Consent management apparatus and system

A computer implemented method for authenticating a signature for a consent requiring permission of a person for a service required by the person from a service provider, comprising:

• a. providing a computer implemented consent management service application programming interface (CMS API), a computer implemented consent requesting API (CR API), and a computer implemented consent authorizing application (CAA);
• b. wherein a person requires services from a service provider, and wherein the services require consent from the person;
• c. wherein an instruction is issued to the CR API requesting the signature of the person within the context the services required;
• d. wherein the CR API issues an instruction to the CMS API, and wherein the CMS API generates a signature context ID, and wherein the signature context ID is used to generate a QR code, wherein the signature context ID is linked to identifying data on the person and the nature of the consent required;
• e. wherein the QR code is communicated to the CR API, and the CR API displays the QR code on a computer screen or sends a text message containing the signature context ID to a smartphone or other device used by the person;
• f. wherein the person receives instructions in the CAA which is installed and running on a smartphone or other computing device to scan the QR code or respond to the message, and an interface is then provided for the person to create a signature for consent;
• g. wherein the person scans the QR code in the CAA with the smartphone or other computing device, or wherein the person responds to the text message, and wherein the CAA opens a signature interface that captures a signature from the person signifying consent from the person to receive services from the service provider, such that the signature is linked to the signature context ID;
• h. wherein a computational representation of the signature is transmitted to the CMS API, and the CMS API creates a database record containing the signature context ID and the captured signature, such that the database record constitutes consent from the person to receive the services of the service provider, and the database record is stored in a database such that each record in the database is immutable and each record in the database is securely linked to at least one previously created record in the database;
• and
• i. wherein the service provider queries the database to receive the consent for the service provided by it, and wherein the service provider is assured that the consent is authentic.