Computer implemented method, computer system, computer program and computer-readable storage medium for providing personal data anonymously or assign to a person

A computer implemented method for providing either anonymously or in a person-attributed manner personal data, offered by data subjects, to data requesting entities, characterized in that each data subject has a respective assigned data processing system, wherein the data processing system has a private key of an asymmetric cryptosystem, each data requesting entity having a respective assigned data request system, said data request system having a private key of an asymmetric cryptosystem, and with the method comprising the following steps:

• making available anonymous data records to the data requesting entities by collecting, in a data store, the anonymous data records generated by the data subjects by means of their data processing systems, each anonymous data record comprising the following:
• a unique public key being generated for the anonymous data record and belonging to the private key of the data processing system of the data subject who generated the anonymous data record,
• encrypted data generated by encrypting, by means of the unique public key, the personal data offered in the anonymous data record by the data subject who generated the anonymous data record, and
• open data enabling data request selection,
• furthermore, making available data request records to the data subjects by also collecting, in a data store, the data request records generated by the data requesting entities by means of their data request systems, each data request record comprising the following:
• a reference to an anonymous data record selected in response to a data request by a search in the open data of the anonymous data records performed by the data request system of the data requesting entity that generated the data request record, and
• a public key generated for the private key of the data request system of the data requesting entity that generated the data request record,
• and making available data provision records to the data requesting entities, by also collecting, in a data store, the data provision records generated by the data processing systems, each data provision record comprising the following:
• at least a portion of personal data decrypted from encrypted data contained in an anonymous data record identified by the data processing system that has recognized the anonymous data record identified based on a reference to the anonymous data record contained in one of the data request records as an own encrypted anonymous data record, said data being encrypted applying the public key included in the data request record, and
• information ensuring identifiability by the data requesting entity that generated the data request record containing the reference to the identified anonymous data record.