System and method for data registration and access
A data manager includes persistent storage and a data register. The persistent storage stores an identity chain and a data availability chain. The data register obtains data associated with an entity registered with the identity chain using a public key associated with the entity; obtains an object identifier associated with the data by storing the data in a data storage as a record; and records, on the data availability chain, both of: the record using a private key associated with the entity, and the object identifier.
1. A data manager, comprising:
a computer processor for executing instructions;
data storages for storing:
an identity chain, wherein the identity chain comprises a public key associated with an entity of data, a pointer associated with a permanent record of the data, and a second pointer associated with a portion of the data storages, and
a data availability chain, wherein the data availability chain comprises a private key signed object identifier for the data; and
a data register, wherein the data storages comprise the instructions that when executed by the computer processor, the instructions cause the data register to:
obtain the data associated with the entity, wherein the entity registered with the identity chain using the public key associated with the entity, wherein the public key verifies that the private key signed object identifier is authentic;
obtain an object identifier associated with the data by storing the data in the data storages as a record, wherein the data storages generate the record; and
record, on the data availability chain, both of:
the record using a private key associated with the entity, and
the object identifier.
2. The data manager of claim 1 , further comprising:
a data exchange manager programmed to:
obtain a data exchange proposal for a smart contract associated with the data, wherein the data exchange proposal specifies authorized data access requirements for a second entity;
make a determination that the second entity meets requirements of the smart contract, wherein the requirements of the smart contract are requirements for accessing the data; and
perform an action set to provide access to the data based on the determination, wherein the action set comprises verifying authenticity of the data exchange proposal, and wherein performing the action set comprises:
appending a transaction to an exchange chain,
wherein the transaction specifies an identity of the second entity.
3. The data manager of claim 2 , further comprising:
the data storages programmed to:
obtain a data access request, wherein the data access request comprises the object identifier and the identity of the second entity;
make a determination that the exchange chain indicates that the second entity is authorized to access the data based on the appended transaction; and
provide access to the data based on the determination.
4. The data manager of claim 3 , wherein making the determination that the exchange chain indicates that the second entity is authorized to access the data based on the appended transaction comprises:
verifying the identity of the second entity based on the identity chain;
verifying that the second entity is authorized to access the data based on the exchange chain; and
verifying an owner of the data authorized the smart contract.
5. The data manager of claim 2 , wherein appending the transaction to the exchange chain comprises:
determining an identity and a key for the transaction based on the identity chain; and
basing the transaction, at least in part, the identity and the key,
wherein the key is associated with the public key stored in the identity chain.
6. The data manager of claim 1 , wherein the object identifier is associated with the portion of the data, wherein the portion of the data storages stores the data.
7. The data manager of claim 1 , wherein the data register is further programmed to:
record, on the data availability chain, metadata regarding the data.
8. The data manager of claim 7 , wherein the metadata comprises a description of contents of the data.
9. The data manager of claim 1 , wherein the identity chain is immutable.
10. The data manager of claim 1 , wherein the data availability chain is immutable.
11. A method of operating a data manager, comprising:
obtaining data associated with an entity, wherein the entity registered with an identity chain using a public key associated with the entity, wherein the public key verifies that a private key signed object identifier for the data is authentic, wherein the identity chain comprises the public key associated with the entity, a pointer associated with a permanent record of the data, and a second pointer associated with a portion of data storages, wherein the data manager comprises the data storages;
obtaining an object identifier associated with the data by storing the data in the data storages as a record, wherein the data storages generate the record; and
recording, on a data availability chain, both of:
the record using a private key associated with the entity, and
the object identifier, wherein the data availability chain comprises the private key signed object identifier.
12. The method of claim 11 , further comprising:
obtaining a data exchange proposal for a smart contract associated with the data, wherein the data exchange proposal specifies authorized data access requirements for a second entity;
making a determination that the second entity meets requirements of the smart contract, wherein the requirements of the smart contract are requirements for accessing the data; and
performing an action set to provide access to the data based on the determination, wherein the action set comprises verifying authenticity of the data exchange proposal, and wherein performing the action set comprises:
appending a transaction to an exchange chain,
wherein the transaction specifies an identity of the second entity.
13. The method of claim 12 , further comprising:
obtaining a data access request, wherein the data access request comprises the object identifier and the identity of the second entity;
making a determination that the exchange chain indicates that the second entity is authorized to access the data based on the appended transaction; and
providing access to the data based on the determination.
14. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method for operating a data manager, the method comprising:
obtaining data associated with an entity, wherein the entity registered with an identity chain using a public key associated with the entity, wherein the public key verifies that a private key signed object identifier for the data is authentic, wherein the identity chain comprises the public key associated with the entity, a pointer associated with a permanent record of the data, and a second pointer associated with a portion of data storages, wherein the data manager comprises the data storages;
obtaining an object identifier associated with the data by storing the data in the data storages as a record, wherein the data storages generate the record; and
recording, on a data availability chain, both of:
the record using a private key associated with the entity, and
the object identifier, wherein the data availability chain comprises the private key signed object identifier.
15. The non-transitory computer readable medium of claim 14 , further comprising:
obtaining a data exchange proposal for a smart contract associated with the data, wherein the data exchange proposal specifies authorized data access requirements for a second entity;
making a determination that the second entity meets requirements of the smart contract, wherein the requirements of the smart contract are requirements for accessing the data; and
performing an action set to provide access to the data based on the determination, wherein the action set comprises verifying authenticity of the data exchange proposal, and wherein performing the action set comprises:
appending a transaction to an exchange chain,
wherein the transaction specifies an identity of the second entity.
16. The non-transitory computer readable medium of claim 15 , further comprising:
obtaining a data access request, wherein the data access request comprises the object identifier and the identity of the second entity;
making a determination that the exchange chain indicates that the second entity is authorized to access the data based on the appended transaction; and
providing access to the data based on the determination.