System and Method for Entity-Controlled Permissioning of Compliance Metadata in Blockchain-Based Credential Systems Letting the Entity Decide Who Sees What

This patent describes a system that puts an entity in charge of exactly which parts of its compliance information other parties may see. It builds on a blockchain credential and adds a permissioning layer so disclosure is selective rather than all-or-nothing.

The Problem

Compliance information is rarely a single fact. It can include identity, financial thresholds, the jurisdiction an investor qualifies in, and more. Different platforms need different slices of that information, but traditional verification tends to be all-or-nothing: either a party gets access to the record or it does not. That forces an entity to over-share, revealing more than a particular check actually requires. People and businesses increasingly expect to control their own data and to disclose only what is necessary for a given purpose, a principle often called data minimisation.

What This Invention Does

The system controls the disclosure of compliance metadata associated with a blockchain-based entity credential. A compliance credential issued to an entity is linked to encrypted metadata that contains the regulatory compliance information. A permissioning module then allows the entity to selectively grant, revoke, or limit access to specific portions of that metadata. When an authorised party wants to confirm something, it requests verification of particular compliance attributes through a verification interface, and that interface provides access only to the metadata the entity has permitted. The result is privacy-preserving verification: a regulated platform can confirm that an entity is eligible to participate in a restricted offering, while the entity decides which attributes are exposed and can withdraw that access later. Control stays with the data’s owner rather than the verifier.

Key Features

• Entity-controlled access. The entity itself decides who can see which parts of its compliance data.
• Granular permissions. Access can be granted, revoked, or limited to specific portions of the metadata.
• Encrypted metadata. The compliance information is held encrypted and linked to the credential.
• Attribute-level verification. Authorised parties confirm only the specific attributes they need.
• Selective disclosure. Eligibility can be confirmed without exposing the full record.

Who Is Behind It

The applicant and named inventor is Dominic Thaddeus Tayco, an individual applicant with an Australian address for service. This application belongs to a related family of filings by the same applicant covering different aspects of managing compliance credentials on a distributed ledger.

Why It Matters

Selective, entity-controlled disclosure reflects where digital identity is heading, toward models in which individuals and organisations share only the minimum needed and keep control of the rest. Applying that idea to financial compliance could reduce unnecessary exposure of sensitive data while still satisfying regulated platforms. Seeking protection in Australia aligns the work with the local regime for restricted investment offerings.

Related Concepts

• Access control – the permissioning principle the system applies to data.
• Data minimization – the privacy principle of sharing only what is needed.
• Self-sovereign identity – the model of users controlling their own credentials.
• Blockchain – the ledger the credential is built on.
• Information privacy – the broader value the design protects.

---

AU 2026201945 was published in the Australian Official Journal of Patents on 2 April 2026 and is open for public inspection. Patent applications represent inventions that are sought to be protected and do not necessarily reflect commercially available products.