{"type": "project", "title": "CLAM (Consent and Content Access Management Library)", "logoImg": "bafkreiczzq2fnospio4yecpsdx7jcyhob52wfzb3ydwdzv7n3qqojdltvu", "website": "https://www.bowheadhealth.com/for-devs", "bannerImg": "bafkreidzzzfuhnztafszveulwigsk263vpbzilcit4nwnyabwir5jcs3ce", "createdAt": 1692056643103, "userGithub": "bowheadadmin", "credentials": {"github": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..DQVwHcxlhSDuv3EoPyw9ESCZlZXrAnh7XfljaBTtDDnmqCVfT09nXuvy-BP5Qpmdk0Rsx1q4Q4Z9qqJuBVvWAw", "type": "Ed25519Signature2018", "created": "2023-08-14T23:43:01.349Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2023-08-14T23:43:01.349Z", "expirationDate": "2023-11-12T23:43:01.349Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x58e1e2c1892b1e4faBECF5c98041Ad1A9703b5CD", "hash": "v0.0.0:ptqi/4u9hb1pnN+rcklTJeVYh6xmNhBpDHqItUfcEzM=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextGithubOrg#bowhead#43254309"}}}, "description": "Problem\nThe digital era has witnessed an exponential growth in data generation, but traditional centralized databases remain vulnerable to breaches and lack transparency in data access and management. As multiple sectors grapple with these challenges around sensitive data, there's a pressing need for a decentralized solution that melds robust security with the benefits of blockchain technology.\n\nTraditional information handling  on cloud services risks\nData Breaches: Cloud service providers are responsible for securing user data, but data breaches can still occur due to vulnerabilities or security lapses. If unauthorized parties gain access to sensitive data, it can lead to identity theft, financial fraud, and other privacy violations.\n\nThird-Party Access: Traditional cloud services may grant employees of the service provider access to user data for maintenance and support purposes. This introduces the risk of unauthorized access or misuse of user information.\n\nLack of Control: Users often have limited control over where their data is stored and processed. It might be stored in data centers located in different jurisdictions with varying data protection laws, raising concerns about data sovereignty and legal jurisdiction.\n\nInadequate Encryption: While data in transit and at rest is often encrypted by cloud providers, the level of encryption and security practices can vary. Inadequate encryption measures could expose sensitive information to unauthorized access.\n\nMetadata Exposure: Even if the content of files is encrypted, metadata (information about the data) may still be accessible. Metadata can reveal valuable insights about user behavior and interactions.\n\nSharing Risks: Shareable links can be easily forwarded to unintended recipients, potentially exposing private information. If the link is public or guessed, it can be exploited to access sensitive content.\n\nData Mining and Profiling: Cloud providers may analyze user data to gather insights for targeted advertising or other purposes. This raises concerns about privacy invasion and the creation of detailed user profiles without explicit consent.\n\nLegal Access: Governments and law enforcement agencies may have legal mechanisms to access user data stored in cloud services, often without the user's knowledge.\n\nSolution\n\nCLAM has crafted an intricate digital vault powered by Ethereum's blockchain, emphasizing encryption, decentralization, and smart contract functionalities. By assimilating the principles of the Web3 paradigm, CLAM guarantees a comprehensive, transparent, and tamper-proof ecosystem tailored explicitly for managing data.\n\nCLAM, serving as the fundamental building block, will revolutionize how developers approach data solutions by ingraining a privacy-first mindset into their creations. This visionary library will provide developers with the tools and resources needed to craft robust and scalable solutions that place user privacy at the forefront. Empowering end users with unprecedented control over their data, CLAM will enable them to meticulously curate exactly who has access to their information, ensuring that only individuals sanctioned by them are granted entry. At the core of this transformative approach lies the implementation of stalwart cryptographic algorithms like AES-256 and RSA-2048, ensuring that the data remains impenetrable to unauthorized entities. Through the strategic integration of CLAM, developers can pave the way for a digital landscape where privacy is not a mere afterthought, but a foundational principle, allowing users to confidently interact with technology while retaining sovereignty over their personal information.\n\nKey Features\n\nConsent: Acquiring users' consent where they agree to share their delicate data is a challenge. With an anonymous, decentralized and immutable consent, the users\u2019 enrollment increases by giving them the option to quit at any time they want, propagating the change to all linked systems without any effort.\n\nDecentralized Data Storage: CLAM's solution harnesses Ethereum's distributed ledger to spread health data across a vast network of nodes. This eradicates the pitfalls of centralized storage, ensuring heightened redundancy and resilience.\n\nEnd-to-End Encryption: From the initiation point at the user to the endpoint at the recipient, data is subjected to rigorous encryption and secure transmission protocols, establishing unparalleled data privacy.\n\nMetaMask Integration: By melding with MetaMask, a vanguard in Web3 wallets, we present users with an intuitive and secure interface for data interaction.\nTransparent Access Control: Our system's backbone, the smart contracts, facilitate seamless and transparent data access permissions, guaranteeing users maintain authoritative control over their data (for example health data).\n\nOpen Source Commitment\n\nOur Github hosts CLAM\u2019s openly accessible codebase, fostering community-driven growth and innovation. \n\nhttps://github.com/bowhead/CLAM\n\nPlans for Funding\n\nAcquired funds are earmarked for:\n\nResearch & Development: Innovating and integrating advanced features, refining platform security.\n\nCommunity Outreach: Host workshops and webinars to foster adoption and collate invaluable community feedback.\n\nTechnical Support: Ensure an elevated user experience with dedicated support and prompt issue resolutions.\n\nTeam Members\n\nBowhead is a global multi-disciplinary team of medical doctors, researchers, engineers and designers that have teamed up to solve data ownership and give people the option to contribute to research. \n\nFrancisco Diaz-Mitoma, CEO & Co-Founder\n\nFrancisco is a software architect, product designer and serial entrepreneur. Francisco previously founded Titan Gaming, Playsino and Revenue.com. Francisco is the former Chief Software architect at Xfire, the first in-game chat application that amassed 14 million+ users. \n\nCesar Diaz, CTO & Blockchain Specialist\n\nCesar is a blockchain engineer, open source contributor and evangelist in Privacy by Design. Cesar has over 20 years of experience developing highly scalable, redundant and secure systems in enterprise systems.\n\nDr. Francisco Diaz-Mitoma, Bowhead Chairman & Co-founder\n\nFrancisco is a Canadian board-certified medical doctor and virologist. Francisco is a former professor at University of Ottawa and founder of VBI Vaccines (NASDAQ: VBIV). Francisco is based in Kanata, Canada.\n\nBacking CLAM translates to endorsing a revolution in decentralized data management, bridging Web3 capabilities with critical requirements.\n\n", "logoImgData": {}, "bannerImgData": {}, "projectGithub": "bowhead"}
CLAM (Consent and Content Access Management Library)
Problem
The digital era has witnessed an exponential growth in data generation, but traditional centralized databases remain vulnerable to breaches and lack transparency in data access and management. As multiple sectors grapple with these challenges around sensitive data, there's a pressing need for a decentralized solution that melds robust security with the benefits of blockchain technology.

Traditional information handling  on cloud services risks
Data Breaches: Cloud service providers are responsible for securing user data, but data breaches can still occur due to vulnerabilities or security lapses. If unauthorized parties gain access to sensitive data, it can lead to identity theft, financial fraud, and other privacy violations.

Third-Party Access: Traditional cloud services may grant employees of the service provider access to user data for maintenance and support purposes. This introduces the risk of unauthorized access or misuse of user information.

Lack of Control: Users often have limited control over where their data is stored and processed. It might be stored in data centers located in different jurisdictions with varying data protection laws, raising concerns about data sovereignty and legal jurisdiction.

Inadequate Encryption: While data in transit and at rest is often encrypted by cloud providers, the level of encryption and security practices can vary. Inadequate encryption measures could expose sensitive information to unauthorized access.

Metadata Exposure: Even if the content of files is encrypted, metadata (information about the data) may still be accessible. Metadata can reveal valuable insights about user behavior and interactions.

Sharing Risks: Shareable links can be easily forwarded to unintended recipients, potentially exposing private information. If the link is public or guessed, it can be exploited to access sensitive content.

Data Mining and Profiling: Cloud providers may analyze user data to gather insights for targeted advertising or other purposes. This raises concerns about privacy invasion and the creation of detailed user profiles without explicit consent.

Legal Access: Governments and law enforcement agencies may have legal mechanisms to access user data stored in cloud services, often without the user's knowledge.

Solution

CLAM has crafted an intricate digital vault powered by Ethereum's blockchain, emphasizing encryption, decentralization, and smart contract functionalities. By assimilating the principles of the Web3 paradigm, CLAM guarantees a comprehensive, transparent, and tamper-proof ecosystem tailored explicitly for managing data.

CLAM, serving as the fundamental building block, will revolutionize how developers approach data solutions by ingraining a privacy-first mindset into their creations. This visionary library will provide developers with the tools and resources needed to craft robust and scalable solutions that place user privacy at the forefront. Empowering end users with unprecedented control over their data, CLAM will enable them to meticulously curate exactly who has access to their information, ensuring that only individuals sanctioned by them are granted entry. At the core of this transformative approach lies the implementation of stalwart cryptographic algorithms like AES-256 and RSA-2048, ensuring that the data remains impenetrable to unauthorized entities. Through the strategic integration of CLAM, developers can pave the way for a digital landscape where privacy is not a mere afterthought, but a foundational principle, allowing users to confidently interact with technology while retaining sovereignty over their personal information.

Key Features

Consent: Acquiring users' consent where they agree to share their delicate data is a challenge. With an anonymous, decentralized and immutable consent, the users’ enrollment increases by giving them the option to quit at any time they want, propagating the change to all linked systems without any effort.

Decentralized Data Storage: CLAM's solution harnesses Ethereum's distributed ledger to spread health data across a vast network of nodes. This eradicates the pitfalls of centralized storage, ensuring heightened redundancy and resilience.

End-to-End Encryption: From the initiation point at the user to the endpoint at the recipient, data is subjected to rigorous encryption and secure transmission protocols, establishing unparalleled data privacy.

MetaMask Integration: By melding with MetaMask, a vanguard in Web3 wallets, we present users with an intuitive and secure interface for data interaction.
Transparent Access Control: Our system's backbone, the smart contracts, facilitate seamless and transparent data access permissions, guaranteeing users maintain authoritative control over their data (for example health data).

Open Source Commitment

Our Github hosts CLAM’s openly accessible codebase, fostering community-driven growth and innovation. 

https://github.com/bowhead/CLAM

Plans for Funding

Acquired funds are earmarked for:

Research & Development: Innovating and integrating advanced features, refining platform security.

Community Outreach: Host workshops and webinars to foster adoption and collate invaluable community feedback.

Technical Support: Ensure an elevated user experience with dedicated support and prompt issue resolutions.

Team Members

Bowhead is a global multi-disciplinary team of medical doctors, researchers, engineers and designers that have teamed up to solve data ownership and give people the option to contribute to research. 

Francisco Diaz-Mitoma, CEO & Co-Founder

Francisco is a software architect, product designer and serial entrepreneur. Francisco previously founded Titan Gaming, Playsino and Revenue.com. Francisco is the former Chief Software architect at Xfire, the first in-game chat application that amassed 14 million+ users. 

Cesar Diaz, CTO & Blockchain Specialist

Cesar is a blockchain engineer, open source contributor and evangelist in Privacy by Design. Cesar has over 20 years of experience developing highly scalable, redundant and secure systems in enterprise systems.

Dr. Francisco Diaz-Mitoma, Bowhead Chairman & Co-founder

Francisco is a Canadian board-certified medical doctor and virologist. Francisco is a former professor at University of Ottawa and founder of VBI Vaccines (NASDAQ: VBIV). Francisco is based in Kanata, Canada.

Backing CLAM translates to endorsing a revolution in decentralized data management, bridging Web3 capabilities with critical requirements.


CLAM (Consent and Content Access Management Library)