可信数据空间

面向将数据作为核心生产要素的供需双方，采用“可用不可见、可控可计量”的应用模式，为数据流通提供真实可靠的路径，实现数据的安全共享和可信交易。 可信数据空间是一种新型的基础设施和技术解决方案，旨在实现数据的安全开放共享和可信流通。该技术方案采用“可用不可见、可控可计量”的应用模式，为数据流通提供真实可靠的路径，并为数据供需双方提供便利的居间服务，以更好地对接数据供应和需求。 应用价值：实现数据跨组织流通交换 1、交易安全的技术担保流通操作信息记录存证、合同履约追踪、服务于数据产权方的数据控制功能 2、流通业务过程担保数据交换和交易同时进行。数据在交易未完成之前不会离开数据提供方的存储环境 3、跨主体数据处理互认数据供需双方均可以提供在线计算环境下的统一数据处理服务。双方可以选择一致的工具，以保证数据处理结果的互认互通 4、第三方应用可控认证平台具备工具库管理功能。可由经过认证的第三方机构发布应用工具。认证标准可统一，认证过程可监管 5、数据应用证据链数据处理和数据交换的全过程可存证、可溯源、可监管。记录可向司法部门开放，提供有效证据链 主要功能： 1、身份和访问可信平台支持多重身份认证，包括CA签名证书验证，相关身份材料审核等。保证加入平台的用户身份真实。访问请求中携带身份信息，并依赖密码学相关原理保证无法抵赖实现请求身份的可信 2、数据流通可控使用数据前需要签订合约，合约中需要协商控制策略。平台目前支持控制访问次数、控制访问时间、控制数据删除、控制使用用户、控制使用时长等十多种控制策略，确保数据合规使用，从而实现数据主权 3、操作可追溯和监管数据流通过程中的各类行为，比如合同签订，数据请求，数据使用等会被记录到区块链中。提供全生命周期的审计追溯功能，并能出具相关证明文件为第三方监管提供依据 4、丰富的数据应用数据可以在安全沙箱中选择合适的应用进行处理，数据消费方只能得到应用的结果而不能得到原始数据。丰富的应用，为实际使用数据提供了更多可能性 5、按需使用和隔离数据空间支持按需创建流通通道，可以按照业务需求自由创建通道，实现数据隔离，降低数据泄露分险。轻量化的通道设计，使得创建和删除通道简单快捷 6、动态数据交换数据空间支持多样化的数据类型，不局限于静态数据，也支持动态数据交换。能满足动态数据交换的链式控制

Targeting both supply and demand sides that take data as their core production factor, this dataset adopts the application mode of "available but not visible, controllable and measurable", providing a reliable path for data circulation and realizing secure data sharing and trusted transactions. The Trusted Data Space is a new type of infrastructure and technical solution aiming to achieve secure, open sharing and trusted circulation of data. Adopting the same "available but not visible, controllable and measurable" application mode, this technical solution provides a reliable path for data circulation and offers convenient intermediary services for both supply and demand sides of data to better match data supply and demand.

Application Values:
1. Technical guarantee for transaction security: Record and notarize circulation operation information, track contract performance, and provide data control functions for data property rights holders.
2. Guarantee for circulation business processes: Data exchange and transaction are carried out simultaneously. Data will not leave the storage environment of the data provider until the transaction is completed.
3. Mutual recognition of cross-organizational data processing: Both supply and demand sides of data can provide unified data processing services in an online computing environment. Both parties can select consistent tools to ensure mutual recognition and intercommunication of data processing results.
4. Third-party application controllable certification platform: Equipped with tool library management functions. Certified third-party institutions can release application tools. The certification standards can be unified and the certification process can be supervised.
5. Data application evidence chain: The entire process of data processing and data exchange can be notarized, traceable and supervised. The records can be opened to judicial departments to provide effective evidence chains.

Core Functions:
1. Identity and Access Trust: The platform supports multiple identity authentication methods, including CA signature certificate verification and review of relevant identity materials, to ensure the authenticity of user identities joining the platform. Access requests carry identity information, and rely on cryptographic principles to prevent repudiation and realize the trustworthiness of the requesting identity.
2. Controllable Data Circulation: A contract must be signed before using data, and control strategies need to be negotiated in the contract. The platform currently supports more than ten control strategies, such as controlling access times, access time, data deletion, authorized users, and usage duration, to ensure compliant use of data and thereby realize data sovereignty.
3. Traceable and Regulable Operations: Various behaviors during the data circulation process, such as contract signing, data requests, and data usage, will be recorded on the blockchain. It provides audit traceability functions for the entire life cycle and can issue relevant certification documents to provide a basis for third-party supervision.
4. Rich Data Applications: Data can be processed by selecting appropriate applications in a secure sandbox, and data consumers can only obtain the application results without accessing the original data. The rich applications provide more possibilities for actual data usage.
5. On-Demand Usage and Isolation: The data space supports on-demand creation of circulation channels, which can be freely created according to business needs to achieve data isolation and reduce the risk of data leakage. The lightweight channel design makes the creation and deletion of channels simple and fast.
6. Dynamic Data Exchange: The data space supports diverse data types, not limited to static data, and also supports dynamic data exchange, which can meet the chain control requirements of dynamic data exchange.

搜集汇总

背景与挑战

背景概述

该数据集描述了一个名为'可信数据空间'的数据流通解决方案，采用'可用不可见、可控可计量'模式确保数据安全共享，提供身份认证、流通控制、操作追溯等六大核心功能，支持跨组织数据交换和交易过程的可信存证。