Data encryption at a personal data sharing platform

A system, comprising:

• a memory;
• and
• a processing device, coupled to the memory, configured to perform operations comprising:
• receiving, from a first client device associated with a first user account of a personal data sharing platform, a request for a dataset having attributes associated with personal data;
• encrypting a first private key, which forms a key pair with a first public key, using a second public key, wherein the second public key and a second private key are associated with the first user account;
• encrypting the encrypted first private key using a personal data sharing platform key to generate a cascade-encrypted first private key;
• receiving, from a second client device associated with a second user account of the personal data sharing platform, a first dataset comprising one or more personal data values that correspond to the attributes of the requested dataset, wherein the one or more personal data values are encrypted using at least the first public key;
• generating partially decrypted information for obtaining the first private key by decrypting an outer layer of the cascade-encrypted first private key to generate the encrypted first private key;
• and
• responsive to the request for the dataset having the attributes associated with personal data, providing, to the first client device, the first dataset comprising the one or more encrypted personal data values and the partially decrypted information comprising the encrypted first private key for decryption using the second private key, wherein the first private key is configured to at least partially decrypt the one or more encrypted personal data values.

A non-transitory computer-readable storage medium comprising instructions that, responsive to execution by a processing device, cause the processing device to perform operations comprising:

• receiving, from a first client device associated with a first user account of a personal data sharing platform, a request for a dataset having attributes associated with personal data;
• encrypting a first private key, which forms a key pair with a first public key, using a second public key, wherein the second public key and a second private key are associated with the first user account;
• encrypting the encrypted first private key using a personal data sharing platform key to generate a cascade-encrypted first private key;
• receiving, from a second client device associated with a second user account of the personal data sharing platform, a first dataset comprising one or more personal data values that correspond to the attributes of the requested dataset, wherein the one or more personal data values are encrypted using at least the first public key;
• generating partially decrypted information for obtaining the first private key by decrypting an outer layer of the cascade-encrypted first private key to generate the encrypted first private key;
• and
• responsive to the request for the dataset having the attributes associated with personal data, providing, to the first client device, the first dataset comprising the one or more encrypted personal data values and the partially decrypted information comprising the encrypted first private key for decryption using the second private key, wherein the first private key is configured to at least partially decrypt the one or more encrypted personal data values.