Sourcing information for a zero-knowledge data management network

A method, comprising:

• obtaining, at a source, source data;
• encrypting, by the source, the source data into a format such that no device other than the source is able to read the source data;
• sending, from the source to a storage server, the source data in the format that no device other than the source is able to read;
• establishing, by the source, a conversion key for a particular recipient;
• and
• sending, from the source, the conversion key to the storage server, wherein a request sent to the storage server to share the source data with the particular recipient causes the storage server to i) convert, based on the conversion key, the source data into a format readable only by the particular recipient;
• and ii) send the source data in the format readable only by the particular recipient to the particular recipient
• wherein an attestation server is configured to attest to the source data, the method further comprising:
• establishing an attestation-server-based conversion key;
• and
• sending the attestation-server-based conversion key to the storage server, wherein an attestation request sent to the storage server to share the source data with the attestation server causes the storage server to i) convert the source data with the attestation-server-based conversion key into a format readable only by the attestation server, ii) send the source data in the format readable only by attestation server to the attestation server to cause the attestation server to i) read the source data, and ii) create a signed certificate based on the attestation server attesting to the source data, the signed certificate to allow a verifying recipient to confirm that the source data has been attested to by the attestation server based on the signed certificate.

A method for protecting an entity from compromising information needed for entity-based operations, the method comprising:

• sending, from an application, the information to one or more non-entity servers, wherein neither the entity nor the one or more non-entity servers have visibility of the information;
• sending, from the application, an attestation-server-based conversion key that allows the one or more non-entity servers to convert the information into a first format that is only visible to an attestation server, wherein the one or more non-entity servers provide the information to the attestation server in the first format based on the attestation-server-based conversion key such that the information is only visible to the attestation server to thereby cause the attestation server to i) read the information, ii) create a signed certificate based on the attestation server attesting to the information, the signed certificate to confirm that the information has been attested to by the attestation server based on the signed certificate, and iii) return the signed certificate to the one or more non-entity servers;
• and
• sending, from the application, a conversion key that allows the one or more non-entity servers to convert the information into a second format that is only visible to a particular recipient;
• wherein the one or more non-entity servers, upon request from the entity, provide i) the information to the particular recipient in the second format based on the conversion key such that the information is only visible to the particular recipient, and ii) the signed certificate such that the particular recipient can confirm that the information has been attested to by the attestation server based on the signed certificate.