SYSTEM AND METHOD OF ROLE-BASED ACCESS DIFFERENTIATION OF SECURE ELECTRONIC DOCUMENT MANAGEMENT BLOCKCHAIN SYSTEM BASED ON SMART CONTRACTS Russian patent published in 2024 - IPC G06F21/60 G06Q10/10 

FIELD: physics.

SUBSTANCE: invention relates to a method and a system for role-based access restriction based on smart contracts of a secure document flow blockchain system. Method is implemented in a secure document flow blockchain system and includes interaction between subscribers and system nodes using a smart contract (SC) execution virtual machine module, which synchronizes system nodes and by means of corresponding SC performs verification of ES certificates and records of transactions in distributed ledger, wherein in the blockchain system in the control information generation module using the registration and authorization unit, the nodes are registered, where each registered node is recorded information corresponding to the position of the subscriber who operates it, its functions, rights and duties, necessary and permitted connections with other officials, personal data, level of training, information on controlled objects, their characteristics and information on comprehensive provision of controlled objects, then, using the subscriber account data storage unit, an account is created and an entry in the distributed ledger is created in the form of a node registration transaction, smart contract execution virtual machine module loads account information using a role determination unit and determines the role of the subscriber in accordance with the workflow model in which the subscriber is involved, and the role model of differentiating access to information resources with subsequent ranking of system subscribers and determination of access rights using the access rights determination unit in accordance with the information recorded in the subscriber account, and a table for differentiating access to information resources, based on which a smart contract is formed using an SC generation unit, smart contact program code is transmitted to smart contracts testing unit, where SC program code is checked for presence/absence of errors in it, when detecting errors in the smart contract, information is transmitted to the SC generation unit, where the detected errors are corrected, after which the program code is transmitted to the smart contracts testing unit, where control testing of the SC program code is performed for the presence/absence of errors in it, in the absence of errors, SC is sent to the smart contract recording unit, where a transaction with the SC program code is formed, transaction is transmitted to a transaction processing and storage unit and is recorded in a distributed ledger, access to information resources is performed by means of SC execution unit by means of SC program code initialisation, launching and execution from transactions processing and storage unit.

EFFECT: high reliability of access to information resources.

10 cl, 4 dwg