Weighted Multiple Authorization for Distributed Ledger Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current distributed ledger systems often require single-authority signatures for transactions, which may not provide sufficient security for complex or high-stakes operations, and multi-signature authorizations are limited in flexibility and security.
Innovation Solution
The Weighted Multiple Authorization (WMA) system confirms authorization based on combined authority weights, allowing for multiple signatures with varying weights to satisfy a threshold weight, enabling flexible and secure authorization specifications that can include different authority weights and techniques, such as private/public key pairs, security tokens, and physical keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If single-authority signatures are used for transactions, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent combines multiple authority signatures into a single transaction authorization mechanism. The system requires signatures from multiple authorities (e.g., account manager, compliance officer, risk manager) to be collected and combined in a single transaction, merging their individual authorization powers into a unified security approval process that maintains both security and operational efficiency.
Solution Approach 2:
The patent creates a universal authorization framework that can accommodate different types of authorities (account managers, compliance officers, risk managers) and different authorization scenarios (standard transactions, high-risk transactions, cross-border transactions) through a single multi-signature system, making the security mechanism adaptable to various operational needs without requiring separate systems.
2Reliability
If traditional multi-signature authorizations are used, then security is improved, but flexibility and adaptability are worsened
Solution Approach 1:
The patent implements a dynamic authorization system where the number of required signatures, the identities of authorized signatories, and the weight of each signature can be configured and changed based on transaction characteristics. For example, standard transactions may require 2 out of 3 signatures while high-risk transactions require all 3 signatures, allowing the security requirements to adapt dynamically to different operational contexts.
Solution Approach 2:
The patent changes the parameters of authorization by introducing weighted signatures where different authorities can have different weights (e.g., account manager = 1, compliance officer = 2, risk manager = 3). This allows the system to adjust security requirements by changing numerical parameters (weights and thresholds) rather than restructuring the entire authorization framework, providing flexibility while maintaining security.
3Adaptability or versatility
If weighted multiple authorizations are implemented, then security and flexibility are improved, but device complexity is worsened
Solution Approach 1:
The patent uses a nested structure where the multi-signature authorization system is embedded within the existing blockchain transaction framework. The weighted signature verification logic is nested within the smart contract execution environment, and the authority hierarchy is nested with parent-child relationships that can be recursively validated. This nesting allows the complex authorization logic to be contained within modular layers rather than requiring a complete system redesign.
Solution Approach 2:
The patent introduces intermediary components such as the multi-signature wallet service and authority verification service that mediate between the transaction initiator and the blockchain network. These intermediaries handle the complex logic of collecting signatures, verifying authority weights, and determining threshold satisfaction, thereby isolating the complexity from the core blockchain protocol and making the system more manageable and maintainable.
Data Source
AI summary
A system for confirming an authorization to consume an output of a transaction based on multiple signatures with different authority weights is provided. The system confirms the authorization to consume the output when the combined authority weights of one or more authorities that provide their authorizations satisfy a threshold weight. The authority weight for each authority and the threshold weight are identified in an authorization specification that specifies the criterion for the authorization of a matter. The authorization specification also specifies authorization verification information for each authority. When the sum of the authority weights of the authorities whose authorizations have been verified is greater than or equal to the threshold weight, the system confirms the authorization to consume the output.