A
system and
computer program product for providing certified confidential
data collaboration between two or more of a plurality of parties where an established
trust relationship is not required between the plurality of parties. The method includes creating, by a first party, a changeset proposal, the changeset proposal having a comment, a
list of attachments, a
list of parties, and a
list of versioned and typed data sections, remotely performing, by the first party, a certified operation on a computer associated with a semi-trusted
governor party and passing the changeset proposal to the certified operation, creating, by the semi-trusted
governor party, a globally unique changeset reference in a certified thread having a globally unique thread tracking number and a sequential changeset number, validating, by the semi-trusted
governor party, the changeset proposal and creating, by the semi-trusted governor party, a state-at-changeset structure including the validated changeset proposal and a
timestamp, extracting, by the semi-trusted governor party, a section-state-at-changeset structure from the changeset proposal, performing, by the semi-trusted governor party, a cryptographic hash of the state-at-changeset structure, performing, by the semi-trusted governor party, a cryptographic hash of the section-state-at-changeset structure, writing, by the semi-trusted governor party, to a local transactional
database a changeset fat twin
record including the changeset reference and its associated state-at-changeset structure and section-state-at-changeset structure, communicating, by the semi-trusted governor party, a changeset reference notification for each fat twin
record to each of the one or more parties, performing, by the semi-trusted governor party, a certified operation in a
blockchain a certified thin twin
smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure and the cryptographically hashed section-state-at-changeset structure, validating, by the certified thin twin
smart contract, that there does not exist a previous certified operation with the same changeset reference, and writing by the thin twin
smart contract to the
blockchain a new thin twin
record containing the changeset reference, the cryptographically hashed state-at-changeset structure and the cryptographically hashed section-state-at-changeset structure. The section-state-at-changeset structure is a subset of a total state of the list of versioned and typed data sections. A certified operation is expressed by the changeset reference, the state-at-changeset structure and the section-state-at-changeset structure occurred may be proved by each of the list of parties by cryptographically hashing the state-at-changeset structure and the section-state-at-changeset structure associated with the certified operation, and performing a proof-of-certified-operation on the thin twin smart contract and passing the changeset reference, the cryptographically hashed state-at-changeset structure and cryptographically hashed state-at-changeset structure. The proof may be determined even where the semi-trusted governor party is unresponsive after performance of the certified operation.