PVDN · module 02
Personal Virtual Data Network
A sovereign personal data wallet. Access = IdentityValid ∧ ConsentValid ∧ PurposeAllowed ∧ ScopeAllowed. Data is not copied between institutions; attributes are disclosed selectively, provably and revocably.
Personal data vault
Toggle what this purpose may use. Purpose-disallowed fields cannot be granted.
Identity
Verified identity
utility 0.95 · privacy risk 0.35
Age band
utility 0.50 · privacy risk 0.08
Full address
utility 0.40 · privacy risk 0.82
Financial
Income band
utility 0.85 · privacy risk 0.22
Full bank statements
utility 0.90 · privacy risk 0.95
Fraud risk score
utility 0.80 · privacy risk 0.15
Insurance
Insurance claims history
utility 0.72 · privacy risk 0.55
Health
Health declarations
utility 0.60 · privacy risk 0.98
Device
Device trust attestation
utility 0.45 · privacy risk 0.10
Privacy-utility optimiser
max Utility − λ·PrivacyRisk s.t. Purpose ∧ Consent ∧ MinimumNecessary
Granted utility
2.60
Privacy exposure
0.18
Optimiser recommendation for this purpose: identity, age_band, income_band, fraud_score, device_trust. ZKP-backed attributes reduce exposure by ~75% because the verifier receives a proof, not the value.
Consent receipt
Machine-readable, revocable, expiring
{
"principal": "USR-10024",
"purpose": "insurance_underwriting",
"fields": [
"identity",
"income_band",
"fraud_score"
],
"expiry": "2026-12-31",
"share_raw_data": false,
"revocable": true,
"revoked": false,
"consent_manager": "registered",
"residency": "IN"
}Immutable access log
Append-only, hash-chained, exportable to the data principal
| Timestamp | Requester | Attribute | Basis | Disclosure |
|---|---|---|---|---|
| 2026-09-08 14:02:11 | Sahyadri Co-op Bank | fraud_score | consent | Proof only |
| 2026-09-08 11:47:03 | Bharat General Insurance | income_band | consent | Proof only |
| 2026-09-07 19:20:55 | Sahyadri Co-op Bank | identity | consent | Value |
| 2026-09-06 08:12:40 | Discovery platform | age_band | consent | Proof only |
| 2026-09-05 16:31:22 | Unknown requester | bank_statements | denied | Value |
Sovereign security controls
What protects the vault
India-resident stores
Post-quantum roadmap
Zero-knowledge proofs
Selective disclosure
Tokenisation
Key rotation (90d)
Confidential compute
Purpose limitation
DPDP alignment: consent is specific, purpose-bound and withdrawable; the consent manager keeps consent and data-sharing records the principal can review.
Regulator-facing explanation
Control family, audit record and reporting posture
The deterministic layers above run without AI. Generate a narrative to add a plain-language explanation of the current state for reviewers and supervisors.