System level function based access control for smart contract execution on a blockchain

A system comprising:

• one or more processors;
• and
• one or more memory devices in communication with the one or more processors, the one or more memory devices having computer-readable instructions stored thereupon that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• detecting a function call made by a method of a smart contract on a blockchain by identifying an entrance or exit of the function call in a kernel for smart contract execution on the blockchain;
• and
• in response to detecting the function call:
• adding the function call to a function call stack for the smart contract,
• accessing a set of function based access control rules from one or more blocks of the blockchain,
• checking the function call stack against the set of function based access control rules that each define a permitted sequence of function calls, and
• permitting execution of the function call based on determining the function call stack includes a sequence of function calls that matches a first permitted sequence of function calls defined by a first function based access control rule of the set of function based access control rules.

One or more non-transitory computer storage media having computer executable instructions stored thereon which, when executed by one or more processors, cause the one or more processors to execute operations comprising:

• detecting a function call made by one or more methods of a smart contract on a blockchain by identifying an entrance or exit of the function call in a kernel for smart contract execution on the blockchain;
• adding the function call to a function call stack for the smart contract;
• accessing a set of function based access control rules from one or more blocks of the blockchain;
• checking the function call stack against the set of function based access control rules that defines one or more permitted or prohibited sequences of function calls;
• and
• blocking execution or completion of the function call based on determining the function call stack includes one or more function calls that are not permitted under the set of function based access control rules.