Abstract: Systems and methods to control data access and usage by storing a permitted use of a set of data items. The permitted use identifies: a set of computer resources to be used to operate on the set of data items; rules for operating on the data items; and a data product to be generated from the set of computer resources operating on the set of data items. A project space provides the set of computer resources to operate on the set of data items according to the permitted use, wherein the data product is to be transferred from the project space to a user device separate from the system; and a usage monitor records operations of the set of computer resources on the set of data items in the project space for compliance with the permitted use. A data air-lock mechanism implements dynamic permissions rules based on actual usages.

Abstract: Multiple, separately administrated computer systems storing slices of the cipher text of a Personally Identifiable Information (PII) data item that is represented by a token. The token is used as a substitute of the data item. The data item is encrypted using a public key. To recover the data item, a complete set of the slices is retrieved from the separate computer systems and decrypted using the private key corresponding to the public key. Instances and circumstances of the usages of the data item can be recorded under the token in a blockchain ledger in connection with the retrieval and/or decryption of the cipher text. A data item owner may use the data item and the public key to recreate the cipher text, retrieve the token stored with the cipher text in the separate computer systems, and then query the ledger for a usage history of the data item.

Abstract: This disclosure relates to a system for managing access to compliant collaboration data. A collaboration data store stores collaboration data that is encrypted with a collaboration master key associated with a collaboration between one or more organisations. The collaboration master key is shared by the one or more organisations associated with the collaboration. A key store stores the collaboration master key associated with the collaboration. A governance module determines the collaboration data is compliant with a set of compliance rules and based on the determination selectively cause access to be granted to the collaboration master key. Access by the same entity is prevented to two or more of the collaboration data store, key store and governance module.

Abstract: This disclosure relates to sharing confidential data between a first data provider and a second data provider. A processor determines a correspondence between one of multiple first data records from the first data provider and one of multiple second data records from the second data provider. The multiple first data records are stored on a first data store accessible by the first data provider and protected by encryption from the second data provider. The multiple second data records are stored on a second data store accessible by the second data provider and protected by encryption from the first data provider. The processor creates a first reference to the one of the multiple first data records and a second reference to the one of the multiple second data records. The first reference is accessible by the second data provider and the second reference is accessible by the first data provider.

Abstract: This disclosure relates to a storage provider for storing first encrypted data associated with first meta tags from a first publisher and second encrypted data associated with second meta tags from a second publisher. The storage provider consolidates the first meta tags and the second meta tags to determine unencrypted consolidated meta tags. The storage provider then stores the encrypted first data associated with the unencrypted consolidated meta tags and stores the encrypted second data associated with the unencrypted consolidated meta tags. Since the meta tags are consolidated, less storage is required and the data and the meta tags can be stored more efficiently. This is an advantage over other methods that encrypt the meta tags and the data and therefore do not consolidate the meta tags.

Abstract: This disclosure relates to sharing confidential data between a first data provider and a second data provider. A processor determines a correspondence between one of multiple first data records from the first data provider and one of multiple second data records from the second data provider. The multiple first data records are stored on a first data store accessible by the first data provider and protected by encryption from the second data provider. The multiple second data records are stored on a second data store accessible by the second data provider and protected by encryption from the first data provider. The processor creates a first reference to the one of the multiple first data records and a second reference to the one of the multiple second data records. The first reference is accessible by the second data provider and the second reference is accessible by the first data provider.

Abstract: This disclosure relates to a storage provider for storing first encrypted data associated with first meta tags from a first publisher and second encrypted data associated with second meta tags from a second publisher. The storage provider consolidates the first meta tags and the second meta tags to determine unencrypted consolidated meta tags. The storage provider then stores the encrypted first data associated with the unencrypted consolidated meta tags and stores the encrypted second data associated with the unencrypted consolidated meta tags. Since the meta tags are consolidated, less storage is required and the data and the meta tags can be stored more efficiently. This is an advantage over other methods that encrypt the meta tags and the data and therefore do not consolidate the meta tags.