System and method for controlling data using containers

A method for managing secured data containers, the method comprising:

• receiving a request for data container creation from another electronic device;
• retrieving data related to the request for data container creation;
• retrieving one or more parameters constraining use of the data;
• encrypting the data using a public encryption key;
• encoding the encrypted data into a data storage area of a data container;
• encoding the one or more parameters constraining use of the data into a machine readable parameter storage area of the data container;
• assigning a Universal Unique Identifier (UUID) to the data container;
• and
• registering the data container in a data container registry based on the UUID of the data container, wherein the data container registry provides for linking and versioning of the data container.

An electronic device for managing access to secured data containers, the electronic device comprising:

• at least one network interface;
• at least one memory storing executable instructions;
• and
• at least one processor coupled to the at least one network interface and the at least one memory, wherein the electronic device is disposed in an edge node at a network edge, and wherein execution of the executable instructions by the at least one processor causes the electronic device to:
• receive, via the network interface, a request for data container creation from another electronic device;
• receive, via the at least one network interface, data related to the request for data container creation;
• generate a command including the request for container creation and the received data;
• transmit, via the at least one network interface, the command to a master node;
• receive a transmission from the master node including a data container and a Universal Unique Identifier (UUID) associated with the data container,
• wherein data in the data container is encrypted, and
• wherein the data container includes the received data encoded into a data storage area of the data container and one or more parameters constraining use of the data encoded into a machine readable parameter storage area of the data container;
• cache the data container in association with the UUID in a container cache disposed at the edge node;
• receive, from a requesting electronic device, an access request related to data in the cached data container;
• determine whether to grant or deny the access request based on the one or more parameters constraining use of the data stored in the data container and based on at least one of a requester identity, temporal parameters, location parameters, functional parameters, proxy parameters, tracking parameters, aggregation parameters, and duration parameters;
• log a result of the access request in an audit log;
• retrieve, based on granting the access request, the data container from the container cache by referencing the UUID of the data container;
• transmit the data container to the requesting electronic device;
• receive a deletion request from the other electronic device to delete the data container;
• delete the data container in response to the request to delete the data container;
• log the deletion of the data container in the audit log;
• and
• transmit, to the master node, a command to disable the UUID of the data container in a data container registry, wherein disabling the UUID of the data container restricts access to the data container by any other devices still storing the data container.