Computer system and method for message routing

A computer-implemented method for message routing in a computer system with a plurality of communication modules comprising:

• maintaining, by a controller module, a graph defining communication relations between the plurality of communication modules, the communication relations defining that a pre-condition check occurs for each message to be exchanged between any one of the modules of the system wherein pre-conditions are controlled by data owners to define privacy constraints for data in a particular message, define under which conditions the data can be used, and define at which aggregation level the data can be shared, the aggregation level indicating a permission to aggregate the data associated with a first data owner with data sets from other messages associated with other data owners, to control under which conditions the aggregated data is used by third parties, each communication relation defining a particular message type for a particular pair of communication modules out of the plurality of communication modules;
• receiving, by a first communication module, a message wherein the received message has a message type and is associated with at least one pre-condition;
• checking, in accordance with the graph, if the at least one pre-condition includes an acceptance condition which is fulfilled;
• if the acceptance condition is not fulfilled, ignoring the received message;
• if the acceptance condition is fulfilled, checking, in accordance with the graph, if the at least one pre-condition includes a generating condition which is fulfilled;
• if the generating condition is not fulfilled, ignoring, by the first communication module, the accepted message;
• if the generating condition of the pre-condition is fulfilled, generating, by the first communication module, a generated message, directed to at least a second communication module or an external data consumer in accordance with the graph;
• and
• iteratively repeating the preceding steps starting with the receiving step for further communication modules in that for each iteration the at least second communication module is treated as the first communication module and at least a further module is treated as the at least second communication module in accordance with the graph until a last communication module of the computer system is reached wherein the last communication module has a communication relation with the external data consumer.

A non-transitory computer program product including a set of instructions that when loaded into a memory of a computing device and executed by at least one processor of the computing device causes the computing device to execute the steps of:

• maintaining, by a controller module, a graph defining communication relations between a plurality of modules, the communication relations defining that a pre-condition check occurs for each message to be exchanged between any one of the modules, wherein a particular pre-condition includes at least one static rule or event in relation to respective messages having a given message type and carrying data originating from at least one external data source, wherein pre-conditions are controlled by data owners to define privacy constraints for data in a particular message at an aggregation level in which the data can be used, the aggregation level indicating a permission to aggregate the data associated with a first data owner with data from other messages associated with the graph and other data owners, each communication relation defining a particular message type for a particular pair of modules, the controller module further configured to update the modules of the system with information associated with each particular message communication module for performing the pre-condition checks for the respective messages, wherein the particular pre-condition check occurs before the corresponding message is generated;
• receiving, by a first module, a message wherein the received message has a message type and is associated with at least one pre-condition;
• checking, in accordance with the graph, if the at least one pre-condition includes an acceptance condition which is fulfilled;
• if the acceptance condition is not fulfilled, ignoring the received message;
• if the acceptance condition is fulfilled, checking, in accordance with the graph, if the at least one pre-condition includes a generating condition which is fulfilled;
• if the generating condition is not fulfilled, ignoring, by the first module, the accepted message;
• if the generating condition is fulfilled, generating, by the first module, a generated message, directed to at least a second module of the plurality of communication modules or directed to a related external data consumer in accordance with the graph;
• and
• iteratively repeating the preceding steps starting with the receiving step for further modules in that for each iteration the at least second module is treated as the first module and at least a further module is treated as the at least second module in accordance with the graph until a last module of the computer system is reached wherein the last module has a communication relation with the external data consumer.