Secure sharing of personal data in distributed computing zones
A method, computer program product and computer system to securely share personal data is provided. A processor receives a request to initiate a personal data share between a user and a third-party. A processor retrieves a module from a repository. A processor executes the module in an isolated workload of a distributed computing platform. A processor sends the personal data share to the third party.
1. A method comprising:
receiving, by one or more processors, a request to initiate a personal data share between a user and a third-party;
identifying, by the one or more processors, the third-party with whom the user wishes to initiate the personal data share;
identifying, by the one or more processors, in the request, a module used to initiate the personal data share;
identifying, by the one or more processors, an identifier associated with the user to identify an isolated zone in which a user's personal data resides;
retrieving, by one or more processors, the module from a repository;
verifying, by the one or more processors, the module prior to loading the module into a user's local module;
executing, by the one or more processors, the module in the isolated zone;
obtaining approval of the user, by the one or more processors, for the personal data share;
sending, by the one or more processors, the personal data share to the third-party;
indicating a validity period, by the one or more processors, for the personal data share; and
revoking the personal data share, by the one or more processors, when the validity period ends.
2. The method of claim 1 , wherein the module from the repository includes definitions regarding which components of the user's personal data to be included in the personal data share with the third-party.
3. The method of claim 2 , the method further comprising:
executing, by the one or more processors, the module in a test workload of the distributed computing platform;
monitoring, by the one or more processors, accessed data by the module during the executing of the module; and
in response to the accessed data by the module including data not indicated by the definitions in the module, determining, by the one or more processors, that the module is untrusted.
4. The method of claim 2 , wherein sending the personal data share to the third-party includes providing verification of the user's personal data.
5. The method of claim 4 , the method further comprising:
receiving from the third-party, by the one or more processors, a verification hash message, wherein the verification hash message is based on information collected from the third-party and provided by the user to the third-party.
6. The method of claim 5 , the method further comprising:
generating, by the one or more processors, a user data hash message based, in part, on the user's personal data;
verifying, by the one or more processors, the verification hash message based on a comparison with the user data hash message; and
sending to the third-party, by the one or more processors, a verification approved message.
7. The method of claim 1 , wherein the third-party provides a plurality of modules associated with different types of data share scenarios.
8. A computer program product comprising:
one or more computer-readable storage media and program instructions stored on the one or more computer-readable storage media, the program instructions comprising:
program instructions to receive a request to initiate a personal data share between a user and a third-party;
program instructions to identify the third-party with whom the user wishes to initiate the personal data share;
program instructions to identify, in the request, a module used to initiate the personal data share;
program instructions to identify an identifier associated with the user to identify an isolated zone in which a user's personal data resides;
program instructions to retrieve the module from a repository;
program instructions to verify the module prior to loading the module into a user's local module;
program instructions to execute the module in the isolated zone;
program instructions to obtain approval of the user for the personal data share;
program instructions to send the personal data share to the third-party;
program instructions to indicate a validity period for the personal data share; and
program instructions to revoke the personal data share when the validity period ends.
9. The computer program product of claim 8 , wherein the module from the repository includes definitions regarding which components of the user's personal data to be included in the personal data share with the third-party.
10. The computer program product of claim 9 , the program instructions further comprising:
program instructions to execute the module in a test workload of the distributed computing platform;
program instructions to monitor accessed data by the module during the executing of the module; and
program instructions to, in response to the accessed data by the module including data not indicated by the definitions in the module, determine that the module is untrusted.
11. The computer program product of claim 9 , wherein sending the personal data share to the third-party includes providing verification of the user's personal data.
12. The computer program product of claim 11 , the program instructions further comprising:
program instructions to receive from the third-party a verification hash message, wherein the verification hash message is based on information collected from the third-party and provided by the user to the third-party.
13. The computer program product of claim 12 , the program instructions further comprising:
program instructions to generate a user data hash message based, in part, on the user's personal data;
program instructions to verify the verification hash message based on a comparison with the user data hash message; and
program instructions to send to the third-party a verification approved message.
14. The computer program product of claim 8 , wherein the third-party provides a plurality of modules associated with different types of data share scenarios.
15. A computer system comprising:
one or more computer processors;
one or more computer readable storage media; and
program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising:
program instructions to receive a request to initiate a personal data share between a user and a third-party;
program instructions to identify the third-party with whom the user wishes to initiate the personal data share;
program instructions to identify, in the request, a module used to initiate the personal data share;
program instructions to identify an identifier associated with the user to identify an isolated zone in which a user's personal data resides;
program instructions to retrieve the module from a repository;
program instructions to verify the module prior to loading the module into a user's local module;
program instructions to execute the module in the isolated zone;
program instructions to obtain approval of the user for the personal data share;
program instructions to send the personal data share to the third-party;
program instructions to indicate a validity period for the personal data share; and
program instructions to revoke the personal data share when the validity period ends.
16. The computer system of claim 15 , wherein the module from the repository includes definitions regarding which components of the user's personal data to be included in the personal data share with the third-party.
17. The computer system of claim 16 , the program instructions further comprising:
program instructions to execute the module in a test workload of the distributed computing platform;
program instructions to monitor accessed data by the module during the execution of the module; and
program instructions to, in response to the accessed data by the module including data not indicated by the definitions in the module, determine that the module is untrusted.
18. The computer system of claim 16 , wherein sending the personal data share to the third-party includes providing verification of the user's personal data.
19. The computer system of claim 18 , the program instructions further comprising:
program instructions to receive from the third-party a verification hash message, wherein the verification hash message is based on information collected from the third-party and provided by the user to the third-party.
20. The computer system of claim 19 , the program instructions further comprising:
program instructions to generate a user data hash message based, in part, on the user's personal data;
program instructions to verify the verification hash message based on a comparison with the user data hash message; and
program instructions to send to the third-party a verification approved message.