Foundational Components for B2B Data Sharing Using the Solid Protocol
Both, Andreas ; Kastner, Thorsten; Yeboah, Dustin; Braun, Christoph
1; Schraudner, Daniel; Schmid, Sebastian; Käfer, Tobias
1; Harth, Andreas
1 Institut für Angewandte Informatik und Formale Beschreibungsverfahren (AIFB), Karlsruher Institut für Technologie (KIT)
1; Schraudner, Daniel; Schmid, Sebastian; Käfer, Tobias
1; Harth, Andreas1 Institut für Angewandte Informatik und Formale Beschreibungsverfahren (AIFB), Karlsruher Institut für Technologie (KIT)
Abstract:
This article introduces foundational components for decentralized B2B data sharing based on the Solid Protocol, emphasizing data sovereignty, security, and interoperability.
These components are: (1) Authorization App (AuthApp) -- Facilitating granular control and compliance in access granting and revocation processes; (2) Rights Delegation Proxy (RDP) -- Supporting controlled delegation of rights, enabling natural persons to act on behalf of organizations while ensuring privacy and traceability;
(3) Data Provisioning Proxy (DPP) -- Allowing seamless and secure data provisioning across organizations while masking the identity of upstream data sources to protect business interests.
The components enable the creation of end-to-end, standards-based, flexible data value chains.
We validate their applicability through a real-world financial services use case involving loan processing, which illustrates data sharing and protection challenges in B2B ecosystems.
These components are: (1) Authorization App (AuthApp) -- Facilitating granular control and compliance in access granting and revocation processes; (2) Rights Delegation Proxy (RDP) -- Supporting controlled delegation of rights, enabling natural persons to act on behalf of organizations while ensuring privacy and traceability;
(3) Data Provisioning Proxy (DPP) -- Allowing seamless and secure data provisioning across organizations while masking the identity of upstream data sources to protect business interests.
The components enable the creation of end-to-end, standards-based, flexible data value chains.
We validate their applicability through a real-world financial services use case involving loan processing, which illustrates data sharing and protection challenges in B2B ecosystems.
| Zugehörige Institution(en) am KIT | Institut für Angewandte Informatik und Formale Beschreibungsverfahren (AIFB) |
| Publikationstyp | Zeitschriftenaufsatz |
| Publikationsjahr | 2025 |
| Sprache | Englisch |
| Identifikator | ISSN: 1544-5976, 1540-9589 KITopen-ID: 1000186001 |
| Erschienen in | Journal of Web Engineering |
| Verlag | Rinton Press |
| Band | 24 |
| Heft | 4 |
| Seiten | 593-633 |
| Projektinformation | MANDAT (BMFTR, 16DTM107B) |
| Vorab online veröffentlicht am | 31.07.2025 |
| Schlagwörter | Solid, Authorization, Access Control, Data Sharing, Access Granting, Zero Trust, Data Sovereignty |
| Nachgewiesen in | Scopus Web of Science OpenAlex Dimensions |