Method and system for authority management based on blockchain

Abstract

The present invention relates to the technical field of networks, and discloses a method and a system for authority management based on a blockchain. The method comprises the steps that: each user generates respective mutually independent user secret keys by himself; the internal portion of an authorization server forms different role secret keys according to the high-low authorities correspondingto roles which the external users plays; an initiator user logs in the authorization server and uses his own user private keys and the role private keys corresponding to the user to create authorization transaction with another user; or, the initiator user uses his own role private keys to perform transaction and unlock the confirmed authorization transaction so as to create transaction with himself and form ex-right transaction with another user; the authorization server needs to verify digital signature information of the user who creates the transaction; and the forms of the user creatingthe transaction are recorded in a blockchain. The problems are solved that system centralization causes that performances and safety highly depend on a central processing unit, the authority information is not enough to be disclosed and transparent and both rights cannot be ensured at the same time in a traditional management and control system.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a block chain-based authority management method and system. Background technique [0002] In information management systems (such as internal process management systems, approval systems, etc.), in order to improve system security and business requirements in system application scenarios, it is necessary to control the permissions of participating roles. [0003] The existing technology is to set the permissions of the roles in the data and store the set permissions in the database. For example, different "persons" are represented by different fields in the database, and different values ​​of the fields represent different permissions. In order to achieve rights management. [0004] However, in some scenarios where the security requirements are high and the network status is unstable, the technical solutions provided by the prior art can easily lead to loss of authorit...

AI Technical Summary

Problems solved by technology

[0004] However, in some scenarios where the security requirements are high and the network status is unstable, the technical solutions provided by the prior art can easily lead to loss of authority control when the database is attacked, and this method is highly dependent on the database. Will increase the maintenance cost of the system

Images