# A Novel Cryptography-Based Architecture for Secure Data Asset Sharing and Circulation Systems
); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.W. ); [EMAIL_ADDRESS] (W.H. ); [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 6100041, China; [EMAIL_ADDRESS] (Y.Z. )1 National Key Laboratory of Security Communication, Chengdu 610041, China; [EMAIL_ADDRESS] (Y.  
and unreliable transmission channels in the process of cross-border cross-domain sharing and circulation of data assets. The security operation ability of data assets has increasingly become an important part of the core competence of enterprises. Faced with massive highly sensitive and high-value data assets, there are many problems in current security protection methods [3]. First, the security risks faced by data asset protection are more complex and diverse than traditional information system security, the existing technical means mainly solve a single problem, through the deployment of security protection measures to ensure the security of the business system, thus forming a number of security protection islands, which not only increase the difficulty of security management, but also lack a systematic security protection ability. Second, the sharing and circulation of data assets is a difficulty and key link of security protection. It is necessary to ensure that there is no disclosure, as well as privacy and compliance in the process of circulation. At the same time, once there are security issues such as data leakage and privacy disclosure, we must be able to trace back to the risk points and those responsible. In addition, it is necessary to ensure that the ownership, right to use and control of data and data assets are clearly defined and confirmed, but it is difficult for the security protection ability of the existing technology to ensure prior supervision and solid verification in the matter and traceability after the event. Third, the security protection of massive data itself is a kind of high-density complex calculation, which necessitates greater requirements for the performance of security means. Although conventional security means can be extended by stacking, they bring the performance burden to the protected business system and increase its running costs. Based on the above analysis, this paper focuses on the security risks faced by the sharing and circulation of data assets in an uncontrolled environment, and on the security requirements of four key scenarios: outsourcing storage, multi-party sharing, trusted operation and cross-domain return.