts inherit blockchain security capabilities, then the application can run autonomously on the blockchain, but the application lacks various security features to protect from malicious attacks
Solution Approach 1:
The patent introduces an access control protocol as an intermediary layer between the blockchain and the smart contract application. This protocol acts as a mediator that provides enhanced security features including authentication, authorization, and access control policies without changing the underlying blockchain or smart contract code. The protocol intercepts and validates access requests before they reach the smart contract, thereby protecting the application from malicious attacks while maintaining its autonomous operation.
2Extent of automation
If developers have minimal control over applications after publication, then the blockchain maintains decentralization and immutability, but developers cannot protect their applications from malicious attacks
Solution Approach 1:
The patent implements preliminary action by establishing access control policies and authentication mechanisms before the smart contract is deployed and made public on the blockchain. The access control protocol is configured in advance with specific authorization rules, approved addresses, and security policies. This pre-configuration enables the system to automatically enforce security measures and block malicious attacks before they can affect the smart contract, while maintaining the decentralized and immutable nature of the blockchain.
3Ease of operation
If no access control mechanisms are implemented, then the smart contract is fully accessible to all blockchain users, but the application is vulnerable to unauthorized access and malicious attacks
Solution Approach 1:
The patent implements dynamic access control mechanisms that can adaptively adjust authorization levels based on the requester's identity, reputation, and behavior. The access control protocol maintains a dynamic list of approved addresses and permissions, allowing the application owner to grant or revoke access rights as needed. This dynamic approach enables the system to maintain accessibility for legitimate users while simultaneously providing strong security protection against unauthorized access and malicious attacks.
Data Source
AI summary
An access control server may receive, from an access requester, an access request for accessing a protected autonomous program protocol stored on a blockchain. The access control server may analyze parameters related to the access requester to determine whether the access requester is authorized to access the protected autonomous program protocol. An access control server may generate a cryptographic signature associated with the access request. An access control autonomous protocol recorded on the blockchain may receive the cryptographic signature, verify the cryptographic signature, and store proof of authorization in association with the protected autonomous program protocol. The proof of authorization is accessible by the protected autonomous program protocol to verify that the access requester is authorized to access the protected autonomous program protocol.