Receiving information through a zero-knowledge data management network

A method, comprising:

• participating, by a particular recipient, in a data storage system, wherein:
• i) a storage server is configured to obtain and store source-encrypted source data received from a source, the source-encrypted source data comprising source data encrypt-ed by the source with a source encryption key of the source, wherein the storage server is unable to decrypt the source-encrypted source data;
• ii) the source is configured to establish and send a recipient-based rekeying key to the storage server, the recipient-based rekeying key established through an encrypting combination of a source decryption key of the source and a recipient public key of the particular recipient;
• and
• iii) the storage server is further configured to re-encrypt the source-encrypted source data with the recipient-based rekeying key in response to a request to share the source data with the particular recipient, the re-encrypting resulting in recipient-based encrypted source data that is the source data encrypted with the recipient public key of the particular recipient, wherein the storage server is unable to decrypt the recipient-based encrypted source data;
• receiving, at the particular recipient from the storage server, the recipient-based encrypted source data;
• decrypting, by the particular recipient, the recipient-based encrypted source data using a recipient private key of the particular recipient to obtain the source data;
• and
• processing, by the particular recipient, the decrypted source data,
• wherein an intermediate reporting device is configured to receive a set of transaction-based information, the set of transaction-based information readable by the intermediate reporting device, wherein the intermediate reporting device is configured to:
• receive the recipient-based encrypted source data, the recipient-based encrypted source data unreadable by the intermediate reporting device;
• read the set of information;
• create a report based on the set of information;
• package the recipient-based encrypted source data with the report;
• and
• send the packaged report and recipient-based encrypted source data to the particular recipient;
• wherein the method further comprises:
• receiving the packaged report and recipient-based encrypted source data from the intermediate reporting device;
• and
• processing the report with the source data decrypted from the recipient-based encrypted source data.