Abstract: In recent years, the rapid development of E-government generated a series of data security risks: data cannot be accurately mapped to the user and workflow, E-gov system cannot cope with new data security risks. To confront with these problems, a Security Data Space method(including 2D, 3D Security Data Space method) is presented in this paper. 2D Security Data Space build an area which has clear data ownership and boundary by sorting out the relationship between data, workflow, and user. 3D Security Data Space introducing data protection technology into 2D Security Data Space, can protect data ownership and boundary while accurately control the data flow. The Security Data Space method is applied in E-gov system and work effectively. The Security Data Space method can also be extended to other field to enhance the security of data.

Key words: data security model, data space, data flow analysis, data protection

摘要： 近年来，我国电子政务的快速发展带来一系列数据安全问题：数据与用户关联不够紧密、数据与业务流程映射关系不清晰、缺乏应对新的数据安全风险等问题.针对上述问题，提出安全数据空间构建方法(包括二维和三维2个层次的空间).其中二维数据空间通过梳理业务流与数据流的关系并确定数据关联用户，构建数据主权和边界明确、数据流向清晰的二维区域；三维安全数据空间在二维基础上，结合数据防护手段，保护数据主权和边界、分析和管控数据流向.安全数据空间方法在现行电子政务系统中进行了实践应用，取得了较好的效果.安全数据空间方法还可以扩展到其他行业信息系统，帮助指导改进其数据安全性.

关键词: 数据安全模型, 数据空间, 数据流分析, 数据防护