Distributed data rights management for peer data pools

A computer-implemented method comprising:

• from a data consumer system associated with an entity, receiving a query to read data from a data pool;
• identifying, for the entity, a local instance of the data pool of a plurality of instances of the data pool, each instance stored on a corresponding data provider system, of a plurality of data provider systems, for a respective entity of a plurality of entities;
• based at least in part on the query, generating transaction proposal data to read data from the local instance of the data pool;
• using private security data uniquely associated with the entity, encrypting at least a portion of the transaction proposal data thereby generating encrypted transaction proposal data for the local instance of the data pool;
• in response to sending the encrypted transaction proposal data to a data provider system hosting the local instance of the data pool for the entity, receiving a response to the transaction proposal data, the response comprising one or more authorized data sets that satisfy the query;
• wherein the one or more authorized data sets are selected from a plurality of data sets based on the plurality of data sets satisfying the query and the one or more authorized data sets satisfying a set of rules;
• wherein the satisfying the set of rules is based on public security data of the entity successfully decrypting the encrypted transaction proposal data thereby re-generating the transaction proposal data and determining that the entity is authorized to use the one or more authorized data sets based on permission data associated with the plurality of data sets.

A system comprising one or more processors, one or more storage media storing one or more computer programs for execution by the one or more processors, the one or more computer programs configured to perform a method comprising:

• maintaining a plurality of instances of a data pool;
• wherein each instance of the data pool is stored on a corresponding data provider system of a plurality of data provider systems;
• wherein each data provider system of the plurality of data provider systems is associated with a different entity of a plurality of entities;
• receiving, from a system associated with an entity, of the plurality of entities, a write request to store a data entry into the data pool;
• based at least in part on the write request, generating transaction proposal data for the data entry;
• wherein the transaction proposal data includes authorization protocol data;
• wherein the authorization protocol data defines a plurality of rule sets, including a first rule set and one or more second rule sets;
• using private security data uniquely associated with the entity, encrypting at least a portion of the transaction proposal data thereby generating encrypted transaction proposal data;
• sending, to the plurality of data provider systems, the encrypted transaction proposal data for the plurality of data provider systems to generate a plurality of transactions to update the plurality of instances of the data pool with the data entry;
• wherein successfully decrypting the encrypted transaction proposal data by a public security data associated with the entity validates that the transaction proposal data was generated by the entity;
• wherein only a request, which satisfies the plurality of rule sets defined by the authorization protocol data is authorized to access the data entry;
• based on receiving a plurality of responses for the plurality of transactions for the transaction proposal data, sending a commit request for the plurality of transactions, thereby causing storing the data entry in the plurality of instances of the data pool.

A system comprising one or more processors, one or more storage media storing one or more computer programs for execution by the one or more processors, the one or more computer programs configured to perform a method comprising:

• from a data consumer system associated with an entity, receiving a query to read data from a data pool;
• identifying, for the entity, a local instance of the data pool of a plurality of instances of the data pool, each instance stored on a corresponding data provider system, of a plurality of data provider systems, for a respective entity of a plurality of entities;
• based at least in part on the query, generating transaction proposal data to read data from the local instance of the data pool;
• using private security data uniquely associated with the entity, encrypting at least a portion of the transaction proposal data thereby generating encrypted transaction proposal data for the local instance of the data pool;
• in response to sending the encrypted transaction proposal data to a data provider system hosting the local instance of the data pool for the entity, receiving a response to the transaction proposal data, the response comprising one or more authorized data sets that satisfy the query;
• wherein the one or more authorized data sets are selected from a plurality of data sets based on the plurality of data sets satisfying the query and the one or more authorized data sets satisfying a set of rules;
• wherein the satisfying the set of rules is based on public security data of the entity successfully decrypting the encrypted transaction proposal data thereby re-generating the transaction proposal data and determining that the entity is authorized to use the one or more authorized data sets based on permission data associated with the plurality of data sets.