Secure data sharing

A client device for secure data sharing, the client device comprising at least a processor to implement a data management interface adapted to:

• store, by a data owner or an entity authorized by the data owner, in a decentralized data storage, data in an encrypted format;
• store, in a blockchain, information indicating the data owner and a reference to the data stored in the decentralized data storage;
• receive a user input from the data owner;
• perform a modification, based on the user input, of identities of one or more authorized users or access control information indicating specified actions which are authorized to be performed by specified individuals of the one or more authorized users;
• store, by the data owner, in the blockchain, information received via the user input from the data owner indicating consent given to one or more authorized users for using the data, the consent indicating:
• the identities of the one or more authorized users,
• one or more time periods during which the one or more authorized users are authorized to access the data,
• the access control information indicating specified actions which are authorized to be performed by specified individuals of the one or more authorized users, and
• the modification of the identities of the one or more authorized users or the access control information;
• receive an input from a particular authorized user of the one or more authorized users to perform an action on the data stored in the decentralized data storage in response to determining that the particular authorized user has the consent to perform the action;
• and
• access the decentralized data storage to perform an action on the data stored in the decentralized data storage, based on the user input, in response to obtaining the reference to the location of the data and further in response to determining that authorized user has the consent to perform the action.

A non-transitory storage medium comprising computer-readable instructions which are executable by a computing device to:

• store, by a data owner or an entity authorized by the data owner, via a data management user interface, in a decentralized data storage, data in an encrypted format;
• store, via the data management user interface, in a blockchain, information indicating the data owner and a reference to a location of the data stored in the decentralized data storage;
• receiving, via the data management user interface, a user input from the data owner;
• performing a modification, via the data management user interface and based on the user input, of identities of one or more authorized users or access control information indicating specified actions which are authorized to be performed by specified individuals of the one or more authorized users;
• store, by the data owner, via the data management user interface, in the blockchain, information received via the user input from the data owner, the information indicating consent given to one or more authorized users for using the data, the consent indicating:
• the identities of the one or more authorized users,
• one or more time periods during which the one or more authorized users are authorized to access the data,
• the access control information indicating specified actions which are authorized to be performed by specified individuals of the one or more authorized users, and
• the modification of the identities of the one or more authorized users or the access control information;
• receiving, via the data management user interface, an input from a particular authorized user of the one or more authorized users to perform an action on the data stored in the decentralized data storage in response to determining that the particular authorized user has the consent to perform the action;
• and
• accessing, via the data management user interface, the decentralized data storage to perform the action on the data stored in the decentralized data storage in response to obtaining the reference to the location of the data and further in response to determining that authorized user has the consent to perform the action.