RESEARCH PAPERS

Research on the Security Risk Governance Model of Government Open Data from the Perspective of Zero Trust

  • Zhou Jinghong ,
  • Weng Wuliang ,
  • Bi Chongwu
Expand
  • 1 School of Information Management, Wuhan University, Wuhan 430072;
    2 School of Information Management, Zhengzhou University, Zhengzhou 450001;
    3 Zhengzhou Data Science Research Center, Zhengzhou 450001
Zhou Jinghong, doctoral candidate, E-mail: zhoutomoe@163.com; Weng Wuliang, master candidate; Bi Chongwu, associate professor, PhD, master supervisor.

Received date: 2024-08-30

  Revised date: 2025-01-12

  Online published: 2025-07-21

Supported by

This work is supported by the major project of National Social Science Fund of China, titled “Research on the Privacy Risk Measurement and Protection Mechanism Innovation of Government Data” (Grant No. 21&ZD338).

Abstract

[Purpose/Significance] Government open data is an important national strategic resource. Carrying out the security risk management of government open data will help to improve the theoretical framework and practical scheme of government data security management. [Method/Process] Firstly, following the zero trust perspective and the main line of “identification evaluation control”, the security risk governance model of government open data was constructed. Secondly, six government health data sets at different levels and regions were selected as samples for empirical research to test the effectiveness of this model. Finally, the security risk status of the sample data was discussed from multiple perspectives, the governance effect was analyzed, and the optimal design of the model was proposed. [Result/Conclusion] This model is well integrated with zero trust, governs the security risks of government open data to a certain extent, and takes into account the security, controllability, orderly sharing and openness of government data, with good landing and scalability.

Cite this article

Zhou Jinghong , Weng Wuliang , Bi Chongwu . Research on the Security Risk Governance Model of Government Open Data from the Perspective of Zero Trust[J]. Library and Information Service, 2025 , 69(15) : 3 -13 . DOI: 10.13266/j.issn.0252-3116.2025.15.001

References

[1] POLALTO. Zero trust network Architecture with John Kindervag-Video[EB/OL]. [2025-03-22]. https://www.paloaltonetworks.jp/resources/videos/zero-trust.
[2] ROSE S, BORCHERT O, MITCHELL S, et al. Zero trust architecture[R]. Gaithersburg: National Institute of Standards and Technology, 2020.
[3] 王群, 袁泉, 李馥娟, 等. 零信任网络及其关键技术综述[J]. 计算机应用, 2023, 43(4): 1142-1150. (WANG Q, YUAN Q, LI F J, et al. Summary of zero trust networks and their key technologies[J]. Journal of computer applications, 2023, 43(4): 1142-1150.)
[4] 诸葛程晨, 王群, 刘家银, 等. 零信任网络综述[J]. 计算机工程与应用, 2022, 58(22): 12-29. (ZHUGE C C, WANG Q, LIU J Y, et al. Overview of zero trust networks[J]. Computer engineering and applications, 2022, 58(22): 12-29.)
[5] 曾玲, 刘星江. 基于零信任的安全架构[J]. 通信技术, 2020, 53(7): 1750-1754. (ZENG L, LIU X J. Security architecture based on Zero Trust[J]. Communication technology, 2020, 53(7): 1750-1754.)
[6] 左英男. 零信任架构: 网络安全新范式[J]. 金融电子化, 2018(11): 50-51. (ZUO Y N. Zero Trust Architecture: a new paradigm of network security[J]. Financial computerizing, 2018(11): 50-51.)
[7] MACD ONALD N. Zero trust networking as an initial step on the roadmap to CARTA[EB/OL]. [2025-03-22]. https://www.gartner.com.
[8] KINDERVAG J. No more chewy centers: the zero trust model of information security[R]. Cambridge: Forrester research, Inc, 2016.
[9] 李崇智. 基于零信任架构的统一身份认证平台应用研究[J]. 信息安全研究, 2021, 7(12): 1127-1134. (LI C Z. Research on the application of unified identity authentication platform based on zero trust architecture[J]. Journal of information security research, 2021, 7(12): 1127-1134.)
[10] 王斯梁, 冯暄, 蔡友保, 等. 零信任安全模型解析及应用研究[J]. 信息安全研究, 2020, 6(11): 966-971. (WANG S L, FENG X, CAI Y B, et al. Analysis and application research of zero trust security model[J]. Journal of information security research, 2020, 6(11): 966-971.)
[11] 张宇, 张妍. 零信任研究综述[J]. 信息安全研究, 2020, 6(7): 608-614. (ZHANG Y, ZHANG Y. Review of zero trust research[J]. Journal of information security research, 2020, 6(7): 608-614.)
[12] 付熙雯, 郑磊. 政府数据开放国内研究综述[J]. 电子政务, 2013(6): 8-15. (FU X W, ZHENG L. A review of domestic research on government data openness[J]. E-government, 2013(6): 8-15.)
[13] BLAKEMORE M, CRAGLIA M. Access to public-sector information in Europe: policy, rights, and obligations[J]. The information society, 2006, 22(1): 13-24.
[14] 杨蕾, 袁晓光. 数据安全治理研究[M]. 北京: 知识产权出版社, 2020. (YANG L, YUAN X G. Research on data security governance [M]. Beijing: Intellectual Property Press, 2020.)
[15] 童楠楠, 朝乐门. 大数据时代下数据管理理念的变革:从结果派到过程派[J]. 情报理论与实践, 2017, 40(2): 60-65. (TONG N N, CHAO L M. The transformation of data management concepts in the era of big data: from result oriented to process oriented[J]. Information studies: theory & application, 2017, 40(2): 60-65.)
[16] 陈尚龙. 论政府数据开放的理论基础[J]. 理论与改革, 2016(6): 104-107. (CHEN S L. On the theoretical basis of government data openness[J]. Theory and reform, 2016(6): 104-107.)
[17] 付熙雯, 郑磊. 开放政府数据的价值:研究进展与展望[J]. 图书情报工作, 2020, 64(9): 122-132. (FU X W, ZHENG L. The value of open government data: research progress and Prospects[J]. Library and information service, 2020, 64(9): 122-132.)
[18] 肖冬梅, 苏莹. 我国政府数据开放中的安全风险及其防范对策[J]. 现代情报, 2022, 42(6): 112-120, 131. (XIAO D M, SU Y. Security risks and Countermeasures in the opening of government data in China[J]. Journal of modern information, 2022, 42(6): 112-120, 131.)
[19] 代佳欣. 政府数据开放风险识别——基于“过程”的分析框架[J]. 现代情报, 2020, 40(4): 111-119. (DAI J X. Risk identification of government data opening: an analysis framework based on “process”[J]. Journal of modern information, 2020, 40(4): 111-119.)
[20] 朱光, 丰米宁, 刘硕. 大数据流动的安全风险识别与应对策略研究——基于信息生命周期的视角[J]. 图书馆学研究, 2017(9): 84-90. (ZHU G, FENG M N, LIU S. Research on security risk identification and coping strategies of big data flow: from the perspective of information lifecycle[J]. Researches in library science, 2017(9): 84-90.)
[21] 张聪丛, 郜颍颍, 赵畅, 等. 开放政府数据共享与使用中的隐私保护问题研究——基于开放政府数据生命周期理论[J]. 电子政务, 2018(9): 24-36. (ZHANG C C, GAO Y Y, ZHAO C, et al. Research on privacy protection issues in open government data sharing and use: based on the theory of open government data lifecycle[J]. E-government, 2018(9): 24-36.)
[22] 黄如花, 温芳芳. 开放政府数据生命周期视角的我国政府数据资源管理政策文本内容分析——国家各部门的政策实践[J]. 图书馆, 2018(6): 1-7, 14. (HUANG R H, WEN F F. Analysis of the text content of China’s government data resource management policy from the perspective of open government data lifecycle: policy practices of various departments in the country[J]. Library, 2018(6): 1-7, 14.)
[23] SHEPHERD E, SEXTON A, DUKE-WILLIAMS O, et al. Risk identification and management for the research use of government administrative data[J]. Records management journal, 2020, 30(1): 101-123.
[24] 臧国全, 王家振, 毕崇武, 等. 政府数据中敏感数据识别与隐私计量研究[J]. 图书情报工作, 2022, 66(15): 66-75. (ZANG G Q, WANG J Z, BI C W, et al. Research on sensitive data identification and privacy measurement in government data[J]. Library and information service, 2022, 66(15): 66-75.)
[25] SANGKACHAN T, POWINTARA N. Data-Driven government: essential mechanisms to unleash the power of data[J]. International journal of electronic government research, 2022, 18(1): 1-19.
[26] 完颜邓邓, 宋婷. 我国地方政府数据开放平台的安全风险测评[J]. 图书馆论坛, 2022, 42(2): 119-128. (WANYAN D D, SONG T. Security risk assessment of local government data open platform in China[J]. Library tribune, 2022, 42(2): 119-128.)
[27] LNENICKA M, NIKIFOROVA A, SAXENA S, et al. Investigation into the adoption of open government data among students: The behavioral intention-based comparative analysis of three countries[J]. Aslib journal of information management, 2022, 74(3): 549-567.
[28] ALI-ELDIN A, ZUIDERWIJK A, JANSSEN M. A privacy risk assessment model for open data[C]//International symposium on business modeling and software design. Berlin: Springer, 2017: 186-201.
[29] LE V H, PHUNG V O, NGUYEN N H. Information security risk management by a holistic approach: a case study for Vietnamese e-government[J]. International journal of computer science and network security, 2020, 20(6): 72-82.
[30] 庄国波, 韩惠. 5G时代政府数据开放共享的安全风险及防范[J]. 理论探讨, 2020(5): 48-54. (ZHUANG G B, HAN H. Security risks and prevention of government data open sharing in 5g Era[J]. Theoretical investigation, 2020(5): 48-54.)
[31] 张翠梅, 方宜. 区块链架构下政府数据开放共享治理研究[J]. 南通大学学报(社会科学版), 2021, 37(6): 60-70. (ZHANG C M, FANG Y. Research on government data open sharing governance under blockchain architecture[J]. Journal of Nantong University(social sciences edition), 2021, 37(6): 60-70.)
[32] 袁静, 张翼翔, 臧国全. 用户参与政府开放数据隐私风险治理行为的影响因素分析[J]. 图书情报工作, 2023, 67(11): 12-24. (YUAN J, ZHANG Y X, ZANG G Q. Analysis on the influencing factors of users’ participation in government open data privacy risk governance behavior[J]. Library and information service, 2023, 67(11): 12-24.)
[33] 袁红, 王焘. 政府开放数据生态系统可持续发展实现路径的系统动力学分析[J]. 图书情报工作, 2021, 65(17): 13-25. (YUAN H, WANG T. System dynamics analysis of sustainable development path of government open data ecosystem[J]. Library and information service, 2021, 65(17): 13-25.)
[34] 蔡婧璇, 黄如花. 美国政府数据开放的政策法规保障及对我国的启示[J]. 图书与情报, 2017(1): 10-17. (CAI J X, HUANG R H. The policy and regulation guarantee of American government data openness and its enlightenment to China[J]. Library & information, 2017(1): 10-17.)
[35] 黄如花, 林焱. 法国政府数据开放共享的政策法规保障及对我国的启示[J]. 图书馆, 2017(3): 1-6. (HUANG R H, LIN Y. The policy and regulation guarantee of French government data open sharing and Its Enlightenment to China[J]. Library, 2017(3): 1-6.)
[36] 黄国彬, 刘馨然, 张莎莎. 英澳科学数据共享过程中个人隐私保护政策研究[J]. 图书情报知识, 2017(6): 105-113. (HUANG G B, LIU X R, ZHANG S S. Research on personal privacy protection policies in the process of scientific data sharing between the UK and Australia[J]. Document, information & knowledge, 2017(6): 105-113.)
[37] 陈美, 梁乙凯. 加拿大隐私影响评估政策:历程、内容、分析与启示[J]. 图书情报工作, 2021, 65(17): 142-151. (CHEN M, LIANG Y K. Canadian privacy impact assessment policy: history, content, analysis and enlightenment[J]. Library and information service, 2021, 65(17): 142-151.)
[38] 吴太轩, 朱建海. 论政府数据开放的法治化[J]. 中共福建省委党校(福建行政学院)学报, 2020(2): 100-108. (WU T X, ZHU J H. On the legalization of government data opening[J]. Journal of Fujian Provincial Committee Party School of CPC (Fujian Academy of Governance), 2020(2): 100-108.)
[39] 张倩雯, 张文艺. 国际经贸条约保障政府开放数据安全:缘起、模式与中国选择[J]. 图书情报工作, 2023, 67(8): 83-93. (ZHANG Q W, ZHANG W Y. International Economic and trade treaties to ensure the security of government open data: origin, mode and China’s choice[J]. Library and information service, 2023, 67(8): 83-93.)
[40] 新华网. 中华人民共和国数据安全法[EB/OL]. [2025-03-25]. https://www.xinhuanet.com/2021-06/11/c_1127552204.htm. (Xinhuanet. Data security law of the people’s Republic of China[EB/OL]. [2025-03-25]. https://www.xinhuanet.com/2021-06/11/c_1127552204.htm.)
[41] 李坤媛. 基于数据生命周期的我国政府数据开放风险识别及防范研究[D]. 哈尔滨:黑龙江大学, 2024. (LI K Y. Research on risk identification and prevention of government data opening in China based on data lifecycle[D]. Harbin: Heilongjiang University, 2024.)
[42] 贵州省大数据标准化技术委员. 政府数据数据分类分级指南: DB52T 1123—2016[S]. 贵阳: 贵州省质量技术监督局, 2016. (Guizhou Big Data Standardization Technical Committee. Government data, data classification and grading Guide: DB52T 1123—2016[S]. Guiyang: Guizhou Provincial Bureau of Quality and Technical Supervision, 2016.)
[43] 浙江省大数据发展管理局. 数字化改革公共数据分类分级指南: DB33/T 2351—2021[S]. 杭州: 浙江省市场监督管理局, 2021. (Zhejiang Big Data Development Management Bureau. Digital reform, public data classification and grading Guide: DB33/T 2351—2021[S]. Hangzhou: Zhejiang Provincial Market Supervision Administration, 2021.)
[44] 武汉市公共数据开放平台. 关于印发《武汉市公共数据资源开放核心元数据标准(试行)》和《武汉市公共数据资源开放分级分类指南(试行)》的通知[EB/OL]. [2025-03-29]. http://data.wuhan.gov.cn/zxy/dfzc/202104/t20210414_1668246.shtml. (Wuhan Public Data Open Platform. On printing and issuing the core metadata standard for the opening of public data resources in Wuhan (Trial) And Wuhan public data resources open classification guide (Trial)[EB/OL]. [2025-03-29]. http://data.wuhan.gov.cn/zxy/dfzc/202104/t20210414_1668246.shtml.)
[45] 訾然, 刘嘉. 基于精益信任的风险信任体系构建研究[J]. 信息网络安全, 2019, 19(10): 32-41. (ZI R, LIU J. Research on construction of risk and trust architecture based on lean trust[J]. Netinfo security, 2019, 19(10): 32-41.)
[46] 复旦大学数字与移动治理实验室. 2023中国地方公共数据开放利用报告(省域)[EB/OL]. [2025-03-29]. http://www.dmg.fudan.edu.cn. (Fudan University Digital and Mobile Governance Laboratory. 2023 China local public data open utilization report(provincial)[EB/OL]. [2025-03-29]. http://www.dmg.fudan.edu.cn.)
[47] 复旦大学数字与移动治理实验室.中国开放数林指数[EB/OL]. [2025-03-29]. http://ifopendata.fudan.edu.cn. (Fudan University Digital and Mobile Governance Laboratory. China Open Data Index[EB/OL]. [2025-03-29]. http://ifopendata.fudan.edu.cn.)
Outlines

/

〈 〉