《電子技術(shù)應(yīng)用》
您所在的位置:首頁 > 其他 > 設(shè)計應(yīng)用 > 一種面向數(shù)據(jù)資源共享的安全保障模型研究
一種面向數(shù)據(jù)資源共享的安全保障模型研究
網(wǎng)絡(luò)安全與數(shù)據(jù)治理
鄧曦1,劉福金1,郭曉黎1,唐鳴2
1.中國電子科技集團公司第三十研究所; 2.中電科網(wǎng)絡(luò)安全科技股份有限公司
摘要: 數(shù)據(jù)作為新型生產(chǎn)要素,安全共享對企業(yè)、行業(yè)乃至國家發(fā)展具有重要意義。然而,當(dāng)前數(shù)據(jù)共享面臨諸多挑戰(zhàn)。分析了數(shù)據(jù)共享中各方的核心需求,提出了一種數(shù)據(jù)共享安全模型,構(gòu)建了數(shù)據(jù)共享基礎(chǔ)平臺。平臺圍繞跨地域、跨部門、跨業(yè)務(wù)等的共享交換場景需求,解決數(shù)據(jù)共享中來源安全可信、交換安全可控、共享安全審計、流通安全監(jiān)管、傳輸安全可靠、數(shù)據(jù)受控訪問等問題,對推動數(shù)據(jù)安全共享發(fā)展具備一定的參考意義。最后,分析了數(shù)據(jù)安全共享發(fā)展趨勢,包含技術(shù)融合創(chuàng)新對安全共享效能的有效提升,跨領(lǐng)域數(shù)據(jù)安全標準體系亟待制定等。
中圖分類號:TP309文獻標識碼:ADOI:10.19358/j.issn.2097-1788.2025.10.008
引用格式:鄧曦,劉福金,郭曉黎,等. 一種面向數(shù)據(jù)資源共享的安全保障模型研究[J].網(wǎng)絡(luò)安全與數(shù)據(jù)治理,2025,44(10):46-53.
Research on a security assurance model for data resource sharing
Deng Xi1,Liu Fujin1,Guo Xiaoli1,Tang Ming2
1. The 30th Research Institute of China Electronics Technology Group Corporation; 2. CETC Cyberspace Security Technology Co., Ltd.
Abstract: As a new type of production factor, secure sharing of data is of great significance to the development of enterprises, industries, and even the country. However, data sharing faces many challenges currently. This paper analyzes the core requirements of all parties in data sharing, proposes a data sharing security model, and constructs a data sharing infrastructure platform. The platform revolves around cross-regional, cross-department, crossbusiness sharing and exchange scenarios, addressing issues such as source security and trustworthiness, security and controllability in sharing, security auditing in sharing, security supervision in circulation, transmission security and reliability, and controlled access to data, which has certain reference for promoting the development of data security sharing. Finally, this article analyzes the development trend of data security sharing, including the effective improvement of security sharing efficiency through technological integration and innovation, and the urgent needs to develop a crossdomain data security standard system, etc.
Key words : production factors; data resources; security model; sharing plugin; trust service system

引言

數(shù)據(jù)已經(jīng)成為數(shù)字經(jīng)濟發(fā)展的關(guān)鍵生產(chǎn)要素[1]。數(shù)據(jù)作為生產(chǎn)要素,只有在積聚融合、交易流通、開放共享中才能發(fā)揮更大的價值[1-2]。對于企業(yè),數(shù)據(jù)要素價值化能促進業(yè)務(wù)協(xié)同,提升運營效率,增強市場競爭力;對于行業(yè),數(shù)據(jù)要素價值化有助于打破信息壁壘,推動行業(yè)創(chuàng)新與發(fā)展;對于國家,數(shù)據(jù)要素價值化對于提升國家治理能力,提升部門協(xié)同辦公效率,保障國家安全具有重要意義。

數(shù)據(jù)要素價值化的基礎(chǔ)是數(shù)據(jù)能安全共享交換。然而,數(shù)據(jù)安全共享卻面臨一定的風(fēng)險和隱患。一是缺乏數(shù)據(jù)共享和開放統(tǒng)一評估的依據(jù),二是缺乏界定共享責(zé)任邊界的支撐手段,三是缺乏多維度的共享全過程監(jiān)管機制,由此帶來數(shù)據(jù)濫用、權(quán)屬不清、責(zé)任不明等安全風(fēng)險,從而導(dǎo)致不愿共享、不敢共享。

數(shù)據(jù)安全共享旨在確保數(shù)據(jù)在共享過程中的保密性、完整性與可用性。本文研究了數(shù)據(jù)資源共享的核心安全需求,建立了數(shù)據(jù)資源共享安全模型,深入、全面分析其架構(gòu)、功能和運行機制,展示了平臺模型的應(yīng)用案例。從理論意義上,通過該平臺研究,進一步完善數(shù)據(jù)安全共享領(lǐng)域理論體系,為后續(xù)相關(guān)研究提供理論支撐。從實踐意義上,為數(shù)據(jù)安全共享能力建設(shè)提供可借鑒參考的解決方案,有助于指導(dǎo)企業(yè)、行業(yè)及國家構(gòu)建更安全、高效的數(shù)據(jù)共享交換平臺,推動數(shù)據(jù)資源的合理流通與利用,提升整體數(shù)據(jù)安全保障能力。


本文詳細內(nèi)容請下載:

http://ihrv.cn/resource/share/2000006826


作者信息:

鄧曦1,劉福金1,郭曉黎1,唐鳴2

(1.中國電子科技集團公司第三十研究所,四川成都610041;

2.中電科網(wǎng)絡(luò)安全科技股份有限公司,北京100160)


subscribe.jpg

此內(nèi)容為AET網(wǎng)站原創(chuàng),未經(jīng)授權(quán)禁止轉(zhuǎn)載。