Execution of application in a container within a scope of user-granted permission

In a computing system that is implemented in a decentralized network that implements a distributed ledger, the distributed ledger being configured to back one or more decentralized identities (DID) for one or more users of the computing system, a method for executing an application within a scope of user-granted permission, the method comprising:

• receiving a request for using data stored in a data storage that is associated with an owner of a first decentralized identifier (DID) as one or more input(s) of an application associated with an entity to generate one or more result(s);
• identifying one or more characteristics of the application associated with the entity;
• based on the identified one or more characteristics, determining a scope of permission to access the requested data that is to be used by the application;
• and
• granting the scope of permission to a container where the application is stored or is to be stored, the container being isolated from both the entity and the data storage of the owner of the first DID, the container being configured to execute the application to generate one or more results based on the requested data received by the container.

A computing system comprising:

• one or more processors;
• and
• one or more computer-readable media having thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to:
• receive data from a data storage that is associated with an owner of a first decentralized identifier (DID), the data being received based on a scope of permission granted by the owner of the first DID, the scope of permission allowing an application associated with an entity to use the received data as an input to the application;
• receive the application from the entity;
• cause an execution of the application using the received data as the input to generate one or more results;
• and
• provide the one or more results to at least one of the entity and the owner of the first DID,
• wherein the computing system is isolated from both the entity and the owner of the DID.