Dr.Aid: Supporting Data-governance Rule Compliance for Decentralized Collaboration in an Automated Way

Abstract

Collaboration across institutional boundaries is widespread and increasing today. It depends on federations sharing data that often have governance rules or external regulations restricting their use. However, the handling of data governance rules (aka. data-use policies) remains manual, time-consuming and error-prone, limiting the rate at which collaborations can form and respond to challenges and opportunities, inhibiting citizen science and reducing data providers' trust in compliance. Using an automated system to facilitate compliance handling reduces substantially the time needed for such non-mission work, thereby accelerating collaboration and improving productivity. We present a framework, Dr.Aid, that helps individuals, organisations and federations comply with data rules, using automation to track which rules are applicable as data is passed between processes and as derived data is generated. It encodes data-governance rules using a formal language and performs reasoning on multi-input-multi-output data-flow graphs in decentralised contexts. We test its power and utility by working with users performing cyclone tracking and earthquake modelling to support mitigation and emergency response. We query standard provenance traces to detach Dr.Aid from details of the tools and systems they are using, as these inevitably vary across members of a federation and through time. We evaluate the model in three aspects by encoding real-life data-use policies from diverse fields, showing its capability for real-world usage and its advantages compared with traditional frameworks. We argue that this approach will lead to more agile, more productive and more trustworthy collaborations and show that the approach can be adopted incrementally. This, in-turn, will allow more appropriate data policies to emerge opening up new forms of collaboration.

Perennial Semantic Data Terms of Use for Decentralized Web

“…Smart object [29] uses complex constructs to define permitted and prohibited use of data, and combines this with the application information (using relational calculus) (C2) to derive policies for output data (C5), assuming and leveraging a tabular structure of data. Dr.Aid [28] focuses on the context of data-intensive scientific workflows, employing different structures to express data rules and process rules (C2). It supports policy reasoning and derivation for workflow graphs composed of multi-input-multi-output processes (C5).…”

“…(:col-2, :field, :column-2)). This concept of attributes is borrowed from Dr.Aid [28], which has been demonstrated as a powerful structure for supporting policy derivation. The following example shows how Alice defines her email address information as an attribute -the attribute is a kind of 'string' and has the value of "alice@a.b".…”