Accessing secure system resources by low privilege processes
US-2019362066-A1 · Nov 28, 2019 · US
US11546333B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11546333-B2 |
| Application number | US-202117350832-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jun 17, 2021 |
| Priority date | Aug 24, 2020 |
| Publication date | Jan 3, 2023 |
| Grant date | Jan 3, 2023 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based service processing. One of the methods includes receiving a service processing request by a first service processing platform from a first user. The first service processing platform is one of a plurality of service processing platforms that access a blockchain network, and service data of the first user is shared between the plurality of service processing platforms over the blockchain network. In response to a determination that the service processing request involves a second service processing platform of the plurality of service processing platforms, it is determined whether the service processing request is permitted to be executed. In response to determining that the service processing request is permitted to be executed, the service processing request is executed over the blockchain network.
Opening claim text (preview).
What is claimed is: 1. A computer-implemented method, comprising: receiving, by a first service processing platform, a service processing request from a first user, wherein the first service processing platform is one of a plurality of service processing platforms that access a blockchain network, and wherein service data of the first user is shared between the plurality of service processing platforms over the blockchain network, wherein the service processing request comprises a request to process service data of the first user on a second service processing platform of the plurality of service processing platforms; in response to a determination that the service processing request received by the first service processing platform involves the second service processing platform of the plurality of service processing platforms, determining whether the service processing request is permitted to be executed, wherein determining whether the service processing request is permitted to be executed comprises determining whether the first user authorizes processing the service data on the second service processing platform; and in response to determining that the service processing request is permitted to be executed, executing the service processing request over the blockchain network, wherein executing the service processing request comprises: verifying an identity of the first user based on digital identity information comprised in the service processing request; and in response to determining that the first user passes identity verification, processing the service data on the second service processing platform. 2. The computer-implemented method of claim 1 , wherein processing the service data comprises at least one of the following: obtaining the service data of the first user on the second service processing platform; updating the service data of the first user on the second service processing platform; or performing data assessment for the first user based on the service data of the first user on the second service processing platform. 3. The computer-implemented method of claim 2 , wherein processing the service data comprises obtaining the service data of the first user on the second service processing platform, wherein the service processing request comprises digital identity information of the first user, wherein determining whether the service processing request is permitted to be executed comprises: determining whether the first user authorizes the first service processing platform to obtain the service data of the first user on the second service processing platform; and wherein executing the service processing request over the blockchain network comprises: verifying an identity of the first user based on the digital identity information; and in response to determining that the first user passes identity verification, identifying the service data of the first user from service data of users that corresponds to the second service processing platform and that is stored on the blockchain network. 4. The computer-implemented method of claim 2 , wherein processing the service data comprises updating the service data of the first user on the second service processing platform, wherein the service processing request comprises digital identity information of the first user, wherein determining whether the service processing request is permitted to be executed comprises: determining whether the first user authorizes updating the service data on the second service processing platform based on updated service data of the first user on the first service processing platform; and wherein executing the service processing request over the blockchain network comprises: verifying an identity of the first user based on the digital identity information; in response to determining that the first user passes identity verification, uploading the updated service data of the first user on the first service processing platform to the blockchain network; and updating the service data of the first user on the second service processing platform based on the updated service data of the first user on the first service processing platform. 5. The computer-implemented method of claim 2 , wherein processing the service data comprises performing data assessment for the first user based on the service data of the first user on the second service processing platform, wherein the service processing request comprises digital identity information of the first user, wherein determining whether the service processing request is permitted to be executed comprises: determining whether the first user authorizes data assessment to be performed for the first user based on the service data of the first user on the second service processing platform; and wherein executing the service processing request over the blockchain network comprises: verifying an identity of the first user based on the digital identity information; in response to determining that the first user passes identity verification, collecting the service data of the first user on the second service processing platform over the blockchain network, determining a data assessment model to be used for the data assessment for the first user; and performing the data assessment for the first user based on the data assessment model and collected service data of the first user on the second service processing platform. 6. The computer-implemented method of claim 1 , wherein the service processing request comprises digital identity information of the first user, and wherein determining whether the service processing request is permitted to be executed comprises: obtaining identity credential information of the first user on the first service processing platform based on the digital identity information; and determining, based on the identity credential information, whether the first user authorizes execution of the service processing request. 7. The computer-implemented method of claim 1 , further comprising: obtaining service processing response over the blockchain network in response to the service processing request, wherein the service processing response comprises service processing result that is encrypted using a public key of the first user; and sending the service processing response to a first service processing client device, wherein the first service processing client device obtains the service processing result using a private key of the first user in a trusted execution environment. 8. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising: receiving, by the computer system comprising a first service processing platform, a service processing request from a first user, wherein the first service processing platform is one of a plurality of service processing platforms that access a blockchain network, and wherein service data of the first user is shared between the plurality of service processing platforms over the blockchain network, wherein the service processing request comprises a request to process service data of the first user on a second service processing platform of the plurality of service processing platforms; in response to a determination that the service processing request received by the first service processing platform involves the second service processing platform of the plurality of service processing platforms, determining whether the service processing request is permitted to be executed, wherein determining whether the service processing request is permitted to be executed comprises determining whether the first user authorizes processing the service data on the second service proces
Asset management; Financial planning or analysis · CPC title
involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title
using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title
Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title
Optimistic concurrency control · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.