Journal of Information Security Reserach ›› 2022, Vol. 8 ›› Issue (10): 1000-.

Previous Articles     Next Articles

Data Security Sharing Service Platform Based on Micro-services and Privacy Computing Technology

  

  • Online:2022-10-25 Published:2022-10-24

基于微服务与隐私计算技术的数据安全 共享服务平台

安鹏, 张卓晖, 喻波
  

  1. (北京明朝万达科技股份有限公司北京100142)
  • 通讯作者: 安鹏 硕士,工程师.主要研究方向为密码学与应用、数据安全治理、联邦学习. anpeng@wondersoft.cn
  • 作者简介:安鹏 硕士,工程师.主要研究方向为密码学与应用、数据安全治理、联邦学习. anpeng@wondersoft.cn 张卓晖 工程师.主要研究方向为数据安全. zhangzhuohui@wondersoft.cn 喻波 硕士,高级工程师.主要研究方向为数据安全. yubo@wondersoft.cn

Abstract: According to the requirements of multisource data fusion and sharing applications, this paper applies privacy computing technology, based on trusted and controlled storage, combined with dense computing and collaborative computing, provides inter agency fusion data sharing service mode, and constructs a compliant data security sharing platform application platform, which provides service registration, publishing, subscription, call, log off and other data service management in the whole life cycle supported by microservice architecture and API gateway technology. In addition, according to the needs of multisource data fusion and sharing applications, the data security sharing architecture based on microservices is adopted to realize the cross domain security sharing of internal and external data through access control strategy management, sensitive data flow monitoring, abnormal behavior monitoring and control and other technologies. Build a massive multidimensional data fusion and sharing service platform, realize multiparty data security calculation across platforms, entities and departments, and solve the problem of collaborative application of nontradable data.


Key words: data security, microservices, privacy computing, security sharing, multiparty security computing, sharing service platform

摘要: 针对多源数据融合共享应用的需求,应用基于隐私计算技术,在可信受控存储的基础上,结合密态计算和协同计算,提供机构间融合数据共享服务模式,并构建合规的数据安全共享服务平台,提供微服务架构及API网关技术支撑的服务注册、发布、订阅、调用、注销等全生命周期的数据服务管理.此外,针对多源数据融合共享应用的需求,采用基于微服务的数据安全共享架构,通过访问控制策略管理、敏感数据流转监测、异常行为监测与管控等技术,实现内外部数据的跨域安全共享.构建海量多维数据的融合共享服务平台,实现跨平台、跨主体、跨部门的多方数据安全计算,解决不可流通数据的协同应用问题.

关键词: 数据安全, 微服务, 隐私计算, 安全共享, 多方安全计算, 共享服务平台