A computer-implemented method for the protection of sensitive data storage and sharing in a multicentric system; said method comprising the steps of: a) receiving a request from at least one customer in the multicentric system to share and/or to store sensitive data within at least one recipient in the multicentric system; b) providing at least one Key Pair to the at least one customer and at least one Key Pair to the at least one recipient within the multicentric system, each of said at least one Key Pair comprising a public key and a private key; c) receiving at least one encrypted Session Symmetric Key from the at least one customer, wherein said at least one Session Symmetric Key is encrypted using the public key of said at least one customer and an encryption scheme; and d) sending the encrypted Session Symmetric Key to the at least one recipient; wherein: - step b) comprises providing said at least one Key Pair by providing to the at least one customer and the at least one recipient a key generation service using a Master Key Pair generated with an asymmetric encryption scheme, as seed to generate said at least one Key Pair of said at least one customer by said at least one customer and to generate said at least one Key Pair of said at least one recipient by said at least one recipient, - said at least one Session Symmetric Key of step c) is a symmetric key generated by the at least one customer from a Derivation Master Key of the at least one customer, said Derivation Master Key being generated with a Symmetric Master Key and a symmetric encryption scheme for each of said at least one customer and received by each of said at least one customer, said Symmetric Master Key being generated with a symmetric encryption scheme, and comprising a limit of processing for the sensitive data which are requested to be shared and/or stored by said at least one customer, - in step c), said at least one Session Symmetric Key is encrypted using a homomorphic encryption scheme as said encryption scheme, so that the encrypted Session Symmetric Key is modifiable without being decrypted; - said method further comprises transforming the at least one encrypted Session Symmetric Key generated by said at least one customer without decrypting it, so that said at least one transformed encrypted Session Symmetric Key can be decrypted using the private key of said at least one Key Pair in possession of said at least one recipient; - step d) comprises sending the encrypted Session Symmetric Key to the at least one recipient in the transformed form of said encrypted Session Symmetric Key. a) receiving a request from at least one customer in the multicentric system to share and/or to store sensitive data within at least one recipient in the multicentric system; b) providing at least one Key Pair to the at least one customer and at least one Key Pair to the at least one recipient within the multicentric system, each of said at least one Key Pair comprising a public key and a private key; c) receiving at least one encrypted Session Symmetric Key from the at least one customer, wherein said at least one Session Symmetric Key is encrypted using the public key of said at least one customer and an encryption scheme; and d) sending the encrypted Session Symmetric Key to the at least one recipient; - step b) comprises providing said at least one Key Pair by providing to the at least one customer and the at least one recipient a key generation service using a Master Key Pair generated with an asymmetric encryption scheme, as seed to generate said at least one Key Pair of said at least one customer by said at least one customer and to generate said at least one Key Pair of said at least one recipient by said at least one recipient, - said at least one Session Symmetric Key of step c) is a symmetric key generated by the at least one customer from a Derivation Master Key of the at least one customer, said Derivation Master Key being generated with a Symmetric Master Key and a symmetric encryption scheme for each of said at least one customer and received by each of said at least one customer, said Symmetric Master Key being generated with a symmetric encryption scheme, and comprising a limit of processing for the sensitive data which are requested to be shared and/or stored by said at least one customer, - in step c), said at least one Session Symmetric Key is encrypted using a homomorphic encryption scheme as said encryption scheme, so that the encrypted Session Symmetric Key is modifiable without being decrypted; - said method further comprises transforming the at least one encrypted Session Symmetric Key generated by said at least one customer without decrypting it, so that said at least one transformed encrypted Session Symmetric Key can be decrypted using the private key of said at least one Key Pair in possession of said at least one recipient; - step d) comprises sending the encrypted Session Symmetric Key to the at least one recipient in the transformed form of said encrypted Session Symmetric Key.