R-TBAC Permission Model for Big-Data Blockchain Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access control models for big-data blockchains face challenges in managing complex and diverse application scenarios, leading to low access authorization accuracy, inefficient permission management, and insufficient data security due to overlapping identity information and multi-dimensional resource interactions.
Innovation Solution
A permission management method and system that classify system resources into user-role, data, and node resources, utilizing a Role-Task-Based Access Control (R-TBAC) model to monitor user behavior, detect role and task-operating permissions, and manage access through RBAC and TBAC modules, ensuring authorized operations and optimizing access processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional access control models are used in big-data blockchain, then implementation is simple, but access authorization accuracy is low and permission management efficiency is poor
Solution Approach 1:
The patent segments the access control model into three distinct modules: RBAC (Role-Based Access Control) for user role management, ABAC (Attribute-Based Access Control) for resource attribute management, and TBAC (Task-Based Access Control) for operation task management. This segmentation allows each module to specialize in specific aspects of access control, improving authorization accuracy while maintaining manageable complexity through modular architecture.
Solution Approach 2:
The patent creates a composite access control model (RATBAC) that integrates three different access control theories (RBAC, ABAC, and TBAC). This composite model combines the strengths of each individual model: RBAC's role-based permissions, ABAC's attribute-based flexibility, and TBAC's task-based control, resulting in a comprehensive solution that achieves high authorization accuracy for complex blockchain scenarios.
2Productivity
If traditional access control models are used in big-data blockchain, then implementation is simple, but permission management efficiency is low
Solution Approach 1:
The patent segments permission management into three specialized modules (RBAC for user roles, ABAC for resource attributes, TBAC for tasks), allowing parallel processing and specialized optimization of each module. This segmentation improves permission management efficiency by enabling independent validation of user credentials, resource attributes, and task requirements without sequential bottlenecks.
Solution Approach 2:
The system performs preliminary classification and tagging of resources with attributes, pre-establishes user roles and permissions, and pre-defines task requirements before actual access requests occur. This preliminary action reduces the computational burden during runtime permission validation, significantly improving permission management efficiency in dynamic blockchain environments.
3Reliability
If overlapping identity information is allowed, then user flexibility is high, but data security is insufficient
Solution Approach 1:
The patent applies different security validation rules to different aspects of identity management locally. The RBAC module enforces strict role-based permissions for sensitive operations, while the ABAC module provides flexible attribute-based access for less critical resources. This local differentiation of security policies maintains data security for critical operations while preserving user flexibility for non-critical access scenarios.
Solution Approach 2:
The composite RATBAC model integrates multiple access control theories that work together to balance security and flexibility. RBAC provides a strong security foundation with role-based restrictions, while ABAC adds flexible attribute-based permissions that can adapt to various user needs. The combination allows overlapping identities to coexist with enhanced security through multi-layered validation.
4Adaptability or versatility
If multi-dimensional resource interactions are supported, then system versatility is high, but access control coverage is insufficient
Solution Approach 1:
The patent adds a new dimension to access control by introducing attribute-based validation (ABAC) alongside traditional role-based (RBAC) and task-based (TBAC) control. This additional dimension allows the system to handle multi-dimensional resource interactions comprehensively, covering not only user roles and tasks but also resource attributes, providing thorough access control coverage for complex blockchain resource scenarios.
Solution Approach 2:
The integrated RATBAC model combines three different access control theories to create a composite solution that covers multiple dimensions of resource interactions. RBAC covers user role dimensions, ABAC covers resource attribute dimensions, and TBAC covers operation task dimensions, together providing comprehensive access control coverage for versatile blockchain applications.
Data Source
AI summary
A permission management method for a trustworthiness mechanism of a big-data blockchain includes: dividing system resources into user-role resources, data resources and node resources; acquiring a current role of a user based on a RBAC module in a R-TBAC model, and acquiring an operating-permission-value range of the current role; monitoring an operating behavior of the user in an operating system, and, based on the RBAC module and according to the operating-permission-value range of the current role, detecting whether the current role of the user has a role-operating permission for the operation; detecting a task-operating permission of the contract instance or task instance based on a TBAC module in the R-TBAC model during running of the contract instance or task instance; and completing, by the user, the operation in an authorized operating permission range based on the R-TBAC model.