Dynamic management and implementation of consent and permissioning protocols using container-based applications
The disclosed exemplary embodiments include computer-implemented systems, devices, apparatuses, and processes that dynamically implement and manage consent and permissioning protocols using container-based applications. By way of example, a device may receive, through a programmatic interface, a first request for an element of data generated by an executed application program. When the first request is consistent with consent data associated the executed application program, the device may obtain the requested data element and a digital signature applied to the requested data element by a computing system. Based on a verification of the applied digital signature, the device may generate and present a representation of the requested data element within a digital interface, along with an interface element that confirms the verification of the digital signature.
1. A device, comprising:
a communications interface;
a memory storing instructions; and
at least one processor coupled to the communications interface and to the memory, the at least one processor being configured to execute the instructions to:
receive a request for an element of data from an application program executed by the at least one processor, the request being generated by the executed application program, and the request comprising a first digital token associated with the executed application program;
load a second digital token from a portion of the memory that is inaccessible to the executed application program; and
when the first digital token is consistent with the second digital token, and when the request is consistent with a level or type of access granted to the executed application program, obtain the data element and a digital signature applied to the data element, and based on a verification of the digital signature, perform operations that present a representation of the data element within a digital interface, the digital interface comprising an interface element that confirms the verification of the digital signature, and the interface element comprising at least one of an icon, a glyph, or a digital image.
2. The device of claim 1 , wherein:
the device further comprises a display unit coupled to the at least one processor; and
the at least one processor is further configured to present, via the display unit, the representation of the data element within the digital interface, when the first digital token is consistent with the second digital token, and when the request is consistent with the level or type of access granted to the executed application program.
3. The device of claim 1 , wherein
the at least one processor is further configured to execute the instructions to verify the applied digital signature using a public cryptographic key associated with the device.
4. The device of claim 1 , wherein:
the first digital token is maintained within a portion of the memory that is accessible to the executed application program; and
the at least one processor is further configured to execute the instructions to receive the request from the executed application program through a programmatic interface.
5. The device of claim 1 , wherein the at least one processor is further configured to execute the instructions to:
determine that the first digital token is consistent with the second digital token;
load consent data from an additional portion of the memory that is inaccessible to the executed application program, the consent data specifying the level or type of access granted to the executed application program; and
based on the consent data, determine that the request is consistent with the level or type of access granted to the executed application program.
6. The device of claim 1 , wherein:
the request comprises an identifier of an operation involving the data element; and
the at least one processor is further configured to execute the instructions to:
when the first digital token is consistent with the second digital token, obtain consent data specifying the level or type of access granted to the executed application program;
based on the identifier and the consent data, determine that a performance of the operation is consistent with the level or type of access granted to the executed application program; and
perform the operation involving the data element in accordance with the request.
7. The device of claim 6 , wherein the operation comprises the presentation of the representation of the data element within the digital interface.
8. The device of claim 6 , wherein:
the operation comprises provisioning the data element to the executed application program; and
the at least one processor is further configured to execute the instructions to:
based on the identifier and the consent data, determine that the executed application program (i) is permitted to access the data element and (ii) is not permitted to distribute the data element to at least one of an additional computing system or an additional executed application program;
perform operations that modify the data element in accordance with rubric data established by a centralized authority; and
provision the modified data element to the executed application program through a programmatic interface.
9. The device of claim 1 , wherein the at least one processor is further configured to execute the instructions to, when the first digital token is consistent with the second digital token and when the request is consistent with the level or type of access granted to the executed application program, obtain the data element from at least one of a computing system or an additional portion of the memory inaccessible to the executed application program.
10. A computer-implemented method, comprising:
receiving, using at least one processor, a request for an element of data, the request being generated by an application program executed by the at least one processor, and the request comprising a first digital token associated with the executed application program;
loading, using the at least one processor, a second digital token from a portion of a data repository that is inaccessible to the executed application program; and
when the first digital token is consistent with the second digital token, and when the request is consistent with a level or type of access granted to the executed application program, obtaining the data element and a digital signature applied to the data element using the at least one processor, and based on a verification of the digital signature, performing operations, using the at least one processor, that present a representation of the data element within a digital interface, the digital interface comprising an interface element that confirms the verification of the digital signature, and the interface element comprising at least one of an icon, a glyph, or a digital image.
11. A device, comprising:
a communications interface;
a memory storing instructions; and
at least one processor coupled to the communications interface and to the memory, the at least one processor being configured to execute the instructions to:
receive, from an application program executed by the at least one processor, a request to perform an operation involving an element of data, the request being generated by the executed application program, and the request comprising a first digital token associated with the executed application program and an identifier of the operation;
load a second digital token from a portion of the memory that is inaccessible to the executed application program; and
when the first digital token is consistent with the second digital token, and when the operation is consistent with a level or type of access granted to the executed application program, obtain the data element and a digital signature applied to the data element, and based on a verification of the digital signature, perform the operation involving the data element and present an interface element that confirms the verification of the digital signature within a digital interface, and the interface element comprising at least one of an icon, a glyph, or a digital image.
12. The device of claim 11 , wherein:
the first digital token is maintained within a portion of the memory that is accessible to the executed application program; and
the at least one processor is further configured to execute the instructions to receive the request from the executed application program through a programmatic interface.
13. The device of claim 11 , wherein the at least one processor is further configured to execute the instructions to:
determine that the first digital token is consistent with the second digital token;
load consent data from an additional portion of the memory that is inaccessible to the executed application program, the consent data specifying the level or type of access granted to the executed application program; and
based on the consent data and on the identifier, determine that the operation is consistent with the level or type of access granted to the executed application program.
14. The device of claim 11 , wherein the at least one processor is further configured to:
based on a verification of the applied digital signature, store the data element within an additional portion of the memory that is inaccessible to the executed application program.
15. The device of claim 11 , wherein:
the operation comprises presenting a representation of the data element within the digital interface; and
the at least one processor is further configured to execute the instructions to:
load consent data from an additional portion of the memory that is inaccessible to the executed application program, the consent data specifying the level or type of access granted to the executed application program;
based on the consent data and on the identifier, determine that the presentation of the representation of the data element within the digital interface is consistent with the level or type of access granted to the executed application program; and
perform operations that generate the representation of the data element and present the representation within the digital interface.
16. The device of claim 15 , wherein
the at least one processor is further configured to execute the instructions to verify the digital signature applied to the data element using a public cryptographic key associated with the device; and.
17. The device of claim 11 , wherein:
the operation comprises provisioning the data element to the executed application program; and
the at least one processor is further configured to execute the instructions to:
load consent data from an additional portion of the memory that is inaccessible to the executed application program, the consent data specifying the level or type of access granted to the executed application program;
based on the consent data and on the identifier, determine that the provisioning of the data element to the executed application program is consistent with the level or type of access granted to the executed application program; and
perform operations that provision the data element to the executed application program through a programmatic interface.
18. The device of claim 17 , wherein the at least one processor is further configured to execute the instructions to:
based on the identifier and the consent data, determine that the executed application program (i) is permitted to access the data element and (ii) is not permitted to distribute the data element to at least one of an additional computing system or an additional executed application program;
perform operations that modify at least a portion of the data element in accordance with rubric data established by a centralized authority; and
provision the modified data element to the executed application program through the programmatic interface.
19. The device of claim 11 , wherein the at least one processor is further configured to execute the instructions to, when the first digital token is consistent with the second digital token, and when the operation is consistent with the level or type of access granted to the executed application program, obtain the data element from at least one of a computing system or an additional portion of the memory that is inaccessible to the executed application program.