Data Capsule: A Self-Contained Data Model as an Access Policy Enforcement Strategy

In this paper, we introduce the Data Capsule model. A self-contained and self-enforcing data container based on emerging Self-Sovereign Identity standards, blockchain, and attribute-based encryption. A Data Capsule allows for a transparent, privacy-respecting, and secure exchange of personal data, enabling a progressive trust scheme in a semi-trusted environment. Every Data Capsule is bundled with its own access policy structure and verifiable data, drastically reducing the number of interactions needed among the user, the service providers, and data custodians. Moreover, by relying on the decentralized nature of blockchain and attribute-based encryption our proposed model ensures the access policies published by service providers are public, transparent, and strictly followed.