TID-MOP:面向数据交易所场景下的安全管控综合框架

TID-MOP:The Comprehensive Framework of Security Management and Control in the Scenario of Data Exchange

【目的】为促进数据交易所安全合规发展,本文针对数据交易所场景下的数据交易风险、数据安全风险与基础安全风险,提出兼顾技术路径与机制保障的数据交易安全管控综合框架。【方法】运用文献调研法,梳理近几年国内外数据交易安全领域的技术与管理研究现状,结合数据交易所实践,提出技术与机制相结合的"TID-MOP"数据交易安全管控体系。【结果】"TID-MOP"综合框架设计了实现交易安全的"三分三合"核心技术架构,即"业务流、计算流、资金流相分离,通过区块链汇合流通环境";"撮合实验环境与生产计算环境相分离,通过模型管理、数据管理联动计算环境";"数据计算与安全监管相分离,通过控制管理中心统一管理监管环境",提升了数据流通和交易安全性,实现了全流程的安全控制和统一监管。【局限】需进一步研究验证安全管控综合框架的实际运行效率。【结论】"TID-MOP"数据交易安全管控综合框架以数据交易过程为核心,为数据交易业务的发展与创新提供重要参考。

[Objective] In order to promote the safety and compliance development of data exchange, this paper proposes a comprehensive framework of data transaction security management and control which takes both technical path and mechanism guarantee into account for data transaction risk, data security risk and infrastructure security risk in data exchange scenarios. [Methods] Using literature research method, this paper reviews the current literature of technology and management in the field of data transaction security at home and abroad.Combining the practice of data exchange, this paper puts forward a“TID-MOP”data transaction security management and control framework which contains both technology and mechanism. [Results] The“TID-MOP”comprehensive framework designs a core technology architecture to realize transaction security, that is,“separation of business flow, computing flow and capital flow, and convergence of circulation environment through blockchain”;“Separate the experimental environment from the production computing environment, and link the computing environment through model management and data management”;“Data computing is separated from safety supervision, and the supervision environment is uniformly managed through the control and management center”. The technology architecture improves the safety of data circulation and transaction, and realizes the safety control and unified supervision of the whole process. [Limitations] Further research is needed to verify the actual operation efficiency of the comprehensive framework. [Conclusions] The“TID-MOP”framework takes the data transaction process as the core, and provides an effective reference for the development and innovation of data transaction.