IP Library Granted Patent US 11,558,177
Granted Patent B2
US 11,558,177 · App. 16/239,359 · Granted Jan 17, 2023

Block chain permission control method, device, and node apparatus

Inventors: Hui Xie (Shanghai, CN); Jian Wang (Shanghai, CN)
Assignee: CLOUDMINDS ROBOTICS CO., LTD.
H04L9/0637G06Q20/065G06Q20/382H04L9/30H04L9/3239H04L9/3247H04L67/104H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,558,177
App. No.
16/239,359
Granted
Jan 17, 2023
Kind
B2
Abstract

The present disclosure discloses a method, device and node apparatus for blockchain permission control. The method comprises: receiving target information sent by a node apparatus; acquiring an account address of a configured account of the node apparatus; acquiring, according to the account address, from a predetermined block stored with the account address and an account permission corresponding to the account address, the account permission corresponding to the account address; and processing the target information according to the account permission accordingly. In the present disclosure, node apparatuses are configured with corresponding accounts, and performing permission control on the accounts can restrict permissions of different node apparatuses so as to ensure security and privacy of blockchain data.

Claims (113)

1. A method for blockchain permission control, comprising:

receiving target information sent by a node apparatus;

acquiring an account address of a configured account of the node apparatus;

acquiring, according to the account address, from a predetermined block stored with the account address and an account permission corresponding to the account address, the account permission corresponding to the account address; and

processing the target information according to the account permission accordingly, and

wherein the target information is a network connection request, and the network connection request comprises: a public key of the configured account of the node apparatus;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address of the configured account according to the public key, and

wherein the step of processing the target information according to the account permission accordingly comprises:

in the case the permission corresponding to the account address comprises a network connection, sending an authentication request to the node apparatus, wherein the authentication request at least includes an authentication code;

receiving a signature on the authentication code using a private key corresponding to the account address of the configured account of the node apparatus;

verifying the signature according to a public key corresponding to the account address; and

when the verification of the signature passes, establishing a network connection with the node apparatus, and

wherein the target information is a block created by the node apparatus, and a block header of the block comprises a field for recording a public key and a signature of block header data;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address according to the public key in the block header of the block.

2. The method according to claim 1 , further comprising:

receiving an account address of a configured account sent by the node apparatus;

allocating an account permission for the configured account; and

issuing to a blockchain network a transaction including the account address and the account permission of the configured account, the transaction being used for storing the account address and the account permission of the configured account of the node apparatus to the predetermined block.

3. The method according to claim 1 , wherein the target information is a transaction;

the step of processing the target information according to the account permission accordingly comprises:

forwarding and storing the received transaction in the case the account permission of the configured account of the node apparatus comprises generating a transaction.

4. The method according to claim 1 , wherein the target information is a transfer transaction, and the transfer transaction at least comprises an account address of a receiver account;

the step of processing the target information according to the account permission accordingly comprises:

acquiring, according to the account address of the receiver account, from a block stored with a correspondence between the account address and an account permission of the receiver account, the account permission corresponding to the account address of the receiver account in the case the account permission of the configured account of the node apparatus comprises initiating a transfer; and

forwarding and storing the transfer transaction in the case the account permission corresponding to the account address of the receiver account comprises receiving a transfer.

5. The method according to claim 1 , wherein the step of processing the target information according to the account permission accordingly comprises:

forwarding and storing the received block in the case the account permission of the configured account of the node apparatus comprises generating a block.

6. A method for blockchain permission control, applied to a node apparatus in a blockchain network, comprising:

acquiring an account address of a configured account when receiving a transaction generation request;

acquiring, according to the account address, from a block stored with a correspondence between account addresses and account permissions, an account permission corresponding to the account address; and

generating and sending a transaction in the case the account permission comprises a permission of generating a transaction, and

wherein a target information is a network connection request, and the network connection request comprises: a public key of the configured account of the node apparatus;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address of the configured account according to the public key, and

wherein processing a target information according to the account permission accordingly comprises:

in the case the permission corresponding to the account address comprises a network connection, sending an authentication request to the node apparatus, wherein the authentication request at least includes an authentication code;

receiving a signature on the authentication code using a private key corresponding to the account address of the configured account of the node apparatus;

verifying the signature according to a public key corresponding to the account address; and

when the verification of the signature passes, establishing a network connection with the node apparatus, and

wherein the target information is a block created by the node apparatus, and a block header of the block comprises a field for recording a public key and a signature of block header data;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address according to the public key in the block header of the block.

7. The method according to claim 6 , wherein the transaction is a transfer transaction; and the step of generating and sending a transaction in the case the account permission comprises a permission of generating a transaction comprises:

acquiring, according to an account address of a receiver account, from a block stored with a correspondence between the account address and an account permission of the receiver account, the account permission corresponding to the account address of the receiver account in the case the account permission comprises generating a transaction; and

generating and sending the transfer transaction in the case the account permission of the receiver account comprises receiving a transfer.

8. A non-transitory computer readable storage medium, comprising one or more programs for performing a method for blockchain permission control comprising:

receiving target information sent by a node apparatus;

acquiring an account address of a configured account of the node apparatus;

acquiring, according to the account address, from a predetermined block stored with the account address and an account permission corresponding to the account address, the account permission corresponding to the account address; and

processing the target information according to the account permission accordingly, and

wherein the target information is a network connection request, and the network connection request comprises: a public key of the configured account of the node apparatus;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address of the configured account according to the public key, and

wherein the step of processing the target information according to the account permission accordingly comprises:

in the case the permission corresponding to the account address comprises a network connection, sending an authentication request to the node apparatus, wherein the authentication request at least includes an authentication code;

receiving a signature on the authentication code using a private key corresponding to the account address of the configured account of the node apparatus;

verifying the signature according to a public key corresponding to the account address; and

when the verification of the signature passes, establishing a network connection with the node apparatus, and

wherein the target information is a block created by the node apparatus, and a block header of the block comprises a field for recording a public key and a signature of block header data;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address according to the public key in the block header of the block.

9. A node apparatus, comprising:

a storage storing computer program; and

one or more hardware processors configured to execute the program in the storage to perform a method for blockchain permission control comprising:

receiving target information sent by a node apparatus;

acquiring an account address of a configured account of the node apparatus;

acquiring, according to the account address, from a predetermined block stored with the account address and an account permission corresponding to the account address, the account permission corresponding to the account address; and

processing the target information according to the account permission accordingly, and

wherein the target information is a network connection request, and the network connection request comprises: a public key of the configured account of the node apparatus;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address of the configured account according to the public key, and

wherein the step of processing the target information according to the account permission accordingly comprises:

in the case the permission corresponding to the account address comprises a network connection, sending an authentication request to the node apparatus, wherein the authentication request at least includes an authentication code;

receiving a signature on the authentication code using a private key corresponding to the account address of the configured account of the node apparatus;

verifying the signature according to a public key corresponding to the account address; and

when the verification of the signature passes, establishing a network connection with the node apparatus, and

wherein the target information is a block created by the node apparatus, and a block header of the block comprises a field for recording a public key and a signature of block header data;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address according to the public key in the block header of the block.

10. A non-transitory computer readable storage medium, comprising one or more programs for performing a method for blockchain permission control comprising:

acquiring an account address of a configured account when receiving a transaction generation request;

acquiring, according to the account address, from a block stored with a correspondence between account addresses and account permissions, an account permission corresponding to the account address; and

generating and sending a transaction in the case the account permission comprises a permission of generating a transaction, and

wherein a target information is a network connection request, and the network connection request comprises: a public key of the configured account of the node apparatus;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address of the configured account according to the public key, and

wherein processing the target information according to the account permission accordingly comprises:

in the case the permission corresponding to the account address comprises a network connection, sending an authentication request to the node apparatus, wherein the authentication request at least includes an authentication code;

receiving a signature on the authentication code using a private key corresponding to the account address of the configured account of the node apparatus;

verifying the signature according to a public key corresponding to the account address; and

when the verification of the signature passes, establishing a network connection with the node apparatus, and

wherein the target information is a block created by the node apparatus, and a block header of the block comprises a field for recording a public key and a signature of block header data;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address according to the public key in the block header of the block.

11. A node apparatus, comprising:

a storage storing computer program; and

one or more hardware processors configured to execute the program in the storage to perform a method for blockchain permission control comprising:

acquiring an account address of a configured account when receiving a transaction generation request;

acquiring, according to the account address, from a block stored with a correspondence between account addresses and account permissions, an account permission corresponding to the account address; and

generating and sending a transaction in the case the account permission comprises a permission of generating a transaction, and

wherein a target information is a network connection request, and the network connection request comprises: a public key of the configured account of the node apparatus;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address of the configured account according to the public key, and

wherein processing the target information according to the account permission accordingly comprises:

in the case the permission corresponding to the account address comprises a network connection, sending an authentication request to the node apparatus, wherein the authentication request at least includes an authentication code;

receiving a signature on the authentication code using a private key corresponding to the account address of the configured account of the node apparatus;

verifying the signature according to a public key corresponding to the account address; and

when the verification of the signature passes, establishing a network connection with the node apparatus, and

wherein the target information is a block created by the node apparatus, and a block header of the block comprises a field for recording a public key and a signature of block header data;

the step of acquiring an account address of a configured account of the node apparatus comprises:

acquiring the account address according to the public key in the block header of the block.

Assignments (5)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 23, 2026
From: DATAA ROBOTICS (ANJI) CO., LTD.
To: CHONGQING XINGJIE SHUXING TECHNOLOGY PARTNERSHIP ENTERPRISE (LIMITED PARTNERSHIP)
Reel/Frame 074153/0627 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 21, 2025
From: CLOUDMINDS ROBOTICS CO., LTD.
To: DATAA ROBOTICS (ANJI) CO., LTD.
Reel/Frame 072089/0001 →
CHANGE OF NAME Recorded May 23, 2022
From: CLOUDMINDS (SHANGHAI) ROBOTICS CO., LTD.
To: CLOUDMINDS ROBOTICS CO., LTD.
Reel/Frame 060164/0372 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 26, 2021
From: CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD.
To: CLOUDMINDS (SHANGHAI) ROBOTICS CO., LTD.
Reel/Frame 055437/0860 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 8, 2019
From: XIE, HUI; WANG, JIAN
To: CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD.
Reel/Frame 047935/0209 →
Continuity (2)
Continuation PCTCN2016113739 · Dec 30, 2016
Related Publication 20190140822A1 · May 9, 2019