面向数据的安全体系结构初步研究

[摘要] 提出了一种以数据为核心和面向数据的信息安全解决方案，即面向数据的安全体系结构（DOSA）。DOSA将通过网络用户身份认证、数据所有权确立、数据注册、加密呈现、授权使用、水印记录、过程溯源、数据监管、安全应用等方法，建立一套开放环境下的数据安全体系，从数据的采集、管理、应用等层面上，最大限度地保护数据安全。在数据交易、数据存储、数据传输、数据应用、数据隐私保护等方面，具有较大的应用前景。

[关键词] 面向数据的安全体系结构；数据所有权；加密呈现；数据安全

[Abstract] System vulnerabilities and excess authority to access data are the main reasons for data divulgence. In this paper, a new data security solution called Data Oriented Security Architecture (DOSA) is proposed. DOSA is an open data security system to use a series of methods, including network user identity certification, data property rights, data register, data encryption present, data authority to use, data watermark log, data procedure tracing, data monitoring, and data safety application. DOSA protects data in data collecting, data management and data applications. It can be used in data transaction, data storage, data transfer, data application, data privacy safeguarding, etc.

[Keywords] data oriented security architecture; data property rights; encryption present; data security