Scholarlink

<p>Legal contracts have served as the bedrock of business transactions for millennia. Many are nowadays automated through the use of smart (legal) contracts, often supported by blockchain and IoT technologies. However, automation poses security challenges as to who should have access to operate on contract elements. This paper proposes a role-based access control model, treating all contract elements as resources and ensuring regulated access by designated parties. The access control model extends the <span>Symboleo</span> specification language for legal contracts with new modeling concepts inspired by role-based access control (RBAC), tailored for the legal contract domain, resulting in <span>SymboleoAC</span>. Specifically, we: (i)&#xa0;model a set of access control concepts, including resource, access rule, and access policy, and use them to extend the <span>Symboleo</span> ontology, (ii)&#xa0;define controller rules that specify who can authorize access to each resource, and (iii) present pre-authorization rules that specify who has access to what. Our contributions include an access control model for legal contracts, an extension of the <span>Symboleo</span> language with controller and pre-authorization access rules, a JavaScript library implementing the <span>SymboleoAC</span> ontology, and a tool that generates smart contract code for Hyperledger Fabric (in JavaScript, from <span>SymboleoAC</span>) that is compliant with access policies and access rules.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

SymboleoAC: an access control model for smart legal contracts

  • 期刊论文

  • 发表日期：

    2025年12月8日

查看全文
  • Sofana Alfuhaid,
  • Amal Ahmed Anda,
  • Daniel Amyot,
  • Marco Roveri,
  • John Mylopoulos

摘要

Legal contracts have served as the bedrock of business transactions for millennia. Many are nowadays automated through the use of smart (legal) contracts, often supported by blockchain and IoT technologies. However, automation poses security challenges as to who should have access to operate on contract elements. This paper proposes a role-based access control model, treating all contract elements as resources and ensuring regulated access by designated parties. The access control model extends the Symboleo specification language for legal contracts with new modeling concepts inspired by role-based access control (RBAC), tailored for the legal contract domain, resulting in SymboleoAC. Specifically, we: (i) model a set of access control concepts, including resource, access rule, and access policy, and use them to extend the Symboleo ontology, (ii) define controller rules that specify who can authorize access to each resource, and (iii) present pre-authorization rules that specify who has access to what. Our contributions include an access control model for legal contracts, an extension of the Symboleo language with controller and pre-authorization access rules, a JavaScript library implementing the SymboleoAC ontology, and a tool that generates smart contract code for Hyperledger Fabric (in JavaScript, from SymboleoAC) that is compliant with access policies and access rules.