Self-sovereign data access via bot-chain
An approach for securely accessing self-sovereign data via a bot-chain ledger may be provided. A bot may request access to a piece distributed data at a bot-chain client. A bot registry service may validate the requesting bot is registered with the bot-ledgering client. The bot-ledgering client may generate a token for the requesting bot and provide the identity of a data bot with permission to access the piece of distributed data. A data bot may request to read the piece of distributed data at the bot-ledgering client. The bot-ledgering client may verify the data bot is registered with the bot-chain. The bot-ledgering client may generate an access token and send it to the data bot.
1. A computer-implemented method for accessing a self-sovereign data (SSD) with a bot-chain ledger, said method implemented in a blockchain architecture, said method comprising:
receiving an access request for the SSD stored in a decentralized database of the blockchain architecture, from a first bot communicatively connected to the bot-chain ledger, said stored SSD being encrypted;
processing the access request;
generating a read access token based on processing the access request, said read access token containing an identity of a second bot and permissions for the second bot to access the requested SSD;
sending the read access token to the first bot;
receiving a data access request and the read access token from the second bot, said second bot having previously received the read access token from the first bot;
processing the read access token and the data access request;
generating, based on said processing the data access request, a single use read security token configured to decrypt the SSD and including a pointer to the SSD; and
sending the single use read security token to the second bot.
2. The computer-implemented method of claim 1 , wherein the bot-chaining ledger comprises a bot registry service and a bot access control.
3. The computer-implemented method of claim 2 , said computer-implemented method further comprising:
registering the first bot and the second bot with the bot registry service, wherein registering with the bot registry service comprises:
authenticating of the first bot and second bot by a trusted authority;
assigning the first bot a first globally unique identifier and data read privileges; and
assigning the second bot a second globally unique identifier and data access privileges.
4. The computer-implemented method of claim 1 , wherein the data access request comprises the identity of the entity requesting the SSD, a permission from the entity requesting the SSD, a first globally unique identifier of the first bot, and access privileges of the first bot.
5. The computer-implemented method of claim 1 , said computer-implemented method further comprising:
identifying the second bot with data access privileges to the SSD.
6. The computer-implemented method of claim 1 , said computer-implemented method further comprising:
passing the read access token from the first bot to the second bot.
7. The computer-implemented method of claim 1 , wherein processing further comprises verifying the SSD bot has registered with the bot registry and verifying the access token with an SSD access service.
8. The computer-implemented method of claim 1 wherein the single use read security token is a single use time-expiring secure token that can be used to decrypt the requested SSD .
9. A system for accessing a self-sovereign data (SSD) with a bot-chain ledger, said system comprising: a memory; and one or more processors in communication with the memory, said one or more processors being configured to perform operations in a blockchain architecture, said operations comprising:
receiving an access request for the SSD stored in a decentralized database of the blockchain architecture, from a first bot communicatively connected to the bot-chain ledger, said stored SSD being encrypted;
processing the access request;
generating a read access token based on processing the access request, said read access token containing an identity of a second bot and permissions for the second bot to access the requested SSD;
sending the read access token to the first bot;
receiving a data access request and the read access token from the second bot, said second bot having previously received the read access token from the first bot;
processing the read access token and the data access request;
generating, based on said processing the data access request, a single use read security token configured to decrypt the SSD and including a pointer to the SSD; and
sending the single use read security token to the second bot.
10. The system of claim 9 , wherein the bot-chaining ledger comprises a bot registry service and a bot access control.
11. The system of claim 10 , said operations further comprising:
registering the first bot and the second bot with the bot registry service, wherein registering with the bot registry service comprises:
authenticating of the first bot and second bot by a trusted authority;
assigning the first bot a first globally unique identifier and data read privileges; and
assigning the second bot a second globally unique identifier and data access privileges.
12. The system of claim 9 , wherein the data access request comprises the identity of the entity requesting the SSD, a permission from the entity requesting the SSD, a first globally unique identifier of the first bot, and access privileges of the first bot.
13. The system of claim 9 , said operations further comprising:
identifying the second bot with data access privileges to the SSD.
14. The system of claim 9 , said operations further comprising:
passing the read access token from the first bot to the second bot.
15. The system of claim 9 , wherein the single use read security token is a single use time-expiring secure token that can be used to decrypt the requested SSD.
16. A computer program product for accessing a self-sovereign data (SSD) with a bot-chain ledger, said computer program product comprising one or more computer readable hardware storage devices having computer readable program code stored therein, said program code containing instructions executable by one or more processors of a computer system to perform operations in a blockchain architecture, said operations comprising:
receiving an access request for the SSD stored in a decentralized database of the blockchain architecture, from a first bot communicatively connected to the bot-chain ledger, said stored SSD being encrypted;
processing the access request;
generating a read access token based on processing the access request, said read access token containing an identity of a second bot and permissions for the second bot to access the requested SSD;
sending the read access token to the first bot;
receiving a data access request and the read access token from the second bot, said second bot having previously received the read access token from the first bot;
processing the read access token and the data access request;
generating, based on said processing the data access request, a single use read security token configured to decrypt the SSD and including a pointer to the SSD; and
sending the single use read security token to the second bot.
17. The system of claim 16 , wherein the bot-chaining ledger comprises a bot registry service and a bot access control.
18. The system of claim 17 , said operations further comprising:
registering the first bot and the second bot with the bot registry service, wherein registering with the bot registry service comprises:
authenticating of the first bot and second bot by a trusted authority;
assigning the first bot a first globally unique identifier and data read privileges; and
assigning the second bot a second globally unique identifier and data access privileges.
19. The system of claim 16 , wherein the data access request comprises the identity of the entity requesting the SSD, a permission from the entity requesting the SSD, a first globally unique identifier of the first bot, and access privileges of the first bot.
20. The system of claim 16 , said operations further comprising:
identifying the second bot with data access privileges to the SSD.
21. The system of claim 16 , wherein the single use read security token is a single use time-expiring secure token that can be used to decrypt the requested SSD.