Method and apparatus for effecting a data-based activity

1. A method for effecting a data-based activity between network elements the method comprising:

by a control circuit configured as a stateless third-party intermediary that manages a protocol, wherein the protocol prohibits the third-party intermediary from substantively accessing tokenized identifiers or entity-related data that, at least in part, underlie a protocol-compliant request;

receiving within a request to invoke the protocol from a first requesting network element acting as at least one of an attestor role and a requestor role a first list of tuples wherein each such tuple includes a blinded function of a tokenized identifier of an entity-and wherein each such tuple includes at least one of first metadata and a blinded function of first entity-related data;

receiving within a request to invoke the protocol from a second requesting network element acting as at least one of an attestor role and a requestor role a second list of tuples wherein each such tuple includes a blinded function of a tokenized identifier of an entity and wherein each such tuple includes at least one of second metadata and a blinded function of second entity-related data;

determining a set of values of a blinded function of a tokenized identifier which are included in both the first list of tuples and the second list of tuples;

utilizing at least one subset of the set of values to respond to at least one of the first requesting network element and the second requesting network element, wherein, determination of such a subset is dependent, at least in part, on consideration of the first and/or the second metadata, if any; and

wherein formulation of a response is dependent, at least in part, on consideration of values of the blinded function of the first and/or the second entity-related data, if any.

2. The method of claim 1 wherein the first and the second requesting network elements participate in an agreement process during which they agree on the blinded function for the tokenized identifiers and the blinded function, if any, for the entity-related data.

3. The method of claim 2 wherein the first requesting network element sets up a first session with the third-party intermediary and the second requesting network element sets up a second session with the third-party intermediary, and at least one of the first requesting network element and the second requesting network element uniquely identifies a respective counterparty requesting network element to the third-party intermediary by at least one of a static counterparty identifier that was conveyed during the agreement process and an ephemeral counterparty identifier that was established during the agreement process.

4. The method of claim 3 wherein the ephemeral counterparty identifier or a proof of ownership of the static counterparty identifier is presented by the respective counterparty requesting network element, as verified by the third-party intermediary by at least one of:

matching the ephemeral counterparty identifier or the proof of ownership of the static counterparty identifier against the counterparty identifier that the requesting network element uses to identify the counterparty requesting network element to the third-party intermediary; and

verifying the proof of ownership of the static counterparty identifier against the counterparty identifier that the requesting network element uses to identify the counterparty requesting network element to the third-party intermediary, respectively.

5. The method of claim 2 wherein at least one of the blinded function for the tokenized identifiers and the blinded function for the entity-related data is agreed upon per use of the agreement process independently of any previous use of the agreement process.

6. The method of claim 1 wherein prior to transmitting a request to invoke the protocol a requesting network element procures and stores the tokenized identifiers for the entities that are each to be represented within the request to invoke the protocol as a value comprised of a blinded function of tithe a tokenized identifier.

7. The method of claim 6 wherein information representing each entity is blinded using a blinding factor that is generated by each requesting network element independently of other requesting network elements, wherein the blinding factor is removed by the requesting network element that generated the blinding factor after all tokenization processors have generated their outputs used in derivation of the tokenized identifier of the entity.

8. The method of claim 1 wherein the blinded function for blinding the entity-related data is generated so as to enable the third-party intermediary to blindly perform a function over the entity-related data for inclusion within the response.

9. The method of claim 1 wherein the response results in at least one of:

corroboration of a function of data; and

transference of a function of data.

10. The method of claim 9 wherein:

the corroboration entails that the first requesting network element acting as a requestor role receives within the response a function of solely- first requesting network element-submitted entity-related data, if any, wherein at least one subset of the set of values of a blinded function of a tokenized identifier which are included in both the first list of tuples and the second list of tuples is used to respond, and wherein the first requesting network element acts only as a requestor role, or as both a requestor role and an attestor role, and the second requesting network element acts as at least one of a requestor role and an attestor role; and

the transference entails that the first requesting network element acting as a requestor role receives within the response a function of solely- second requesting network element-submitted entity-related data, or a function of first requesting network element-submitted entity-related data, if any, as well as a function of second requesting network element-submitted entity-related data, wherein at least one subset of the set of values of a blinded function of a tokenized identifier which are included in both the first list of tuples and the second list of tuples is used to respond, and wherein the first requesting network element acts only as a requestor role, or as both a requestor role and an attestor role, and the second requesting network element acts only as an attestor role, or acts as both an attestor role and a requestor role.

11. An apparatus to effect a data-based activity between network elements, the apparatus comprising:

a network interface;

a control circuit operably coupled to the network interface and configured as a stateless third-party intermediary that manages a protocol, wherein:

the protocol prohibits the third-party intermediary from substantively accessing tokenized identifiers or entity-related data that, at least in part, underlie a protocol-compliant request; and

wherein the control circuit is further configured to:

receive via the network interface and within a request to invoke the protocol from a first requesting network element acting as at least one of an attestor role and a requestor role, a first list of tuples wherein each such tuple includes a blinded function of a tokenized identifier of an entity and wherein each such tuple includes at least one of first metadata and a blinded function of first entity-related data;

receive via the network interface and within a request to invoke the protocol from a second requesting network element acting as at least one of an attestor role and a requestor role, a second list of tuples wherein each such tuple includes a blinded function of a tokenized identifier of an entity and wherein each such tuple includes at least one of second metadata and a blinded function of second entity-related data;

determine a set of values of a blinded function of a tokenized identifier which are included in both the first list of tuples and the second list of tuples;

utilize at least one subset of the set of values to respond to at least one of the first requesting network element and the second requesting network element, wherein, determination of such a subset is dependent, at least in part, on consideration of the first and/or the second metadata, if any; and

wherein formulation of a response is dependent, at least in part, on consideration of values of the blinded function of the first and/or the second entity-related data, if any.

12. The apparatus of claim 11 wherein the first and the second requesting network elements are configured to participate in an agreement process during which they agree on the blinded function for the tokenized identifiers and the blinded function, for the entity-related data.

13. The apparatus of claim 12 wherein the first requesting network element is configured to set up a first session with the third-party intermediary and the second requesting network element is configured to set up a second session with the third-party intermediary, and at least one of the first requesting network element and the second requesting network element is configured to uniquely identify a respective counterparty requesting network element to the third-party intermediary by at least one of a static counterparty identifier that was conveyed during the agreement process and an ephemeral counterparty identifier that was established during the agreement process.

14. The apparatus of claim 13 wherein the ephemeral counterparty identifier or a proof of ownership of the static counterparty identifier is presented by the respective counterparty requesting network element, as verified by the third-party intermediary by at least one of:

matching the ephemeral counterparty identifier or the proof of ownership of the static counterparty identifier against the counterparty identifier that the requesting network element uses to identify the counterparty requesting network element to the third-party intermediary; and

verifying the proof of ownership of the static counterparty identifier against the counterparty identifier that the requesting network element uses to identify the counterparty requesting network element to the third-party intermediary, respectively.

15. The apparatus of claim 12 wherein at least one of the blinded function for the tokenized identifiers and the blinded function for the entity-related data is agreed upon per use of the agreement process independently of any previous use of the agreement process.

16. The apparatus of claim 11 wherein prior to transmitting a request to invoke the protocol a requesting network element procures and stores the tokenized identifiers for the entities that are each to be represented within the request to invoke the protocol as a value comprised of a blinded function of a tokenized identifier.

17. The apparatus of claim 16 wherein information representing each entity is blinded using a blinding factor that is generated by each requesting network element independently of other requesting network elements, wherein the blinding factor is removed by the requesting network element that generated the blinding factor after all tokenization processors have generated their outputs used in derivation of the tokenized identifier of the entity.

18. The apparatus of claim 11 wherein the blinded function for blinding the entity-related data is generated so as to enable the third-party intermediary to blindly perform a function over the entity-related data for inclusion within the response.

19. The apparatus of claim 11 wherein the response results in at least one of:

corroboration of a function of data; and

transference of a function of data.

20. The apparatus of claim 19 wherein:

the corroboration entails that the first requesting network element acting as a requestor role receives within the response a function of solely- first requesting network element-submitted entity-related data, if any, wherein at least one subset of the set of values of a blinded function of a tokenized identifier which are included in both the first list of tuples and the second list of tuples is used to respond, and wherein the first requesting network element acts only as a requestor role, or as both a requestor role and an attestor role, and the second requesting network element acts as at least one of a requestor role and an attestor role; and

the transference entails that the first requesting network element acting as a requestor role receives within the response a function of solely- second requesting network element-submitted entity-related data, or a function of first requesting network element-submitted entity-related data, if any, as well as a function of second requesting network element-submitted entity-related data, wherein at least one subset of the set of values of a blinded function of a tokenized identifier which are included in both the first list of tuples and the second list of tuples is used to respond, and wherein the first requesting network element acts only as a requestor role, or as both a requestor role and an attestor role, and the second requesting network element acts only as an attestor role, or acts as both an attestor role and a requestor role.