The major code projects of the Trust::Data Consortium are:
- OPAL (Open Algorithms, moving the algorithm to the data)
- Digital Personas and Identity
- MIT Enigma
- OpenPDS (personal data stores)
See our list of Active Repositories for technical details.
The OPAL project embraces three key concepts with the goal of making a broad array of data available for inspection and analysis without violating personal data privacy:
- Move the algorithm to the data. Performing algorithm-execution on data at the location of the data repository means that raw data never leaves its repository, and access to it is controlled by the repository owner. Only aggregate answers or "Safe Answers" are returned.
- Algorithms must be open. Algorithms must be openly published, studied and vetted by experts to be “safe” from violating privacy requirements and other needs stemming from the context of their use.
- Data is always in an encrypted state. Data must be in an encrypted state while being transmitted and during computation.
Through public-private partnerships, OPAL pilots are underway to assess the feasibility and value of statistical indicators derived through data analysis using the OPAL platform.
PERSONAS & IDENTITY
The identity problem today is a data-sharing problem. Today the fixed attributes approach adopted by the consumer identity management industry provides only limited information about an individual, and therefore is of limited value to the service providers and other participants in the identity ecosystem. This project investigates the use of the Open Algorithms (OPAL) to obtain better insight about an individual's digital persona in a given context through a collective sharing of algorithms, governed through a trust network. Algorithms for specific data-sets must be vetted to be privacy-preserving, fair and free from bias.
The project recognizes that a new model for privacy-preserving identities is needed if blockchain systems are to operate at a global scale: it must allow entities in the ecosystem to (i) verify the “quality” or security of an identity, and (ii) to assess the relative “freedom” or independence of an identity from any given authority (e.g. government, businesses, etc.), and (iii) to assess the source of trust for a digital identity
- Whitepaper: Core Identities, Personas and Transaction Identities (PDF)
- Technical paper: Open Algorithms for Identity Federation (PDF)
We are developing an open source platform that supports the Enigma design. In particular, it focuses on the use of Secure Multi-Party Computation (S-MPC) over both plaintext data and data that has been "split" into shares (e.g. using a Linear Secret Sharing Scheme). The Enigma design allows the underlying the P2P nodes (e.g. in a blockchain) to store the shares (as off-chain storage), and allows for the reconstruction of the origin data through a minimal (threshold) number of shares. In combination with OPAL, the design provides a way to increase the resilience of backend data repositories.
OpenPDS is platform for personal data interchange across multiple data-repositories. Today the typical end-user generates a large number of data as the by product of living in the digital space. These multiple data-repositories represent valuable data-sets capturing an individual's life. OpenPDS provides a platform for individuals and organizations to manage these disparate repositories by providing a uniform user interface.
More importantly, for queriers seeking to access data within an repository OpenPDS filters response through a Safe Answers engine, and provides the data-owner a tunable degree of privacy-preservation. OpenPDS build on OpenPDS (v1) by adding features, such as a simple multi-party computation capability, simplified "smart contracts" and integration into the OpenID-Connect server for authentication and authorization.