Multicast Encryption Scheme for Data-Ownership Platform

A system comprising:

• a memory;
• and
• at least one processor coupled to the memory and configured to perform operations comprising:
• receiving a first input associating a first set of subscribers with a first data stream published by a data-stream publisher device;
• loading a first cryptographic key;
• transmitting a first confirmation, indicating that the first cryptographic key is ready for use;
• releasing, via a key-proxy service, the first cryptographic key to at least the first set of subscribers comprising a first subscriber device;
• receiving a second input, from a publishing user, associating a second set of subscribers with the first data stream published by the data-stream publisher device, wherein the second set of subscribers excludes the first subscriber device;
• loading a second cryptographic key after a predetermined amount of time has elapsed, wherein the second cryptographic key is ineffective to decrypt data that can be decrypted using the first cryptographic key;
• transmitting a second confirmation, indicating that the second cryptographic key is ready for use;
• and
• releasing the second cryptographic key to at least the second set of subscribers.

An apparatus for publishing an encrypted data stream, the apparatus comprising:

• at least one memory device configured to store computer-executable instructions;
• and
• at least one computer processor communicatively coupled with the at least one memory, the at least one computer processor capable of being configured, via at least the computer-executable instructions, to perform operations comprising:
• receiving, from source external to the apparatus, a first cryptographic key associated with a first set of subscribers;
• encrypting at least one first data payload, wherein the at least one first data payload, once encrypted, requires the first cryptographic key for any subsequent decryption of the at least one first data payload;
• publishing, via a data stream, the at least one first data payload as encrypted;
• receiving, from source external to the apparatus, a second cryptographic key associated with a second set of subscribers, responsive to a determination that the second set of subscribers differs from the first set of subscribers, wherein the first set of subscribers comprises a revoked subscriber;
• encrypting at least one second data payload, wherein the at least one second data payload, once encrypted, requires the second cryptographic key for any subsequent decryption of the at least one second data payload, and wherein the first cryptographic key is ineffective to decrypt the at least one second data payload;
• and
• publishing, via the data stream, the at least one second data payload as encrypted, wherein the first data payload and the second data payload comprise a first data point and a second data point, respectively, wherein the first data point and the second data point are collected from at least one sensor on-board an edge device, and wherein the at least one sensor is communicatively coupled with the at least one computer processor.