Dynamic permission assignment and enforcement for transport process
An example operation may include one or more of receiving transport data of a multi-party transport process, identifying documents and events that are associated with the multi-party transport process based on the received transport data, dynamically determining read and write permissions for the documents and the events of the multi-party transport process based on predefined roles, and storing an identifier of the multi-party transport process and the dynamically determined read and write permissions in a block on a blockchain.
1. An apparatus comprising:
a network interface configured to receive transport data of a multi-party transport process; and
a processor configured to:
identify documents and events that are associated with the multi-party transport process based on the transport data,
dynamically determine read and write permissions for the documents and the events of the multi-party transport process based on predefined roles of participants of the multi-party transport process, an origin of the multi-party transport process, a destination of the multi-party transport process, and an intermediate location of the multi-party transport process, and
store an identifier of the multi-party transport process and the read and write permissions in a block on a blockchain.
2. The apparatus of claim 1 , wherein the processor is configured to:
derive permissions to read and write data to the blockchain for a plurality of parties included in the multi-party transport process based on predefined roles that are mapped to the parties by chaincode of the blockchain.
3. The apparatus of claim 1 , wherein the processor is further configured to:
receive a request to access one or more of a document and an event of the multi-party transport process, and
grant the request based on the dynamically determined read and write permissions stored in the blockchain.
4. The apparatus of claim 1 , wherein the processor is further configured to:
receive a request to access one or more of a document and an event of the multi-party transport process, and
deny the request based on the dynamically determined read and write permissions stored in the blockchain.
5. The apparatus of claim 1 , wherein the network interface is further configured to:
receive an update of event data of the multi-party process, and
store the update of event data and read and write permissions for the update of event data in a block on the blockchain.
6. The apparatus of claim 5 , wherein the update of event data comprises a modification to a previously stored document.
7. The apparatus of claim 5 , wherein the update of event data comprises a modification to previously determined read and write permissions to an event and its data.
8. A method comprising:
receiving transport data of a multi-party transport process;
identifying documents and events that are associated with the multi-party transport process based on the received transport data;
dynamically determining read and write permissions for the documents and the events of the multi-party transport process based on predefined roles of participants of the multi-party transport process, an origin of the multi-party transport process, a destination of the multi-party transport process, and an intermediate location of the multi-party transport process; and
storing an identifier of the multi-party transport process and the read and write permissions in a block on a blockchain.
9. The method of claim 8 , wherein the dynamically determining further comprises:
deriving permissions to read and write data to the blockchain for a plurality of parties included in the multi-party transport process based on predefined roles that are mapped to the parties by chaincode of the blockchain.
10. The method of claim 8 , further comprising:
receiving a request to access one or more of a document and an event of the multi-party transport process, and
granting the request based on the dynamically determined read and write permissions stored in the blockchain.
11. The method of claim 8 , further comprising:
receiving a request to access one or more of a document and an event of the multi-party transport process, and
denying the request based on the dynamically determined read and write permissions stored in the blockchain.
12. The method of claim 8 , further comprising:
receiving an update of event data of the multi-party process, and
storing the update of event data and read and write permissions for the update of event data in a block on the blockchain.
13. The method of claim 12 , wherein the update of event data comprises a modification to a previously stored document.
14. The method of claim 12 , wherein the update of event data comprises a modification to previously determined read and write permissions to an event and its data.
15. A non-transitory computer-readable medium comprising one or more instructions that when executed by a processor, cause the processor to perform a method comprising:
receiving transport data of a multi-party transport process;
identifying documents and events that are associated with the multi-party transport process based on the received transport data;
dynamically determining read and write permissions for the documents and the events of the multi-party transport process based on predefined roles of participants of the multi-party transport process, an origin of the multi-party transport process, a destination of the multi-party transport process, and an intermediate location of the multi-party transport process; and
storing an identifier of the multi-party transport process and the read and write permissions in a block on a blockchain.
16. The non-transitory computer-readable medium of claim 15 , wherein the dynamically determining further comprises:
deriving permissions to read and write data to the blockchain for a plurality of parties included in the multi-party transport process based on predefined roles that are mapped to the parties by chaincode of the blockchain.
17. The non-transitory computer-readable medium of claim 15 , wherein the one or more instructions further causes the processor to perform:
receiving a request to access one or more of a document and an event of the multi-party transport process, and
granting the request based on the dynamically determined read and write permissions stored in the blockchain.
18. The non-transitory computer-readable medium of claim 15 , wherein the one or more instructions further causes the processor to perform:
receiving a request to access one or more of a document and an event of the multi-party transport process, and
denying the request based on the dynamically determined read and write permissions stored in the blockchain.