Multi-subject device access authorization
An example operation may include one or more one or more of receiving two or more authorization decisions from two or more authorization entities into a blockchain system, recording the two or more authorization decisions into one or more blocks of a blockchain of the blockchain system, determining, by the blockchain system, whether the two or more authorization decisions satisfy a policy to authorize access to at least one of a device or identifiable content on the device, and when the two or more authorization decisions satisfy the policy, authorizing access to a public key that can be used to gain access to the device.
1. A blockchain in a blockchain network, the blockchain comprising:
a hardware-implemented processor that executes one or more instructions stored in an associated memory to configure the processor to:
receive a request to access a device from a requestor, the request including identification information;
distribute the request to a plurality of authorization entities in the blockchain network;
receive authorization decisions from a number of authorization entities of the plurality of authorization entities;
store the authorization decisions in one or more blocks of the blockchain; and
identify that the authorization decisions satisfy an authorization policy of the blockchain;
store the identification information and evidence supporting the identification that the authorization decisions satisfy the authorization policy of the blockchain:
send an authorization trigger to a security vault to release a public key; and
send the public key to access the device to the requestor based on the identification that the authorization decisions satisfy the authorization policy.
2. The blockchain of claim 1 , wherein the hardware-implemented processor is further configured to:
store the request in the blockchain.
3. The blockchain of claim 1 , wherein store the public key in a block of the blockchain.
4. The blockchain of claim 1 , wherein the policy is implemented in chaincode of the blockchain.
5. The blockchain of claim 1 , the hardware-implemented processor is further configured to:
receive secure content from the device using the public key; and
store the secure content in the blockchain.
6. A method comprising:
receiving, via a processor of a blockchain, a request to access a device from a requestor;
distributing, via the processor, the request to a plurality of authorization entities in the blockchain network;
receiving, via the processor, authorization decisions a number of authorization entities of the plurality of authorization entities;
storing, via the processor, the authorization decisions in one or more blocks of the blockchain;
identifying, via the processor, that the authorization decisions satisfy an authorization policy of the blockchain;
storing, via the processor, the identification information and evidence supporting the identifying that the authorization decisions satisfy an authorization policy of the blockchain;
sending, via the processor, an authorization trigger to a security vault to release a public key; and
sending, via the processor, the public key to access a device to the requestor based on the identification that the authorization decisions satisfy the authorization policy.
7. The method of claim 6 , comprising:
storing the access request in the blockchain.
8. The method of claim 6 , comprising:
storing the public key in a block of the blockchain.
9. The method of claim 6 , wherein the policy is implemented in chaincode of the blockchain.
10. The method of claim 6 , comprising:
receiving secure content from the device using the public key; and
storing the secure content in the blockchain.
11. A non-transitory computer readable medium comprising one or more instructions that when executed by a processor of a blockchain in a blockchain network cause the processor to perform:
receiving a request to access a device from a requestor;
distributing the request to a plurality of authorization entities in the blockchain network;
receiving authorization decisions a number of authorization entities of the plurality of authorization entities;
storing the authorization decisions in one or more blocks of the blockchain;
identifying that the authorization decisions satisfy an authorization policy of the blockchain;
storing the identification information and evidence supporting the identifying that the authorization decisions satisfy an authorization policy of the blockchain;
sending an authorization trigger to a security vault to release a public key; and
sending the public key to access a device to the requestor based on the identification that the authorization decisions satisfy the authorization policy.
12. The non-transitory computer readable medium of claim 11 , wherein the one or more instructions further cause the processor to perform:
storing the access request in the blockchain.
13. The non-transitory computer readable medium of claim 11 , wherein the one or more instructions further cause the processor to perform:
storing the public key in a block of the blockchain.
14. The non-transitory computer readable medium of claim 11 , wherein the policy is implemented in chaincode of the blockchain.