Token-based digital private data exchange systems, methods, and apparatus
Systems, apparatus, and methods of managing access to private data via tokens are disclosed. The disclosed techniques provide for constructing digital tokens that represent a right-to-access private data where the tokens can be managed as individual objects. Further, such digital access tokens (DATs) can be recorded on a notarized ledger, a blockchain for example. Additionally, the rights-to-access can be embodied as a non-fungible token (NFT), which could further include support for establishing homomorphic encryption workspaces in which private data can be accessed or manipulated without exposing the private data.
1. A computer-based data escrow system comprising:
at least one computer-readable, non-transitory memory storing software instructions;
at least one private database storing private data records associated with an authorized computing device having an authorization identifier, wherein the private data records comprise field-value entries; and
at least one processor coupled with the at least one memory and that executes the software instructions and thereby performs operations of:
receiving, over a network, a request of a first computing device other than the authorized computing device for at least some of the private data records, the request including a requested field of interest from at least one field from the at least some of the private data records;
storing, upon a determination based on the authorization identifier that the first computing device is authorized to access the at least some of the private data records, at least one value corresponding to the requested field of interest from the at least some of the private data records in a private data escrow that is separate from the private data records;
generating, in the at least one memory, a data access token (DAT) as a non-fungible token (NFT) responsive to the request, the DAT NFT comprising at least a data access token identifier, a token owner identifier representing the first computing device as an owner of the DAT NFT but not of the at least some of the private data records, and a data access activation protocol (DAAP) executable to access at least one value in the private data escrow;
recording the DAT NFT on a corresponding notarized ledger operating as a record-keeping system, wherein the DAT NFT is accessible by the first computing device;
authenticating the first computing device and validating the first computing device based on at least the data access token identifier and the token owner identifier; and
in accordance with authenticating the first computing device, validating the first computing device, and an execution of the DAAP within the DAT NFT:
sending instructions to a second computing device operated by a second entity thereby enabling the second computing device to interact with the at least one value of the at least one field of interest via the private data escrow, the at least one value of the at least one field of interest being unavailable for interaction to the second computing device via the at least some of the private data records.
2. The system of claim 1 , wherein the private data escrow is separate from the second computing device; and
wherein the authorized computing device includes at least one of the following: a data owner, a government, a corporation, an authentication server, and a device.
3. The system of claim 1 , wherein the authorization identifier comprises at least one of the following: a name, a universally unique identifier (UUID), a globally unique identifier (GUID), a hash, and a token.
4. The system of claim 1 , wherein the token owner identifier comprises at least one of the following: a name, a universally unique identifier (UUID), a globally unique identifier (GUID), a hash, an address associated with the notarized ledger, and a token.
5. The system of claim 1 , wherein the DAT NFT further comprises an authentication key of the authorized computing device and a data access key of the owner of the DAT NFT.
6. The system of claim 1 , wherein the DAT NFT comprises a pointer to off-ledger data.
7. The system of claim 1 , wherein the DAT NFT is a member of a multi-token set.
8. The system of claim 1 , wherein the DAT NFT comprises a bearer token.
9. The system of claim 1 , wherein the DAT NFT comprises a non-transferable token.
10. The system of claim 1 , wherein the DAAP provides exclusive access to the at least some of the private data records for the owner of the DAT NFT.
11. The system of claim 1 , wherein the DAAP includes a homomorphic context.
12. The system of claim 11 , wherein the homomorphic context configures the second computing device to interact with the at least one value of the at least one field of interest via a homomorphic workspace external to the second computing device.
13. The system of claim 12 , wherein the homomorphic workspace is external to the at least one memory and the at least one private database.
14. The system of claim 1 , wherein the DAAP comprises serialized instructions targeting execution on at least the second computing device.
15. The system of claim 1 , wherein the DAAP is stored in an encrypted format and includes encoded information that the second computing device uses to interact with the at least one value.
16. The system of claim 1 , wherein the DAAP comprises a smart contract.
17. The system of claim 1 , wherein the DAAP comprises data access restriction criteria restricting data access of the owner of the DAT NFT to the at least some of the private data records.
18. The system of claim 17 , wherein at least one criterion of the data access restriction criteria is based on an access counter.
19. The system of claim 17 , wherein at least one criterion of the data access restriction criteria is based on time.
20. The system of claim 17 , wherein at least one criterion of the data access restriction criteria is based on a location of the second computing device.
21. The system of claim 17 , wherein at least one criterion of the data access restriction criteria comprises at least one token termination criterion.
22. The system of claim 1 , wherein the DAAP comprises a data access application program interface (API).
23. The system of claim 1 , wherein the DAT NFT comprises a for-fee token.
24. The system of claim 23 , wherein the DAT NFT is generated upon the authorized computing device receiving a fee from the owner of the DAT NFT.
25. The system of claim 1 , wherein the operations further include causing at least some of the private data to be escrowed in the private data escrow in a private data store off the notarized ledger.
26. The system of claim 25 , wherein the DAT NFT represents the private data escrow.
27. The system of claim 1 , wherein the operations further include updating an SNMP MIB based on a transaction associated with DAT NFT and associated with the notarized ledger.
28. The system of claim 27 , wherein the operations further including causing a dashboard to render the updated SNMP MIB associated with the notarized ledger DAT NFT transaction.
29. The system of claim 1 , wherein the operations further comprise:
receiving a request to change ownership of the DAT NFT to the second entity;
recording an update to the DAT NFT on the corresponding notarized ledger, the update indicating that the second entity is a new owner of the DAT NFT and recorded without providing access to the private data records to the second entity;
receiving, from a computing device operated by the second entity, an access request that includes the field of interest; and
enabling, upon authentication and validation of the new owner and according to another execution of the DAAP within the DAT NFT, the computing device operated by the second entity to interact with the at least one value of the at least one field of interest via the private data escrow.
30. The system of claim 1 , wherein the operations further comprise:
recording an update to the DAT NFT on the corresponding notarized ledger, the update associated with using the DAT NFT to access the at least one field of interest via the private data escrow.