数据安全沙箱

数据安全沙箱是基于“数据可用不可见，数据不动程序动”的基本思想，采用TEE可信执行环境以及多项安全技术进行安全保障的平台型产品。由于具有可信任的中心以及数据和业务安全的全流程保障，数据安全沙箱可以确保数据要素在隐私保护机制下进行大规模的、高效的流通，从而解决数据要素流通和数据隐私保护之间的矛盾，让数据可被放心的“共享”、“开放”、“使用”。因此，数据安全沙箱旨在通过解决上述问题帮助用户达到如下目标：
1、通过底层安全、数据安全和业务安全体系进行数据隐私保护；
2、确保数据要素绝对安全的流通，满足数据大规模的价值挖掘需要；
3、通过安全隐私计算为行业赋能，充分发挥数据的价值；
4、规范明确数据的使用流程和权限，确保数据使用的清晰化管理；
5、保障数据要素流通全过程和数据生命周期运营全过程中的合法合规性，符合《数据安全法》的全面要求；
6、满足多维度、多场景、多领域的数据价值发现。

The Data Security Sandbox is a platform-based product built on the foundational principle of 'Data is available yet invisible; data remains stationary while code executes', which adopts Trusted Execution Environment (TEE) and multiple security technologies to provide security guarantees.
With its trusted centralized architecture and full-process security guarantees covering both data and business security, the Data Security Sandbox can ensure the large-scale and efficient circulation of data elements under privacy protection mechanisms, thereby resolving the contradiction between data element circulation and data privacy protection, and enabling data to be safely "shared", "opened" and "used".
Therefore, the Data Security Sandbox aims to help users achieve the following goals by addressing the aforementioned issues:
1. Implement data privacy protection through underlying security, data security and business security systems;
2. Ensure the absolutely secure circulation of data elements to meet the needs of large-scale data value mining;
3. Empower industries via secure privacy computing and fully unleash the value of data;
4. Standardize and clarify data usage processes and permissions, ensuring clear and standardized management of data usage;
5. Guarantee the legality and compliance throughout the entire process of data element circulation and data lifecycle operation, fully complying with the comprehensive requirements of the Data Security Law of the People's Republic of China;
6. Enable data value discovery across multiple dimensions, scenarios and domains.

搜集汇总

背景与挑战

背景概述

数据安全沙箱是一个基于隐私计算技术的平台型产品，旨在解决数据流通与隐私保护之间的矛盾。它采用了TEE可信执行环境和多项安全技术，确保数据在隐私保护机制下进行大规模、高效的流通，适用于多种行业和场景。