Methods and nodes for handling usage policy

摘要

Methods and nodes (300a, 300b, 302) for handling a usage policy (P1.P2) pertaining to source data (D1,D2) generated by a source node (300a, 300b). The usage policy dictates permission to access and use the source data. The source node calculates a signature (Sig) based on an identification (id_D) of the source data and the usage policy (P) of the source data, and provides the source data, its usage policy and the calculated signature to a data processing node (302). The data processing node then generates new data (D3) based on the source data, and calculates a new signature (Sig3) based on an identification (ldj_)3) of the new data and at least one of: a new usage policy (P3) pertaining to the generated new data, and the usage policy (P1, P2) of the source data. The data processing node finally provides the new data, the usage policies (P1, P2, P3) and the signatures (Sig1, Sig2, Sig3) to a data receiving node (304) which is thereby enabled to verify and comply with the provided usage policies based on the respective associated signatures.

主权项

1. A method performed by a data processing node for handling a usage policy pertaining to source data generated by at least one source node, the usage policy dictating permission to access and use the source data, the method comprising:
receiving the source data and usage policy together with an associated source signature from the at least one source node, wherein the source signature has been calculated based on an identification of the source data and the usage policy of the source data, generating new data based on the received source data while complying with the usage policy of the source data, calculating a new signature based on an identification of the new data and at least one of: the usage policy of the source data, and a new usage policy pertaining to the generated new data and covering the usage policy of the source data, and providing the new data and the usage policies and signatures to a data receiving node, thereby enabling the data receiving node to verify and comply with the provided usage policies based on respective associated signatures, wherein at least one of the receiving, generating, calculating, and providing steps are implemented by a processing device of the data processing node.