Authorization of access to a data resource in addition to specific actions to be performed on the data resource based on an authorized context enforced by a use policy

A computer-implemented method for authorizing and controlling use of a data resource, the method comprising:

• receiving a use request from a device to use a protected resource stored in a data node of a non-hierarchical data structure within a datastore,
• extracting from at least one of the data node and a security node having a referential attribute pointing to the data node a use policy comprising computer-readable instructions defining an authorized context for which the device can use the protected resource based on one or more contextual values;
• initiating a use transaction that executes the computer-readable instructions of the use policy to gather the one or more contextual values to determine whether the use request satisfies the authorized context for which the device can use the protected resource;
• maintaining an open transaction record of the use transaction and storing the one or more contextual values usable to determine the authorized context, the open transaction record associating the device with an active use of the protected resource;
• authorizing access to the protected resource by the device when it is determined that each of the one or more contextual values called by the use policy conforms to the authorized context for which the device may use the protected resource;
• generating a use terms from the computer-readable instructions defining the authorized context for the use request;
• returning to the device the use terms generated from the computer-readable instructions;
• and
• streaming the protected resource to the device for use by the device, a process of the device operable to monitor use of and enforce ephemerality of the protected resource by maintaining a ledger comprising data identifying the protected resource that is in active use by the device and a corresponding instance of the use terms associated with the authorized use of the protected resource.

A system comprising:

• one or more datastore servers, to:
• store a security node comprising an identifier of the security node and a referential attribute pointing to a data node comprising a protected resource,
• store the data node comprising the protected resource,
• extract from at least one of the data node and the security node a use policy comprising computer-readable instructions defining an authorized context for which a device can use the protected resource based on one or more contextual values, and
• transmit the protected resource to the device for use by the device upon receipt of an identifier of a protected resource;
• a transaction engine, to:
• initiate a use transaction that executes the computer-readable instructions of the use policy to gather the one or more contextual values to determine whether the use request satisfies the authorized context for which the device can use the protected resource;
• a mediation server, to:
• process the one or more contextual values,
• authorize access to the protected resource by the device when it is determined that the use request based on the one or more contextual values gathered by the use policy conforms to the authorized context for which the device may use the protected resource, and
• generate a use terms from the computer-readable instructions defining the authorized context for the use request;
• and
• the device, to:
• generate a redemption request comprising a first use key received by the device, and
• to monitor use of and enforce ephemerality of the protected resource by maintaining a ledger comprising data identifying the protected resource that is in active use by the device and a corresponding instance of the use terms associated with the authorized use of the protected resource.