摘要:Data has become a key driver for economic growth, social progress, and technological innovation. Data activities are no longer confined to individual organizations but transcend traditional organizational boundaries through the process of data socialization, entering into social reproduction phase through cross-organizational and cross-domain circulation, thus becoming a socialized production factor. The focus of data security governance shifts from internal to external circulation, highlighting the importance of data circulation security governance. The paper starts from the theory of socialized production to elaborate on the process of data socialization, then analyzes the characteristics of data circulation security governance. Subsequently, this inspires a "five-sphere" framework for data circulation security governance, which includes five systems: technology, industry, standards, policy and practice. The technology system provides secure technical capabilities for data circulation, the industry system fosters industrial ecosystems to promote cost reduction and efficiency improvement, the standards system reduces coordination difficulties by promoting standardization, the policy system constructs policy mechanisms to provide an innovative environment, and the practice system provides demonstration guidelines to promote application. This framework aims to bridge the gap between the utilization and security of data circulation, promoting their long-term unity, offering theoretical guidance and practical references for building a secure, efficient and sustainable data circulation security governance system, and accelerating the process of data socialization.
摘要:With the rapid development of big data, cloud computing, and artificial intelligence, data circulation security governance faces new challenges and requires a systematic and sustainable growth technology system. Starting from technology implementation perspective, this paper discusses the problems in building a data circulation security system and reviews typical data security technology frameworks from abroad. Based on this, this paper proposes a data circulation security governance technology framework. This framework organizes 49 key technologies that play important roles in data circulation security, constructed from two perspectives: data circulation lifecycle and responses to data circulation security risks. Based on expert evaluations, the development status and existing problem of the current technological frameworks for data circulation security governance are analyzed, from the dimensions of development stage, importance, technological potential and implementation challenges. Building and improving a secure technology system for data circulation can promote the healthy and sustainable development of the data element industry and the digital economy.
摘要:The security control technology of public data is an important foundation for achieving high-quality supply and utilization of public data, and an important means to stimulate the value of public data. The traditional public data supply has some problems such as cross-chain limitation and single encryption. The public data security control architecture was designed, which included block chain management, clear and ciphertext circulation technology, and application scenario output. Taking this framework as a theoretical framework, a big data platform based on “Chain + Data” system has been put into practice in Beijing to realize the credible and efficient circulation of public data in the government affairs scene. It effectively realizes the control of public data in super-large cities that helps the development of public data in the direction of security, mobility and intelligence, and promotes the digital transformation of the whole city.
摘要:Text watermarking can determine the copyright ownership of text data, facilitating secure circulation and sharing of data. Existing text watermarking algorithms typically pre-mark words and employ word substitution methods to embed watermarks. However, these algorithms only mark candidate words based on the hash value of the previous word, limiting the robustness of the watermarking algorithm. To address this issue, SRTW algorithm was proposed. Specifically, semantic embeddings of the text were obtained using existing embedding models. Then, these embeddings were converted into word markers (-1 or 1) through a trained word marking model. Finally, words marked as 1 were selected to replace the original words to construct the watermark. Compared with existing more advanced benchmark algorithms, the proposed SRTW algorithm improves the AUC metric by 2.08%, 5.17%, and 3.09% in three different attack scenarios, respectively, demonstrating the effectiveness of the SRTW algorithm.
关键词:data rights confirmation;data security;data circulation
摘要:Cross-domain data circulation has brought new challenges to security governance. Multiple participants of data circulation were identified, challenges of circulation security governance were analyzed. Under the principles of promoting data circulation through value co-creation, ensuring data circulation security through security co-governance, a long-term security governance model oriented to ensure data can be high-supplied, smooth-circulated, well-used, and safe-guaranteed was proposed, which involved physical space, technical support, institutional arrangements and ecological operation. Based on the practice in Suzhou, the specific path and ecological cycle mechanism of value co-creation and security co-governance were analyzed, which provides reference to implementation of data circulation security governance.
关键词:cross-domain data circulation;security risk;governance model;value co-creation;security co-governance
摘要:Data trust is an innovative form of data capitalization. Personal data play a critical role in digital economy and data circulation. To solve the institutional and technical boundaries on personal data access, risk management and going concern that reside in current literature and practice on data trusts, a novel franchised data trust operation mechanism was proposed, which entitled state-owned telecom operators to exercise personal data trusts with the aims of effective personal data protection and sustainable operation of data trusts. The proposal makes a cutting edge exploration on data trusts studies and practice.
摘要:To ensure the security and efficiency of data circulation and promote the healthy development of the digital economy, the article focuses on the standardization of data circulation security. Based on the development of data circulation security both domestically and internationally, as well as the current state of standardization, the requirements of data circulation security standards is analyzed. A data circulation security standard system framework is constructed, centered around foundational standards, general requirements, technical standards, management standards, products and services, and assurance capabilities. The article offers suggestions on data circulation security standardization, including refining legal design, strengthening technology research and development, expanding talent training, promoting standard application, and strengthening international cooperation.
摘要:In the era when data has become a new factor of production, building a safe and efficient data factor circulation system is the key to promoting the high-quality development of the digital economy. Based on the conditions of sustainable development of market economy, the relationship between security and development in the circulation of data factor was discussed, which strives to give full play to the new quality of security productivity, promotes the development of digital economy and real economy, and proposes the concept of security governance of data factor market based on the perspective of economics, and builds a unified, fair, competitive and orderly, mature and complete high-quality data factor market system.
摘要:In recent years, local governments have issued numerous policy documents related to data circulation, yet the specific mechanisms and their content remain vague. Based on protection motivation theory, this paper systematically identifies four key mechanisms that influence stakeholders' willingness to participate in data circulation: information disclosure mechanisms,benefit distribution mechanisms, incentive mechanisms and fault-tolerant innovation mechanisms. This paper employs prompt engineering to automatically extract relevant mechanisms from policy documents, with manual verification to ensure the accuracy of the analysis. The results indicate that China has made significant progress in exploring data circulation governance, particularly in public data management, authorized operations and data transactions. Additionally, these mechanisms have become increasingly diverse in both quantity and form. The policy trends are primarily as follows: information disclosure mechanisms have covered the entire process of data circulation; benefit distribution mechanisms have emphasized the interests of various stakeholders; incentive mechanisms have become more specific; the conditions for fault-tolerant innovation mechanisms have become more flexible. The gradual refinement of these mechanisms plays a positive role in building a policy framework for secure data circulation governance and encouraging stakeholders' willingness to participate.
摘要:Unauthorized data export is a significant data security risk in the circulation of government data. From a meso-level practical perspective, this study examines the storage and distribution of government data within government information systems. It identifies six data export and circulation channels in practice: front-end, back-end, sharing, openness, operation, and attack. Furthermore, it clarifies six typical data circulation methods that require special attention: front-end functional export, front-end interface export, back-end synchronized export, back-end operational export, shared data export, and operational data export. In addition, the study systematically analyzes security compliance requirements and the specific manifestations of major threats, including external attacks, internal threats, system vulnerabilities, and data breaches by partners. Based on this analysis, it proposes countermeasures focusing on six aspects: data classification and grading control, outsourcing and data usage management, granular permission management, control over export scale and anomaly detection, leakage prevention and traceback control, and security audits for data exports. Building on these findings, the study introduces a security governance framework for government data circulation, which encompasses three key elements: management implementation, technical protection, and operational execution. The framework effectively mitigates the significant risk posed by unauthorized data exports and provide reference for the security governance of the circulation of government data.
摘要:The circulation of data factor is the key to the development of the digital economy, and security first is the principle of building data factor market. This paper focuses on the civil aviation field, and describes the current data resource characteristics and circulation status, as well as the security challenges faced by multi-subject participation. A three-layer model is proposed, which is based on intra-enterprise data governance, intra-industry data circulation and cross-industry data circulation. Taking the data governance practice of Travelsky Technology Limited as an example, this paper introduces data architecture governance, data standard implementation, classification and full life cycle security protection. Finally, data factor circulation and security governance in civil aviation field are prospected.
摘要:To effectively ensure the security of key information and data resources in the oil and gas pipeline network, and further unleash the value of data, research and application of a privacy computing based oil and gas pipeline network data security sharing technology platform are conducted. Firstly, analyze the current situation of data security sharing in oil and gas pipeline networks from three aspects: policy, technology, and industry, and expose the contradiction between data security compliance and data sharing needs. Then, design and implement a data security sharing platform for oil and gas pipeline networks to address this issue, and provide detailed descriptions of three key algorithm principles, achieving "original data not out of domain, usable but invisible" and "controllable and measurable". Afterwards, thedata security sharing scenarios for the oil and gas pipeline network industry will be sorted out, and data security sharing technology will be applied in combination with three typical application scenarios. The results indicate that the data security sharing technology platform for oil and gas pipeline networks based on privacy computing effectively realizes internal data exchange and external data sharing of oil and gas pipeline network enterprises, breaks down barriers between data, ensures secure sharing and circulation of data between various business chains, and improves the level of oil and gas pipeline network management and control.
关键词:data security;data sharing;oil and gas pipeline network