Apparatus and Method for Controlling Access to User Information

Abstract

An apparatus and method control access to user information by generating a record of user information that includes the user information and appending the record of user information to a blockchain. A hash is assigned to the user information and the record of user information is encrypted prior to appending the record of user information to the blockchain. A record of authorization is received and appended to the blockchain. The record of authorization includes the user information, an identification of a third-party application authorized to read the record of authorization, and an access expiration parameter that places a restriction or limitation on access to the user information.

1 . A method of controlling access to user information, the method comprising:
 generating a record of user information that includes the user information;   appending the record of user information to a blockchain;   receiving a record of authorization that includes the user information, an identification of a third-party application authorized to read the record of authorization, and an access expiration parameter that places a restriction on access to the user information; and   appending the record of authorization to the blockchain.   
     
     
         2 . The method of  claim 1 , wherein generating a record of user information comprises:
 receiving one or more inputs corresponding to the user information; and   assigning a hash to the user information.   
     
     
         3 . The method of  claim 1 , further comprising encrypting the record of user information prior to appending the record of user information to the blockchain. 
     
     
         4 . The method of  claim 1 , further comprising:
 receiving a record of endorsement of the record of user information; and   appending the record of endorsement to the blockchain.   
     
     
         5 . The method of  claim 4 , wherein the record of endorsement confirms the veracity of the user information and includes information comprising a signature of verification, a verification expiration parameter that denotes when the verification expires, and a hash assigned to the user information. 
     
     
         6 . The method of  claim 1 , wherein the record of authorization comprises:
 an identification portion that includes the identification of the third-party application and a hash corresponding to the user information; and   a message portion that includes the user information, a public key of the third-party application, and the access expiration parameter.   
     
     
         7 . The method of  claim 6 , wherein the message portion of the record of authorization is encrypted. 
     
     
         8 . The method of  claim 1 , wherein the user information included in the record of authorization corresponds to the user information included in the record of user information appended to the blockchain. 
     
     
         9 . The method of  claim 1 , further comprising:
 reading the record of authorization; and   determining to store the user information based on the access expiration parameter.   
     
     
         10 . An apparatus for controlling access to user information, the apparatus comprising:
 a network interface;   a memory; and   a processor coupled to the network interface and the memory and configured to:
 generate a record of user information that includes the user information; 
 append the record of user information to a blockchain; 
 receive a record of authorization that includes the user information, an identification of a third-party application authorized to read the record of authorization, and an access expiration parameter that places a restriction on access to the user information; and 
 append the record of authorization to the blockchain. 
   
     
     
         11 . The apparatus of  claim 10 , wherein the processor generates a record of user information by being further configured to:
 receive one or more inputs corresponding to the user information; and   assign a hash to the user information.   
     
     
         12 . The apparatus of  claim 10 , wherein the processor is further configured to encrypt the record of user information prior to appending the record of user information to the blockchain. 
     
     
         13 . The apparatus of  claim 10 , wherein the processor is further configured to:
 receiving a record of endorsement of the record of user information; and   appending the record of endorsement to the blockchain.   
     
     
         14 . The apparatus of  claim 13 , wherein the record of endorsement confirms the veracity of the user information and includes information comprising a signature of verification, a verification expiration parameter that denotes when the verification expires, and a hash assigned to the user information. 
     
     
         15 . The apparatus of  claim 10 , wherein the record of authorization comprises:
 an identification portion that includes the identification of the third-party application and a hash corresponding to the user information; and   a message portion that includes the user information, a public key of the third-party application, and the access expiration parameter.   
     
     
         16 . The apparatus of  claim 15 , wherein the message portion of the record of authorization is encrypted. 
     
     
         17 . The apparatus of  claim 10 , wherein the user information included in the record of authorization corresponds to the user information included in the record of user information appended to the blockchain. 
     
     
         18 . A mechanism for controlling access to user information, the mechanism comprising:
 an enrollment module configured to generate a record of user information that includes the user information, and append the record of user information to a blockchain; and   an authorization module configured to receive a record of authorization, and append the record of authorization to the blockchain, wherein the record of authorization includes the user information, an identification of a third-party application authorized to read the record of authorization, and an access expiration parameter that places a restriction on access to the user information.   
     
     
         19 . The mechanism of  claim 18 , wherein the enrollment module is further configured to encrypt the record of user information prior to appending the record of user information to the blockchain. 
     
     
         20 . The mechanism of  claim 18  an endorsement module configured to receive a record of endorsement of the record of user information, and append the record of endorsement to the blockchain.