Smart Contract Asset Permission Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing asset management systems in blockchain technology lack secure control over status updates, allowing new holders without permission to make improper changes to asset objects during multiple transfers, compromising security.
Innovation Solution
Implementing a method where only the publisher or designated users with update permission can perform status updates on asset objects by verifying user permissions through smart contracts, ensuring that only authorized users can invoke execution programs for updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If permission verification through smart contracts is implemented, then security is improved, but device complexity increases
Solution Approach 1:
A smart contract object is introduced as an intermediary between users and asset objects. The smart contract contains the authorization logic and user lists, mediating access control without requiring complex permission management in the asset object itself. This separates concerns and improves security while managing complexity through modular design.
Solution Approach 2:
The smart contract object is created in advance with predefined user lists and authorization rules before asset transfers occur. Permission verification is pre-configured, allowing rapid validation during asset operations without complex runtime decision-making. This preliminary setup enhances security while keeping the execution path simple.
2Reliability
If status update permissions are strictly controlled, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The smart contract object automatically manages permission verification without requiring manual intervention. When a user initiates a status update, the system self-verifies authorization by checking the user list in the smart contract, and either permits or denies the operation automatically. This maintains strict security control while preserving operational ease through automation.
Solution Approach 2:
The system provides immediate feedback on authorization status during asset operations. When a user attempts to update asset status, the smart contract instantly verifies permission and returns a clear result (success or failure). This rapid feedback loop maintains security while keeping the interaction simple and intuitive for users.
Data Source
AI summary
This specification describes techniques for managing assets in a blockchain. One example method includes receiving, from a target user recorded in a distributed database of a blockchain network, a user input including a request to update a status of a target object, determining, based on a contract object, whether the target user is a member user with an update permission for the target object, the contract object being published in the blockchain network and corresponding to an asset type of the target object, wherein the target object was created using the contract object, and in response to determining that the target user has the update permission for the target object, performing a status update on the target object by using the contract object.