US 12,355,901 B2
Blockchain-based method and system for SDP access control
Junzhi Yan, Beijing (CN); Bo Yang, Beijing (CN); Li Su, Beijing (CN); and Shen He, Beijing (CN)
Assigned to CHINA MOBILE COMMUNICATION CO., LTD RESEARCH INSTITUTE, Beijing (CN); and CHINA MOBILE COMMUNICATIONS GROUP CO., LTD., Beijing (CN)
Appl. No. 18/259,795
Filed by CHINA MOBILE COMMUNICATIONS GROUP CO., LTD., Beijing (CN); and CHINA MOBILE COMMUNICATION CO., LTD RESEARCH INSTITUTE, Beijing (CN)
PCT Filed Dec. 30, 2021, PCT No. PCT/CN2021/143221
§ 371(c)(1), (2) Date Jun. 29, 2023,
PCT Pub. No. WO2022/143935, PCT Pub. Date Jul. 7, 2022.
Claims priority of application No. 202110001453.6 (CN), filed on Jan. 4, 2021.
Prior Publication US 2024/0323037 A1, Sep. 26, 2024
Int. Cl. H04L 29/06 (2006.01); H04L 9/00 (2022.01); H04L 9/32 (2006.01)
CPC H04L 9/3297 (2013.01) [H04L 9/50 (2022.05)] 13 Claims
OG exemplary drawing
 
1. A method for blockchain-based access control of Software Defined Perimeter (SDP), comprising:
transmitting, by an SDP connection accepting host, to-be-verified information to a blockchain system node, the to-be-verified information comprising host information and a supported connection policy of the SDP connection accepting host, so that the to-be-verified information will be verified by the blockchain system node, and be recorded into a blockchain ledger after the verification is successful, wherein the host information of the SDP connection accepting host comprises at least one of: an Internet Protocol (IP) address, a port, or protocol information; and the supported connection policy comprises at least one of: a login identity (ID), an IP address and a geographic location of an access user, or a blockchain node verification or endorsement policy;
receiving, by the SDP connection accepting host, a connection request transmitted by an SDP connection initiating host, the connection request comprising signature information made by the blockchain system node for the SDP connection accepting host in a list of SDP connection accepting hosts, wherein the signature information made by the blockchain system node for the SDP connection accepting host in the list of SDP connection accepting hosts comprises signatures made by one or more blockchain system nodes determined according to the blockchain node verification or endorsement policy; and
verifying, by the SDP connection accepting host, the signature information according to the supported connection policy when the SDP connection accepting host is in the list of SDP connection accepting hosts, and transmitting, by the SDP connection accepting host, a request response to the SDP connection initiating host after the verification is successful.