Methods and systems for de-centralized data sharing with enforced data usage control for cross-party data analytics

A method of controlling data usage in a distributed environment among multiple entity domains, the method comprising the steps of:

• receiving, in a local entity domain, an instruction to instantiate a first analytics task, wherein the first analytics task processes one or more data inputs to produce first output data, the first analytics task having been dispatched to the local entity domain by a remote entity domain based on an interpretation of a data usage policy created in the local entity domain indicating that one of the data inputs for the first analytics task must remain in the local entity domain;
• instantiating the first analytics task in the local entity domain;
• and
• executing the first analytics task in the local entity domain to produce the first output data;
• and
• sending the first output data to the remote entity domain.

A data usage control system, comprising:

• a first entity domain comprising a first trusted environment entity;
• and
• a second entity domain comprising a second trusted environment entity;
• wherein the first trusted environment entity is configured to:
• receive, from a first data consumer associated in the first entity domain, a data consuming application comprising or identifying at least a first analytics task, wherein the first analytics task processes one or more data inputs to produce first output data;
• determine availability of the one or more data inputs;
• interpret one or more data usage policies to determine atomic actions to be executed, wherein at least one of the data usage policies indicates that one of the data inputs for the first analytics task must remain in the second entity domain, wherein the second entity domain is selected based on the determined availability of the one or more data inputs;
• and
• execute the atomic actions, wherein the atomic actions include dispatching the first analytics task to the second entity domain for remote execution of the first analytics task and receiving the first output data of the first analytics task from the second entity domain.