Consent-based data management

Patent metadata

Field	Value
Publication number	US-11240003-B2
Application number	US-201916364789-A
Country	US
Kind code	B2
Filing date	Mar 26, 2019
Priority date	Mar 26, 2019
Publication date	Feb 1, 2022
Grant date	Feb 1, 2022

Abstract

An example operation may include one or more of generating, by a data management node, a profile token based on a data profile of a data provider (DP) node, receiving, by the data management node, a transaction request from a service provider (SP) node to access data from the DP node over a blockchain, acquiring, by the data management node, consent of the SP node based on the profile token, generating, by the data management node, a consent token based the consent of the SP node, and allowing access to data of the DP node by the SP node based on a verification of the consent token.

First claim

What is claimed is:

1. A data management node in a blockchain network comprising a blockchain, a data provider (DP) node, and a service provider (SP) node, the data management node is a computing device comprising: a memory storing one or more instructions; and a hardware processor that when executing the one or more instructions is configured to:
generate a profile token modelling a data profile of the DP node and comprising a commitment to:
an address of the DP node,
a data field of the DP node, and
a symmetric key of the DP node;

receive a transaction request from the SP node to access data from the DP node via the blockchain, the blockchain network uses one or more smart contracts to manage transactions for multiple participating nodes;
acquire consent of the SP node based on the profile token;
generate a consent token based the consent of the SP node; and
allow the SP node to access the data of the DP node via the blockchain based on a zero-knowledge proof verification of the consent token.

2. The data management node of claim 1 , wherein the processor is further configured to:
maintain a verifiable record of consent for the SP node to access the data from the DP node.

3. The data management node of claim 2 , wherein the processor is further configured to:
execute the requested transaction if the verifiable record of the consent exists on the blockchain.

4. The data management node of claim 3 , wherein the verifiable record of the consent is based on the zero-knowledge proof.

5. The data management node of claim 2 , wherein the processor is further configured to:
revoke the verifiable record of the consent on the blockchain, wherein identities of consented parties are not discoverable from the verifiable record of the consent.

6. The data management node of claim 1 , wherein the processor is further configured to:
allow access to the data of the DP node by the SP node, wherein an identity of the DP node is not discoverable.

7. The data management node of claim 1 , wherein the processor is further configured to:
verify the consent token in a distributed manner based on consensus protocols.

8. A method, comprising:
generating, by a data management node which is a computing device in a blockchain network comprising a blockchain, a data provider (DP) node, and a service provider (SP) node, a profile token based on a data profile of the DP node, the profile token modelling a data profile of the DP node and comprising a commitment to:
an address of the DP node,
a data field of the DP node, and
a symmetric key of the DP node;

receiving, by the data management node, a transaction request from the SP node to access data from the DP node via the blockchain, the blockchain network uses one or more smart contracts to manage transactions for multiple participating nodes;
acquiring, by the data management node, consent of the SP node based on the profile token;
generating, by the data management node, a consent token based the consent of the SP node; and allowing, by the data management node, the SP node to access the data of the DP node via the blockchain based on a zero-knowledge proof verification of the consent token.

9. The method of claim 8 , further comprising:
maintaining a verifiable record of consent for the SP node to access the data from the DP node.

10. The method of claim 9 , further comprising:
executing the requested transaction if the verifiable record of the consent exists on the blockchain.

11. The method of claim 10 , wherein the verifiable record of the consent is based on the zero-knowledge proof.

12. The method of claim 9 , further comprising:
revoking the verifiable record of the consent on the blockchain, wherein identities of consented parties are not discoverable from the verifiable record of the consent.

13. The method of claim 8 , further comprising:
allowing access to the data from the DP node by the SP node, wherein an identity of the DP node is not discoverable.

14. The method of claim 8 , further comprising:
verifying the consent token in a distributed manner based on consensus protocols.

15. A non-transitory computer readable medium comprising one or more instructions that when executed by a hardware processor of a data management node which is a computing device in a blockchain network comprising a blockchain, a data provider (DP) node, and a service provider (SP) node, cause the processor to perform:
generating a profile token based on a data profile of the DP node, the profile token modelling a data profile of the DP node and comprising a commitment to:
an address of the DP node,
a data field of the DP node, and
a symmetric key of the DP node;

receiving a transaction request from the SP node to access data from the DP node via the blockchain, the blockchain network uses one or more smart contracts to manage transactions for multiple participating nodes;
acquiring consent of the SP node based on the profile token; generating a consent token based the consent of the SP node; and allowing the SP node to access the data of the DP node via the blockchain based on a zero-knowledge proof verification of the consent token.

16. The non-transitory computer readable medium of claim 15 , wherein the one or more instructions further cause the processor to perform:
maintaining a verifiable record of consent for the SP node to access the data from the DP node.

17. The non-transitory computer readable medium of claim 16 , wherein the one or more instructions further cause the processor to perform:
executing the requested transaction if the verifiable record of the consent exists on the blockchain.

18. The non-transitory computer readable medium of claim 17 , wherein the verifiable record of the consent is based on the zero-knowledge proof.

19. The non-transitory computer readable medium of claim 16 , wherein the one or more instructions further cause the processor to perform:
revoking the verifiable record of the consent on the blockchain, wherein identities of consented parties are not discoverable from the verifiable record of the consent.

20. The non-transitory computer readable medium of claim 15 , wherein the one or more instructions further cause the processor to perform:
allowing access to the data from the DP node by the SP node, wherein an identity of the DP node is not discoverable.

Assignees

• IBM

Inventors

• Cao Shengjiao
• De Caro Angelo
• Elkhiyaoui Kaoutar
• Lim Yu Chin Fabian

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06F16/252 Primary

  between a Database Management System and a front-end application · CPC title

• H04L9/3218

  using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title