Blockchain network to protect identity data attributes using data owner-defined policies

A computer system for applying data owner-defined data protection policies for identity data security within a blockchain environment, the computer system comprising:

• a bus system;
• a storage device connected to the bus system, wherein the storage device stores program instructions;
• and
• a processor connected to the bus system, wherein the processor executes the program instructions to:
• receive a data sharing request for an identity data attribute corresponding to a data owner from a data consumer;
• retrieve a data protection policy defined by the data owner that corresponds to the identity data attribute requested by the data consumer from a blockchain;
• apply the data protection policy to the identity data attribute requested by the data consumer to determine amount of data sharing with the data consumer;
• and
• send a cryptographic key transmission request to a key management server to transmit a cryptographic key corresponding to the identity data attribute to the data consumer for decrypting the identity data attribute, wherein access to identity data is provided granularly at an attribute level by associating multiple cryptographic keys with the identity data of the data owner, with each cryptographic key corresponding to a different data attribute of the identity data.

A computer program product for applying data owner-defined data protection policies for identity data security within a blockchain environment, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:

• receiving, by the computer, a data sharing request for an identity data attribute corresponding to a data owner from a data consumer;
• retrieving, by the computer, a data protection policy defined by the data owner that corresponds to the identity data attribute requested by the data consumer from a blockchain;
• applying, by the computer, the data protection policy to the identity data attribute requested by the data consumer to determine amount of data sharing with the data consumer;
• and
• sending, by the computer, a cryptographic key transmission request to a key management server to transmit a cryptographic key corresponding to the identity data attribute to the data consumer for decrypting the identity data attribute, wherein access to identity data is provided granularly at an attribute level by associating multiple cryptographic keys with the identity data of the data owner, with each cryptographic key corresponding to a different data attribute of the identity data.