Managing permissions to access user data in a distributed ledger trust network

A computer-implemented method, in a computer system that implements a distributed ledger trust network (“DLTN”) server configured to provide access to a DLTN, the method comprising:

• receiving, from a DLTN client, a request to access user data of a user, the user data of the user being stored in a blockchain of the DLTN in association with identity of the user, the user data having been encrypted using a set of encryption keys that are user-specific and context-specific, wherein the set of encryption keys is one of multiple sets of encryption keys specific to the user, each of the multiple sets of encryption keys being associated with a different context that is a different data category or different subset of other users;
• retrieving permission settings for the user data of the user, wherein the permission settings, depending on the different contexts, respectively, control access to the multiple sets of encryption keys;
• determining, based on the permission settings, that access is not granted for a reviewer to the user data of the user;
• and
• sending, to the DLTN client, an indication that access is not granted for the reviewer to the user data of the user.

A computer system comprising memory and one or more processing units, wherein the computer system implements a distributed ledger trust network (“DLTN”) server configured to perform operations comprising:

• sending, to a DLTN client, a previously-approved request from a reviewer to grant access to user data of a user, the user data of the user being stored in a blockchain of a DLTN in association with identity of the user, the user data having been encrypted using a set of encryption keys that are user-specific and context-specific, wherein the set of encryption keys is one of multiple sets of encryption keys specific to the user, each of the multiple sets of encryption keys being associated with a different context that is a different data category or different subset of other users;
• receiving, from the DLTN client, an indication of revocation of the previously-approved request;
• and
• updating permission settings for the user data of the user, wherein the permission settings, depending on the different contexts, respectively, control access to the multiple sets of encryption keys.