ISO/IEC TR TECHNICAL REPORT 23186 First edition 2018-12 Information technology Cloud computing Framework of trust for processing of multi-sourced data Referencenumber IS0/IEC TR23186:2018(E) IEC rs IS0/IEC2018 IS0/IECTR23186:2018(E) COPYRIGHTPROTECTEDDOCUMENT @IS0/IEC2018 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either IsO at the address belowor Iso'smemberbody in the country ofthe requester. ISO copyright office CP 401 : Ch. de Blandonnet 8 CH-1214 Vernier, Geneva Phone:+41227490111 Fax:+412274909 47 Email: [email protected] Website:www.iso.org Published in Switzerland ii @ IS0/IEC 2018 - All rights reserved IS0/IECTR23186:2018(E) Contents Page Foreword .iv Introduction V 1 Scope. 1 2 Normative references 1 3 Terms and definitions 1 4 Symbols and abbreviated terms 2 5 Scenarios. 2 5.1 Using multi-sourced data to reduce traffic deaths and injuries 2 5.2 Using multi-sourced data for home automation 3 5.3 Usingmulti-sourced dataforautomotive operations 4 6 Trust .5 7 Dataaccessandprocessingrights .6 8 Frameworkfortrusted processingofmulti-sourced data 7 8.1 Introduction 7 8.2 Data flow 7 8.3 Elements of trust 8 8.3.1 General 8 8.3.2 Data use obligations and controls 8 8.3.3 Data provenance records, quality and integrity 10 8.3.4 Chainofcustody 11 8.3.5 Securityand privacy 11 8.3.6 Immutableproofofcompliance 11 6 Usingtheframework inagreements 12 9.1 General 12 9.2 Datauseobligationsand controls 12 9.3 Data provenance records, quality and integrity 12 9.4 Chain ofcustody 12 9.5 Security and privacy. 12 9.6 Immutableproof of compliance. 12 Annex A (informative) Data use obligations and data use controls 13 Bibliography 15 @ IS0/IEC 2018-All rights reserved ii