A node in a blockchain network may generate a key for a first ring, wherein the key unlocks a first collection of data, defining a second ring including a second node of a second organization, derive a second key for a second collection of data, wherein the first key and the second key access the second collection of data, and distributing the second key to the second node.