The i4Trust Collaboration Programme:
Combining FIWARE and iSHARE technologies to
accelerate creation of data spaces in line with DSBA
Technical Convergence recommendations
Dr. Dennis Wendland
Technical Lead & Architect
FIWARE Foundation
dennis.wendland@fiware.org, @FIWARE
▪ Using NGSI-LD and smart data models, organizations
(e.g., cities) have been able to break the information
silos and build their smart organizations architecture as
a digital twin based system of systems
▪ The next natural step for an any organization is to
integrate new systems provided by 3rd parties from the
cloud (SaaS solutions) as well as provide data and data
processing services to 3rd parties
▪ However, this requires to address some issues:
• How to trust on third organizations: providers of systems I
want to integrate in my map of systems or consumers of
data and data processing services I plan to offer
• How to be able to use 3rd party services without
registering nor disclosing identity of my own users
(employees, customers, …)
• How to manage acquisition of rights to use services,
eventually implying payment and billing
▪ Data Spaces technologies help to address these issues
1
Data Spaces: next natural step in the digital transformation of
organizations
A
Parks &
Gardens
FIWARE vision of Data Spaces
▪ Fundamental principle in Data Spaces for a Data Economy:
• Data providers publish data services knowing that consumers,
which are unknown “a priori”, will know how to consume them
• Data consumers know how to consume data services published
by data providers they can discover
▪ This requires all participants to speak the same “language”:
• Data exchange API: the sentences you construct
• Standard data models: what you speak about (vocabulary)
▪ Also that they can exchange in a trustful and secure manner:
• Trust Anchor Services: how to verify when a) a participant is a
valid legal entity, b) it is member of the ecosystem (therefore
agrees with rules) and c) it owns the credentials it claims (they
have been issued by a trusted party)
• Common mechanisms for Identity and Access Management
(IAM): how to enforce that only those owning the right
credentials will be able to do access and use the data
▪ Besides, also fundamental:
• Publication and Marketplace services: how to discover, contract
• Management of provenance, traceability
2
Smart Grid
Smart
Building
Smart City
?
Core element in data spaces: Data Space Connector
▪ The concept of Data Space Connector has evolved to
match the idea of an integrated suite of components
every organization participating in a data space should
deploy to “connect” to the data space
▪ These components would be deployed and configured in
controlled environments (e.g., a Kubernetes cluster) and
implement a number of services which may be required
for an organization to connect in its role as provider of
data services, consumer of data services
or both:
• Authentication (including the interface to trust services)
• Authorization (policy enforcement)
• Connection to Data Exchange APIs
• Data resources publication (Metadata Management)
• Contract Management
• Logging
• Remote Attestation
• …
▪ The concept of Data Space Connector in IDS RAM 4.0
has evolved to support this vision
Data Spaces systems
4
5
Technology Building Blocks for Data Spaces
Data Spaces Business Alliance (DSBA): joining forces
6
BDVA, FIWARE, GAIA-X and IDSA launched
the Data Spaces Business Alliance (DSBA)
to accelerate Business Transformation in
the Data Economy (Sep 23rd, 2021)
• One voice and a common framework to make
interoperable Data Spaces happen;
• Together, the Alliance’s founding organisations
represent 1,000+ leading key industry players;
• With its combined cross-industry expertise,
resources and know-how, the Alliance drives
awareness and rely on more than 100 Hubs for
dissemination
• Technical Convergence discussions towards
common reference technology framework for
creation of Data Spaces:
○ Agile approach based on delivery of subsequent
versions of a Minimum Viable Framework (MVF)
specification where we do not only identify standards
and target components but how to integrate them
○ Once alignment on relevant topics within several of the
ongoing workstreams is achieved, the publication of a
new version of the DSBA Technology Convergence
document will be published to incentivize development of
compliant implementations
Vision of DSBA-compliant Data Space Connector
▪ The concept of Data Space Connector has evolved to match the idea of
an integrated suite of components every organization participating in a
data space should deploy to “connect” to the data space, covering:
• Data Exchange
• Authentication
• Authorization
• Resources Publication
• Contract Management
• Logging
• …
▪ Aligning with DSBA recommendations implies:
• Compatibility with NGSI-LD as data exchange API
• Authentication should be based on W3C DID + VC/VP standards and
SIOPv2/OIDC4VP protocols implementing an interface to trust services
based on EBSI specifications (DID-Registry, Trusted-Issuers-Registry
APIs extended to support authentication based on VCs)
• Authorization should implement a P*P architecture for ABAC where VC
claims map to attributes and ODRL is used as policy definition language
▪ Approach for contract negotiation still under discussion but should be
solved by adopting workflows based on TM Forum APIs as new
Dataspace Protocol complementary to agreement negotiation protocol
7
8
i4Trust in a nutshell
i4Trust is a collaboration program involving
FIWARE Foundation, iSHARE Foundation and FundingBox
whose main goal is to
accelerate the creation of Data Spaces
enabling trustworthy and effective publication and usage of data services for creation of value
HOW ?
ensuring that the combination of
FIWARE Data Space Components and iSHARE-compliant services and legal scheme
will help to build Data Spaces complying with
DSBA Technical Convergence recommendations
supporting Digital Innovation Hubs (DIHs) with tools and methodologies for
providing education, coaching and support for funding
to organizations willing to build data spaces
Engaged DIHs may become FIWARE iHubs and iSHARE implementation partners
9
i4Trust: initial phase funded by the EC
Community
Management
30 experiments
150+ SMEs
future experiments
market solutions
Technology
Training
Technical Support
Digital Innovation Hubs (DIHs)
- Evangelization
- Training
- Coaching
<
<
Community of Practice
10
i4Trust: from a project to a long-term collaboration program
Not a project … … but a long-term collaboration program
FIWARE Data Space Connector
▪ FIWARE Data Space Connector components together with recipes for
deploying FIWARE Data Space Connectors will be released by end of
September on the basis of combining the following components which
already align with DSBA TC recommendations:
• Context Broker technology for Data Exchange/Transfer
• Trust and IAM components implementing W3C DID + VC/VP standards,
SIOPv2/OIDC4VP protocols and interface to trust services based on
extended EBSI APIs (DID-registry, Trusted Issuers Registry)
• BAE modules implementing TM Forum APIs for contract negotiation
▪ For a future release, the incorporation of the following modules is considered:
• Personal Data Consent Management modules (based on CaPE product
from Engineering).
• Idra product from Engineering as DCAT-compliant data resources catalog
function for Metadata Management
• logging modules based on either BAE/marketplace functions for logging or,
if we want to rely on blockchain, Cannis Major
▪ The FIWARE Data Space Connector will be the best aligned with DSBA
recommendations available in the market
11
Summary
▪ Vision and design principles are important but we need to
perform a successful transfer to the market … starting now!
▪ FIWARE has a good track record in moving from vision to
execution, making things happen!
▪ We shall not re-invent the wheel: leverage relevant open
standards, open source frameworks
▪ DSBA brings all relevant organizations joining forces:
BDVA, FIWARE, Gaia-X, IDSA … together !!
▪ The i4Trust collaboration program is helping to accelerate
creation of data spaces by bringing a first Minimum Viable
Framework (FIWARE Data Space Connector compatible
with iSHARE Scheme) that is aligned with DSBA Technical
Convergence recommendations
▪ Join us and be front-runner of the Data Spaces revolution!
12
Thank you!
http://fiware.org
Follow @FIWARE on Twitter
From vision to execution: i4Trust
▪ Software that works NOW, aligned with first results
of the DSBA Technology Convergence Task Force
(first Minimum Viable Framework available):
• Compatible with iSHARE and any other Trust Anchor
Services implementing DSBA specs (compatible with
EBSI)
• Open source components available on GitHub,
integrated as part of the FIWARE Catalogue, data
spaces participants can deploy and operate
• Training material (tutorials, training)
▪ A framework curated through its use in selected
pioneer experiments:
• 13 experiments completed in Dec 2022 helped to
curate the framework
• 17 experiments started Jan 2023 (see press release)
• Multiple application domains: cities, tourism, mobility,
agriculture, logistics, …
14
i4Trust: open source, standard-based mature technologies
Metadata &
Discovery Services
Trusted
Exchange
Data Models &
formats
Data Exchange
API
Provenance &
Traceability
Access & Usage
Control/Policies
Identity
Management
Publication &
Marketplace Services
Data Usage
Accounting
Operational
Agreements
Organizational
Agreements
Business
Agreements
Data
Interoperability
Data Sovereignty
and Trust
Data
Value Creation
Data Spaces
Governance
Technology Building Blocks
15
iSHARE and FIWARE bring the necessary components along with basic governance structure
to create i4Trust data spaces
16
Main achievements

Dennis Wendland_The i4Trust Collaboration Programme.pptx

  • 1.
    The i4Trust CollaborationProgramme: Combining FIWARE and iSHARE technologies to accelerate creation of data spaces in line with DSBA Technical Convergence recommendations Dr. Dennis Wendland Technical Lead & Architect FIWARE Foundation dennis.wendland@fiware.org, @FIWARE
  • 2.
    ▪ Using NGSI-LDand smart data models, organizations (e.g., cities) have been able to break the information silos and build their smart organizations architecture as a digital twin based system of systems ▪ The next natural step for an any organization is to integrate new systems provided by 3rd parties from the cloud (SaaS solutions) as well as provide data and data processing services to 3rd parties ▪ However, this requires to address some issues: • How to trust on third organizations: providers of systems I want to integrate in my map of systems or consumers of data and data processing services I plan to offer • How to be able to use 3rd party services without registering nor disclosing identity of my own users (employees, customers, …) • How to manage acquisition of rights to use services, eventually implying payment and billing ▪ Data Spaces technologies help to address these issues 1 Data Spaces: next natural step in the digital transformation of organizations A Parks & Gardens
  • 3.
    FIWARE vision ofData Spaces ▪ Fundamental principle in Data Spaces for a Data Economy: • Data providers publish data services knowing that consumers, which are unknown “a priori”, will know how to consume them • Data consumers know how to consume data services published by data providers they can discover ▪ This requires all participants to speak the same “language”: • Data exchange API: the sentences you construct • Standard data models: what you speak about (vocabulary) ▪ Also that they can exchange in a trustful and secure manner: • Trust Anchor Services: how to verify when a) a participant is a valid legal entity, b) it is member of the ecosystem (therefore agrees with rules) and c) it owns the credentials it claims (they have been issued by a trusted party) • Common mechanisms for Identity and Access Management (IAM): how to enforce that only those owning the right credentials will be able to do access and use the data ▪ Besides, also fundamental: • Publication and Marketplace services: how to discover, contract • Management of provenance, traceability 2 Smart Grid Smart Building Smart City ?
  • 4.
    Core element indata spaces: Data Space Connector ▪ The concept of Data Space Connector has evolved to match the idea of an integrated suite of components every organization participating in a data space should deploy to “connect” to the data space ▪ These components would be deployed and configured in controlled environments (e.g., a Kubernetes cluster) and implement a number of services which may be required for an organization to connect in its role as provider of data services, consumer of data services or both: • Authentication (including the interface to trust services) • Authorization (policy enforcement) • Connection to Data Exchange APIs • Data resources publication (Metadata Management) • Contract Management • Logging • Remote Attestation • … ▪ The concept of Data Space Connector in IDS RAM 4.0 has evolved to support this vision
  • 5.
  • 6.
  • 7.
    Data Spaces BusinessAlliance (DSBA): joining forces 6 BDVA, FIWARE, GAIA-X and IDSA launched the Data Spaces Business Alliance (DSBA) to accelerate Business Transformation in the Data Economy (Sep 23rd, 2021) • One voice and a common framework to make interoperable Data Spaces happen; • Together, the Alliance’s founding organisations represent 1,000+ leading key industry players; • With its combined cross-industry expertise, resources and know-how, the Alliance drives awareness and rely on more than 100 Hubs for dissemination • Technical Convergence discussions towards common reference technology framework for creation of Data Spaces: ○ Agile approach based on delivery of subsequent versions of a Minimum Viable Framework (MVF) specification where we do not only identify standards and target components but how to integrate them ○ Once alignment on relevant topics within several of the ongoing workstreams is achieved, the publication of a new version of the DSBA Technology Convergence document will be published to incentivize development of compliant implementations
  • 8.
    Vision of DSBA-compliantData Space Connector ▪ The concept of Data Space Connector has evolved to match the idea of an integrated suite of components every organization participating in a data space should deploy to “connect” to the data space, covering: • Data Exchange • Authentication • Authorization • Resources Publication • Contract Management • Logging • … ▪ Aligning with DSBA recommendations implies: • Compatibility with NGSI-LD as data exchange API • Authentication should be based on W3C DID + VC/VP standards and SIOPv2/OIDC4VP protocols implementing an interface to trust services based on EBSI specifications (DID-Registry, Trusted-Issuers-Registry APIs extended to support authentication based on VCs) • Authorization should implement a P*P architecture for ABAC where VC claims map to attributes and ODRL is used as policy definition language ▪ Approach for contract negotiation still under discussion but should be solved by adopting workflows based on TM Forum APIs as new Dataspace Protocol complementary to agreement negotiation protocol 7
  • 9.
    8 i4Trust in anutshell i4Trust is a collaboration program involving FIWARE Foundation, iSHARE Foundation and FundingBox whose main goal is to accelerate the creation of Data Spaces enabling trustworthy and effective publication and usage of data services for creation of value HOW ? ensuring that the combination of FIWARE Data Space Components and iSHARE-compliant services and legal scheme will help to build Data Spaces complying with DSBA Technical Convergence recommendations supporting Digital Innovation Hubs (DIHs) with tools and methodologies for providing education, coaching and support for funding to organizations willing to build data spaces Engaged DIHs may become FIWARE iHubs and iSHARE implementation partners
  • 10.
    9 i4Trust: initial phasefunded by the EC Community Management 30 experiments 150+ SMEs future experiments market solutions Technology Training Technical Support Digital Innovation Hubs (DIHs) - Evangelization - Training - Coaching < < Community of Practice
  • 11.
    10 i4Trust: from aproject to a long-term collaboration program Not a project … … but a long-term collaboration program
  • 12.
    FIWARE Data SpaceConnector ▪ FIWARE Data Space Connector components together with recipes for deploying FIWARE Data Space Connectors will be released by end of September on the basis of combining the following components which already align with DSBA TC recommendations: • Context Broker technology for Data Exchange/Transfer • Trust and IAM components implementing W3C DID + VC/VP standards, SIOPv2/OIDC4VP protocols and interface to trust services based on extended EBSI APIs (DID-registry, Trusted Issuers Registry) • BAE modules implementing TM Forum APIs for contract negotiation ▪ For a future release, the incorporation of the following modules is considered: • Personal Data Consent Management modules (based on CaPE product from Engineering). • Idra product from Engineering as DCAT-compliant data resources catalog function for Metadata Management • logging modules based on either BAE/marketplace functions for logging or, if we want to rely on blockchain, Cannis Major ▪ The FIWARE Data Space Connector will be the best aligned with DSBA recommendations available in the market 11
  • 13.
    Summary ▪ Vision anddesign principles are important but we need to perform a successful transfer to the market … starting now! ▪ FIWARE has a good track record in moving from vision to execution, making things happen! ▪ We shall not re-invent the wheel: leverage relevant open standards, open source frameworks ▪ DSBA brings all relevant organizations joining forces: BDVA, FIWARE, Gaia-X, IDSA … together !! ▪ The i4Trust collaboration program is helping to accelerate creation of data spaces by bringing a first Minimum Viable Framework (FIWARE Data Space Connector compatible with iSHARE Scheme) that is aligned with DSBA Technical Convergence recommendations ▪ Join us and be front-runner of the Data Spaces revolution! 12
  • 14.
  • 15.
    From vision toexecution: i4Trust ▪ Software that works NOW, aligned with first results of the DSBA Technology Convergence Task Force (first Minimum Viable Framework available): • Compatible with iSHARE and any other Trust Anchor Services implementing DSBA specs (compatible with EBSI) • Open source components available on GitHub, integrated as part of the FIWARE Catalogue, data spaces participants can deploy and operate • Training material (tutorials, training) ▪ A framework curated through its use in selected pioneer experiments: • 13 experiments completed in Dec 2022 helped to curate the framework • 17 experiments started Jan 2023 (see press release) • Multiple application domains: cities, tourism, mobility, agriculture, logistics, … 14
  • 16.
    i4Trust: open source,standard-based mature technologies Metadata & Discovery Services Trusted Exchange Data Models & formats Data Exchange API Provenance & Traceability Access & Usage Control/Policies Identity Management Publication & Marketplace Services Data Usage Accounting Operational Agreements Organizational Agreements Business Agreements Data Interoperability Data Sovereignty and Trust Data Value Creation Data Spaces Governance Technology Building Blocks 15 iSHARE and FIWARE bring the necessary components along with basic governance structure to create i4Trust data spaces
  • 17.