TRUSTED DATA MANAGEMENT SYSTEMS AND METHODS
This disclosure relates to, among other things, systems and methods for the secure management and verification of data. Certain embodiments disclosed herein provide for a trusted data management platform that may interact with a trusted assertion service to securely record assertion information relating to the generation and/or processing of data managed by the platform. Data consumers interact with the trusted assertion service to authenticate and/or otherwise verify the provenance, chain-of-handling, and/or other information associated with data managed by the trusted data management platform and/or associated data marketplaces.
1 . A method for determining provenance of electronic data performed by a querying system comprising a processor and a non-transitory computer-readable medium storing instructions that, when executed by the processor, cause the querying system to perform the method, the method comprising:
accessing a first data set and first fact information associated with the first data set, the first fact information comprising:
a hash of the first data set, and
a hash of a second data set;
generating a first query, the first query comprising the first fact information;
transmitting the first query to a trusted assertion service to determine whether a trusted assertion ledger managed by the trusted assertion service comprises a first assertion comprising the first fact information;
receiving a first response from the trusted assertion service indicating that the trusted assertion ledger comprises the first assertion; and
determining a provenance of the first data set associating the first data set with the second data set based, at least in part, on the first response indicating that the trusted assertion ledger comprises the first assertion.
2 . The method of claim 1 , wherein the method further comprises receiving the first data set and the first fact information associated with the first data set from a data management service.
3 . The method of claim 1 , wherein the first fact information further comprises identification information associated with a data processing program used to generate the first data set using the second data set.
4 . The method of claim 3 , wherein the identification information associated with the data processing program comprises an identifier of a data processing service that generated the first data set using the data processing program.
5 . The method of claim 4 , wherein the first assertion further comprises a digital signature generated using a first cryptographic key, the first cryptographic key being securely associated with the data processing service.
6 . The method of claim 3 , wherein the first assertion further comprises a digital signature generated using a second cryptographic key, the second cryptographic key being securely associated with the data processing program.
7 . The method of claim 3 , wherein the first fact information further comprises a hash of the data processing program.
8 . The method of claim 3 , wherein the first fact information further comprises a timestamp associated with the generation of the first data set by the data processing program.
9 . The method of claim 3 , wherein the first fact information further comprises configuration information associated with the generation of the first data set by the data processing program.
10 . The method of claim 2 , wherein the first fact information is securely stored with the second data set by the data management service.
11 . The method of claim 1 , wherein accessing the first data set and the first fact information comprises receiving the first fact information separately from the first data set.
12 . The method of claim 1 , wherein accessing the first data set and first fact information comprises:
issuing a data request to a data management service for the first data set; and
in response to the data request, receiving the first data set and the first fact information associated with the first data set from the data management service.
13 . The method of claim 1 , wherein accessing the first data set comprises accessing the first data set from a data marketplace interface exposed by a data management service.
14 . The method of claim 1 , wherein the method further comprises:
generating a second query, the second query comprising the hash of the second data set; and
transmitting the second query to the trusted assertion service to determine whether the trusted assertion ledger managed by the trusted assertion comprises a second assertion comprising the hash of the second data set.
15 . The method of claim 14 , wherein the method further comprises:
receiving a second response from the trusted assertion service indicating that the trusted assertion ledger comprises the second assertion; and
determining that the provenance of the first data set further associates the first data set with a third data set based, at least in part, on the second response indicating that the trusted assertion ledger comprises the second assertion.
16 . The method of claim 1 , wherein the trusted assertion ledger comprises a blockchain ledger.
17 . The method of claim 1 , wherein the first response comprises an indication of timestamp information associated with the first assertion.
18 . The method of claim 1 , wherein the first response comprises metadata information associated with the first data set.