Concept for sharing data

Method for a data owner owning data to grant access of at least one user to the data, wherein the data is to be published by a data publisher, the method comprising:

• deriving, by the data owner, a publisher key based on an owner key held by the data owner and providing the publisher key to the data publisher to enable the data publisher to derive a symmetric access key based on the publisher key and at least one attribute of a subset of the data and encrypting the subset with the symmetric access key;
• deriving, by the data owner, the symmetric access key based on the owner key and the attribute, providing the symmetric access key to the user to enable the user to decrypt using the symmetric access key the subset encrypted by the data publisher.

Method for a data publisher to encrypt data to be published, wherein the data is legally owned by a data owner, the method comprising:

• deriving a symmetric access key from a publisher key, which is provided by the data owner, and at least one attribute of a subset of the data, wherein the publisher key is derived from an owner key of the data owner;
• and
• encrypting at least one subset of the data with the symmetric access key.