首页> 外国专利> SYSTEMS, METHODS, AND APPARATUSES FOR IMPLEMENTING A ROLE BASED ACCESS CONTROL AND AUTHORIZATION VALIDATOR VIA BLOCKCHAIN SMART CONTRACT EXECUTION USING DISTRIBUTED LEDGER TECHNOLOGY (DLT)

SYSTEMS, METHODS, AND APPARATUSES FOR IMPLEMENTING A ROLE BASED ACCESS CONTROL AND AUTHORIZATION VALIDATOR VIA BLOCKCHAIN SMART CONTRACT EXECUTION USING DISTRIBUTED LEDGER TECHNOLOGY (DLT)

机译:通过使用区块链智能合约执行(DLT)的区块链智能合约来实施基于角色的访问控制和授权验证器的系统,方法和装置

摘要

Described herein are means for implementing a role based access control and authorization validator via blockchain smart contract execution using Distributed Ledger Technology (DLT) in conjunction with a cloud based computing environment. According to a particular embodiment, there is a system having at least a processor and a memory therein, wherein the system is configurable with means for: operating a blockchain interface to a public blockchain on behalf of a plurality of customers of the host organization, wherein each of the plurality of customers operate as a participating node on the blockchain; executing an API gateway on behalf of the plurality of customers; receiving an API definition from one of the plurality of customers defining at least access permissions for use of the defined API and a plurality of permitted functions for the defined API; transacting a new asset onto the blockchain having embodied therein, metadata representing the API definition and the access permissions for use of the defined API and the plurality of permitted functions for the defined API; intercepting, via the executing API gateway, an API call directed at the defined API; retrieving the metadata from the blockchain; authenticating an API caller associated with the API call based on the access permissions from the retrieved metadata; and forwarding the API call to the appropriate customer pursuant to successful authentication of the API caller. Other related embodiments are disclosed.
机译:本文描述了用于结合基于云的计算环境,使用分布式账本技术(DLT)通过区块链智能合约执行来实现基于角色的访问控制和授权验证器的装置。根据特定实施例,存在一种其中至少具有处理器和存储器的系统,其中,该系统可利用以下装置来配置:代表主机组织的多个客户操作与公共区块链的区块链接口,其中多个客户中的每个客户都充当区块链上的参与节点;代表多个客户执行API网关;从多个客户之一接收API定义,该客户定义至少定义了对所定义的API的使用的访问许可以及所定义的API的多个允许的功能;将新资产交易到在其中体现的区块链上,该元数据表示API定义以及使用定义的API的访问权限以及定义的API的多个允许功能;通过执行的API网关拦截针对所定义的API的API调用;从区块链中检索元数据;基于从检索到的元数据中获得的访问权限,验证与该API调用关联的API调用者;并根据API调用者的成功身份验证将API调用转发给适当的客户。公开了其他相关的实施例。

著录项

  • 公开/公告号US2020344233A1

    专利类型

  • 公开/公告日2020-10-29

    原文格式PDF

  • 申请/专利权人 SALESFORCE.COM INC.;

    申请/专利号US202016777304

  • 申请日2020-01-30

  • 分类号H04L29/06;G06Q20/40;G06Q20/06;H04W4/70;H04L9/06;

  • 国家 US

  • 入库时间 2022-08-21 11:22:31

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号