CPC H04L 63/10 (2013.01) [H04L 9/3218 (2013.01)] | 16 Claims |
1. A computer-implemented method comprising:
receiving, by an access gateway system from a first client device, a first request for a computer resource to execute a computer program using first data stored by the computer resource;
receiving, from the first client device, second data representing a zero-knowledge proof of possession of a first credential;
verifying, using the second data, that the first client device likely corresponds to the first credential;
in response to verifying that the first client device likely possesses the first credential, retrieving, from a distributed ledger system, policy data corresponding to the first credential;
determining that the policy data authorizes a possessor of the first credential access to the first data;
analyzing the computer program to determine a first function to be performed using the first data;
determining that the policy data authorizes the possessor of the first credential to perform the first function; and
in response to determining that the policy data authorizes access to the first data and performance of the first function causing the computer resource to:
execute the computer program using the first data to generate results data, and
send the results data to the first client device.
|