System and method for enforcing context-based data transfer and access

1. A method for controlling context-based access of data, the method comprising:

receiving, at a producer, a request to access a data block from a consumer, wherein an encrypted version of the data block is included in a data capsule, the data capsule further including a self-executable micro agent for controlling access to the encrypted version of the data block based on a geolocation of the consumer;

verifying, by the self-executable micro agent included in the data capsule, whether a geolocation context associated with the consumer will allow the consumer to access the data block based on providing the geolocation context to the self-executable micro agent included in the data capsule; and

upon verifying, by the self-executable micro agent included in the data capsule, that the geolocation context will allow the consumer to access the data block, transferring the data capsule including the encrypted version of the data block and the self-executable micro agent, wherein the self-executable micro agent allows access to the data block based on verifying the geolocation context associated with the consumer.

2. The method of claim 1 , wherein verifying whether a geolocation context associated with the consumer will allow the consumer to access the data block comprises:

providing a challenge to the consumer, the challenge associated with the request; and

obtaining a response to the challenge, the response comprising at least a certification that the geolocation context associated with the consumer will allow the consumer to access the data block.

3. The method of claim 2 , wherein the certification comprises a trusted third party certification and one or more parameters for proving that the trusted third party certification is associated with the request from the consumer to access the data block.

4. The method of claim 1 , further comprising:

receiving the request from a data broker and transferring the data capsule to the data broker, the data broker configured as an intermediary between the producer and the consumer.

5. The method of claim 1 , wherein the micro agent comprises a self-executable macro for maintaining a log of all read and write accesses to the data block.

6. The method of claim 1 , wherein the micro agent is configured to control access to the data block by one or more applications when the data block is received by the consumer, based on interacting with an operating system.

7. The method of claim 1 , wherein the data capsule further comprises a data block identifier associated with the data block, the data block identifier for identifying the data block.

8. The method of claim 1 , wherein the geolocation context is a geolocation associated with the consumer.

9. The method of claim 8 , further comprising:

performing continuous geolocation assessment while transferring the data capsule, the continuous geolocation assessment for verifying the geolocation of the consumer at two or more points in time during the transfer.

10. A system for controlling context-based access of data, the system comprising:

one or more processors; and

a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more processors, cause the one or more processors to perform operations including:

receiving, at a producer, a request to access a data block from a consumer, wherein an encrypted version of the data block is included in a data capsule, the data capsule further including a self-executable micro agent for controlling access to the encrypted version of the data block based on a geolocation of the consumer;

verifying, by the self-executable micro agent included in the data capsule, whether a geolocation context associated with the consumer will allow the consumer to access the data block based on providing the geolocation context to the self-executable micro agent included in the data capsule; and

upon verifying, by the self-executable micro agent included in the data capsule, that the geolocation context will allow the consumer to access the data block, transferring the data capsule including the encrypted version of the data block and the self-executable micro agent, wherein the self-executable micro agent allows access to the data block based on verifying the geolocation context associated with the consumer.

11. The system of claim 10 , wherein verifying whether a geolocation context associated with the consumer will allow the consumer to access the data block comprises:

providing a challenge to the consumer, the challenge associated with the request; and

obtaining a response to the challenge, the response comprising at least a certification that the geolocation context associated with the consumer will allow the consumer to access the data block.

12. The system of claim 11 , wherein the certification comprises a trusted third party certification and one or more parameters for proving that the trusted third party certification is associated with the request from the consumer to access the data block.

13. The system of claim 10 , wherein the operations further comprise:

receiving the request from a data broker and transferring the data capsule to the data broker, the data broker configured as an intermediary between the producer and the consumer.

14. The system of claim 10 , wherein the micro agent comprises a self-executable macro for maintaining a log of all read and write accesses to the data block.

15. The system of claim 10 , wherein the micro agent is configured to control access to the data block by one or more applications when the data block is received by the consumer, based on interacting with an operating system.

16. The system of claim 10 , wherein the data capsule further comprises a data block identifier associated with the data block, the data block identifier for identifying the data block.

17. The system of claim 10 , wherein the geolocation context is a geolocation associated with the consumer.

18. The system of claim 17 , wherein the operations further comprise:

performing continuous geolocation assessment while transferring the data capsule, the continuous geolocation assessment for verifying the geolocation of the consumer at two or more points in time during the transfer.

19. A non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations for controlling context-based access of data, the operations including:

receiving, at a producer, a request to access a data block from a consumer, wherein an encrypted version of the data block is included in a data capsule, the data capsule further including a self-executable micro agent for controlling access to the encrypted version of the data block based on a geolocation of the consumer;

verifying, by the self-executable micro agent included in the data capsule, whether a geolocation context associated with the consumer will allow the consumer to access the data block based on providing the geolocation context to the self-executable micro agent included in the data capsule; and

upon verifying, by the self-executable micro agent included in the data capsule, that the geolocation context will allow the consumer to access the data block, transferring the data capsule including the encrypted version of the data block and the self-executable micro agent, wherein the self-executable micro agent allows access to the data block based on verifying the geolocation context associated with the consumer.

20. The non-transitory machine-readable storage medium of claim 19 , wherein verifying whether a geolocation context associated with the consumer will allow the consumer to access the data block comprises:

providing a challenge to the consumer, the challenge associated with the request; and

obtaining a response to the challenge, the response comprising at least a certification that the geolocation context associated with the consumer will allow the consumer to access the data block.