领域数据空间

产品服务亮点：可信：各方身份、数据来源、流通管道、使用环境全方位可信 。可控；基于数据访问及使用控制策略，数据流通使用全过程可控。可追溯：参与方各种授权、协商、访问、使用、违规等全链路行为可追溯 。保障数据持有权&使用权：受控级联加工使用、跨域联合计算实现“原始数据不出域，数据可用不可见“ 。轻量普适：不依赖复杂算法及昂贵算力资源，采用微隔离沙盒，低代码开发，可解释性强，适配大数据、AI体系 。产品服务功能：领域数据空间产品包含两部分，分别是数据提供引擎（DPE）及数据消费引擎（DCE），在数据提供引擎（DPE）及数据消费引擎（DCE）点对点之间，形成数据的安全流通管道，实现“原始数据不出域，数据可用不可见”，数据跨域安全流通，全过程可信、可控、可追溯。数据提供引擎（DPE）数据提供引擎DPE，主要供数据提供方使用，用于在跨域数据流通过程中，接入数据提供方的域内数据资源，对数据进行初加工后，授权给已达成互信的数据消费方引擎DCE访问，支持在线与DCE之间进行使用策略的协商，并在DCE侧沙盒拉取数据时，根据使用策略与访问策略实时管控数据的安全使用。数据消费引擎（DCE）数据消费引擎DCE，主要供数据消费方使用，与数据提供引擎DPE共同组成了领域数据空间内，可信可控的数据流通管道。消费方侧的流批一体数据连接使用沙盒，受跨域数据主权信令控制，与域内数据无缝连接，聚焦于数据主权信令控制下跨域多方联合计算能力的构建。

Product Service Highlights:
Trustworthy: Full-range credibility for all parties' identities, data sources, circulation pipelines and usage environments.
Controllable: The entire process of data circulation and usage is controllable based on data access and usage control strategies.
Traceable: The entire link behaviors of all participants such as authorization, negotiation, access, usage and violation can be traced.
Guarantee data ownership and usage rights: Controlled cascaded processing and usage, cross-domain joint computing realize the goal of "raw data stays within its domain while remaining usable but invisible".
Lightweight and Universal: Does not rely on complex algorithms or expensive computing resources, adopts micro-isolation sandbox, low-code development, strong interpretability, and is compatible with big data and AI systems.

Product Service Functions:
The domain data space product consists of two parts: the Data Provision Engine (DPE) and the Data Consumption Engine (DCE). A secure data circulation pipeline is established between the peer-to-peer connections of DPE and DCE, realizing the goal of "raw data stays within its domain while remaining usable but invisible", enabling secure cross-domain data circulation with the entire process being trustworthy, controllable and traceable.

Data Provision Engine (DPE)
The DPE is mainly used by data providers. It is used to access the in-domain data resources of data providers during cross-domain data circulation, perform preliminary processing on the data, and authorize access to the mutually trusted Data Consumption Engine (DCE). It supports the negotiation of usage strategies with DCE online, and real-time controls the secure usage of data according to usage policies and access policies when DCE pulls data in its sandbox.

Data Consumption Engine (DCE)
The DCE is mainly used by data consumers, and together with DPE forms a trustworthy and controllable data circulation pipeline within the domain data space. The data connection for both stream and batch processing on the consumer side uses a sandbox, which is controlled by cross-domain data sovereignty signaling, seamlessly connects with in-domain data, and focuses on building cross-domain multi-party joint computing capabilities under the control of data sovereignty signaling.