IP Library Granted Patent US 10,789,376
Granted Patent B2
US 10,789,376 · App. 16/805,649 · Granted Sep 29, 2020

Blockchain authorization

Inventors: Wenyuan Yan (Hangzhou, CN); Xinying Yang (Hangzhou, CN); Yuan Zhang (Hangzhou, CN); Yize Li (Hangzhou, CN); Benquan Yu (Hangzhou, CN)
Assignee: Alibaba Group Holding Limited
G06F21/604G06F16/27G06F21/6227H04L9/30H04L9/3236H04L2209/38
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,789,376
App. No.
16/805,649
Granted
Sep 29, 2020
Kind
B2
Abstract

A computer-implemented method includes: receiving, by a server storing one or more blockchain ledgers, an authorization request from a client, in which the authorization request includes a service end identifier and a user identifier; generating, based on the authorization request, a database authorization instruction corresponding to the authorization request and a ledger identifier corresponding to the authorization request; authorizing a service end corresponding to the service end identifier as a user in a blockchain ledger corresponding to the ledger identifier; configuring a permission value of the user in the blockchain ledger, in which the permission value determines a degree to which the service end can operate the blockchain ledger; and sending authorization information including the user identifier and the ledger identifier to the service end.

Claims (63)

1. A computer-implemented method comprising:

receiving, by a server storing one or more blockchain ledgers, an authorization request from a client, wherein the authorization request comprises a service end identifier and a user identifier;

generating, based on the authorization request, a database authorization instruction corresponding to the authorization request and a ledger identifier corresponding to the authorization request;

authorizing a service end corresponding to the service end identifier as a user in a blockchain ledger corresponding to the ledger identifier;

configuring a permission value of the user in the blockchain ledger, wherein the permission value determines a degree to which the service end can operate the blockchain ledger;

sending authorization information comprising the user identifier and the ledger identifier to the service end;

receiving, by the server, a de-authorization request from the client, wherein the de-authorization request comprises a second service end identifier and a second user identifier;

determining a database de-authorization instruction based on the de-authorization request and a second ledger identifier based on the de-authorization request;

cancelling, in a second blockchain ledger corresponding to the second ledger identifier, operation permissions of a second service end corresponding to the second service end identifier; and

sending, to the second service end, de-authorization information comprising the second user identifier and the second ledger identifier.

2. The computer-implemented method of claim 1 , wherein configuring the permission value of the user comprises:

obtaining, by the server, public key information of the service end; and

writing the public key information of the service end into a permission configuration file corresponding to the blockchain ledger.

3. The computer-implemented method of claim 1 , further comprising:

generating a first data record comprising the database authorization instruction; and

writing the first data record into the blockchain ledger corresponding to the ledger identifier.

4. The computer-implemented method of claim 3 , further comprising obtaining public key information of the service end,

wherein the first data record comprises the public key information of the service end.

5. The computer-implemented method of claim 3 , further comprising:

sending a hash value of the first data record to the client and to the service end.

6. The computer-implemented method of claim 1 , wherein, responsive to the authorization information being received by the service end, a mapping relationship between the user identifier and the ledger identifier is written into an operable ledger list stored at the service end.

7. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

receiving, by a server storing one or more blockchain ledgers, an authorization request from a client, wherein the authorization request comprises a service end identifier and a user identifier;

generating, based on the authorization request, a database authorization instruction corresponding to the authorization request and a ledger identifier corresponding to the authorization request;

authorizing a service end corresponding to the service end identifier as a user in a blockchain ledger corresponding to the ledger identifier;

configuring a permission value of the user in the blockchain ledger, wherein the permission value determines a degree to which the service end can operate the blockchain ledger;

sending authorization information comprising the user identifier and the ledger identifier to the service end;

receiving, by the server, a de-authorization request from the client, wherein the de-authorization request comprises a second service end identifier and a second user identifier;

determining a database de-authorization instruction based on the de-authorization request and a second ledger identifier based on the de-authorization request;

cancelling, in a second blockchain ledger corresponding to the second ledger identifier, operation permissions of a second service end corresponding to the second service end identifier; and

sending, to the second service end, de-authorization information comprising the second user identifier and the second ledger identifier.

8. The computer-readable medium of claim 7 , wherein configuring the permission value of the user comprises:

obtaining, by the server, public key information of the service end; and

writing the public key information of the service end into a permission configuration file corresponding to the blockchain ledger.

9. The computer-readable medium of claim 7 , wherein the operations further comprise:

generating a first data record comprising the database authorization instruction; and

writing the first data record into the blockchain ledger corresponding to the ledger identifier.

10. The computer-readable medium of claim 9 , wherein the operations further comprise obtaining public key information of the service end, and

wherein the first data record comprises the public key information of the service end.

11. The computer-readable medium of claim 9 , wherein the operations further comprise:

sending a hash value of the first data record to the client and to the service end.

12. The computer-readable medium of claim 7 , wherein, responsive to the authorization information being received by the service end, a mapping relationship between the user identifier and the ledger identifier is written into an operable ledger list stored at the service end.

13. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:

receiving, by a server storing one or more blockchain ledgers, an authorization request from a client, wherein the authorization request comprises a service end identifier and a user identifier;

generating, based on the authorization request, a database authorization instruction corresponding to the authorization request and a ledger identifier corresponding to the authorization request;

authorizing a service end corresponding to the service end identifier as a user in a blockchain ledger corresponding to the ledger identifier;

configuring a permission value of the user in the blockchain ledger, wherein the permission value determines a degree to which the service end can operate the blockchain ledger;

sending authorization information comprising the user identifier and the ledger identifier to the service end;

receiving, by the server, a de-authorization request from the client, wherein the de-authorization request comprises a second service end identifier and a second user identifier;

determining a database de-authorization instruction based on the de-authorization request and a second ledger identifier based on the de-authorization request;

cancelling, in a second blockchain ledger corresponding to the second ledger identifier, operation permissions of a second service end corresponding to the second service end identifier; and

sending, to the second service end, de-authorization information comprising the second user identifier and the second ledger identifier.

14. The computer-implemented system of claim 13 , wherein configuring the permission value of the user comprises:

obtaining, by the server, public key information of the service end; and

writing the public key information of the service end into a permission configuration file corresponding to the blockchain ledger.

15. The computer-implemented system of claim 13 , wherein the operations further comprise:

generating a first data record comprising the database authorization instruction; and

writing the first data record into the blockchain ledger corresponding to the ledger identifier.

16. The computer-implemented system of claim 15 , wherein the operations further comprise obtaining public key information of the service end, and

wherein the first data record comprises the public key information of the service end.

17. The computer-implemented system of claim 13 , wherein, responsive to the authorization information being received by the service end, a mapping relationship between the user identifier and the ledger identifier is written into an operable ledger list stored at the service end.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 18, 2025
From: ADVANCED NEW TECHNOLOGIES CO., LTD.
To: ANTCHAIN TECHNOLOGY PTE. LTD.
Reel/Frame 070253/0064 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 10, 2020
From: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
To: ADVANCED NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053754/0625 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 31, 2020
From: ALIBABA GROUP HOLDING LIMITED
To: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053743/0464 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 20, 2020
From: YAN, WENYUAN; YANG, XINYING; ZHANG, YUAN; LI, YIZE; YU, BENQUAN
To: ALIBABA GROUP HOLDING LIMITED
Reel/Frame 052445/0107 →
Priority Claims (1)
CN 2019 1 0579351 · Jun 28, 2019 · national
Continuity (2)
Continuation PCTCN2020072062 · Jan 14, 2020
Related Publication 20200202016A1 · Jun 25, 2020