System and method to protect sensitive information via distributed trust

1. A method to secure data from unauthorized access, the method comprising:

receiving a public key of a computer system authorized to use a data item;

providing a token representing the data item to the computer system as a substitute of the data item;

encrypting the data item using the public key into a cipher text that is to be decrypted using a private key of the computer system;

dividing the cipher text into multiple portions; and

communicating the multiple portions to respective multiple computer systems that are separately administrated by different organizations, wherein each respective system of the multiple computer systems stores, in connection with the token, no more than a portion of the cipher text, which portion is not decryptable using the private key without a remaining portion of the cipher text that is not stored in the respective system;

wherein the computer system authorized to use the data item does not store persistently the data item;

wherein in response to a request to use the data item, the computer system retrieves the cipher text from the multiple computer systems using the token and decrypts the cipher text into the data item.

2. The method of claim 1 , further comprising:

receiving the token; and

communicating with the multiple computer systems to retrieve the cipher text.

3. The method of claim 2 , further comprising:

storing permission data identifying permitted uses of the data item represented by the token, the token is received in connection with a proposed use of the data item;

determining whether the proposed use is permitted according to the permission data;

wherein the cipher text is retrieved in response to a determination that the proposed use is permitted according to the permission data.

4. The method of claim 3 , further comprising:

storing, in a blockchain ledger and in response retrieval of the cipher text from the multiple computer systems, a record for the token, the record containing information identifying an instance of use of the data item.

5. The method of claim 4 , further comprising:

receiving the data item from a user;

regenerating the cipher text from the data item using the public key; and

querying the multiple computer systems to retrieve the token associated with the cipher text.

6. The method of claim 5 , wherein the each respective system of the multiple computer systems further stores data for correlating the portion of the cipher text, stored in the respective system, with the remaining portion of the cipher text that is not stored in the respective system.

7. The method of claim 6 , further comprising:

retrieving, from the blockchain ledger, records for the token; and

presenting a use history of the data item according to the records.

8. The method of claim 3 , wherein the data item includes personally identifiable information.

9. The method of claim 3 , wherein one or more permitted use cases specified via an ontology or standardized nomenclature are encoded within or with the data token to represent one or more uses;

wherein a request for access to the data token includes an intended use case specified via the ontology or standardized nomenclature to represent a plurality of intended uses; and

wherein approval of the intended use case to access the data token is automated via matching the intended use case with the one or more permitted use cases.

10. The method of claim 9 , further comprising:

determining, by an automated system, whether the intended use case is contained within the one or more permitted use cases for the data token.

11. An apparatus, comprising:

at least one microprocessor; and

memory storing instructions to instruct the at least one microprocessor to communicate with:

a user computer providing a data item containing personally identifiable information;

a computer system of an organization as a recipient of the data item; and

multiple computer systems that are separately administrated by different organizations;

wherein in response to the user computer providing the data item, the instructions are configured to instruct the at least one microprocessor to:

receive a public key of the computer system as the recipient of the data item, wherein a token representing the data item is provided to the computer system as a substitute of the data item;

encrypt the data item using the public key into a cipher text that is to be decrypted using a private key of the computer system;

divide the cipher text into multiple portions; and

store, into the multiple computer systems in connection with the token, the multiple portions of the cipher text, wherein each respective system of the multiple computer systems stores no more than a portion of the cipher text, which portion is not decryptable using the private key without a remaining portion of the cipher text that is not stored in the respective system;

wherein the computer system authorized to use the data item does not store persistently the data item;

wherein in response to a request to use the data item, the computer system retrieves the cipher text from the multiple computer systems using the token and decrypts the cipher text into the data item.

12. The apparatus of claim 11 , wherein in response to receiving a request containing the token, the apparatus communicates with the multiple computer systems to retrieve the cipher text.

13. The apparatus of claim 12 , wherein the apparatus stores permission data identifying permitted uses of the data item represented by the token; the token is received in connection with a proposed use of the data item; and the cipher text is retrieved in response to a determination that the proposed use is permitted according to the permission data.

14. The apparatus of claim 13 , wherein the apparatus further stores, in a blockchain ledger and in response retrieval of the cipher text from the multiple computer systems, a record for the token, the record containing information identifying an instance of use of the data item.

15. The apparatus of claim 14 , wherein in response to a request containing the data item from a user, the apparatus regenerates the cipher text from the data item using the public key, and queries the multiple computer systems to retrieve the token associated with the cipher text.

16. The apparatus of claim 15 , wherein the each respective system of the multiple computer systems further stores data for correlating the portion of the cipher text, stored in the respective system, with the remaining portion of the cipher text that is not stored in the respective system.

17. The apparatus of claim 15 , wherein the apparatus retrieves, from the blockchain ledger, records for the token; and presents a use history of the data item according to the records.

18. A non-transitory computer storage medium storing instructions which, when executed on a computing apparatus, cause the computing apparatus to perform a method, the method comprising:

in response to a user computer providing data item containing personally identifiable information, obtaining a public key of a computer system of an organization as a recipient of the data item;

identifying a token representing the data item;

providing the token to the computer system as a substitute of the data item;

encrypting the data item using the public key into a cipher text that is to be decrypted using a private key of the computer system;

dividing the cipher text into multiple portions; and

storing, into multiple computer systems that are separately administrated by different organizations and in connection with the token, the multiple portions of the cipher text, wherein each respective system of the multiple computer systems stores no more than a portion of the cipher text, which portion is not decryptable using the private key without a remaining portion of the cipher text that is not stored in the respective system;

wherein the computer system authorized to use the data item does not store persistently the data item;

wherein in response to a request to use the data item, the computer system retrieves the cipher text from the multiple computer systems using the token and decrypts the cipher text into the data item.