## 4 Data Management Infrastructure and Workflow
### System Design, Data Access Workflow, and Security Features  
Figure 18 shows a schematic overview of the workflow adopted in our BENTEN-based data management system. The measurement data produced at each synchrotron beamline were transferred to project-specific storage repositories, where researchers curated the datasets by assigning and validating metadata before registering them in the database using the BENTEN REST API. The integrated workflow features:  
* **End-to-End Data Pipeline:** From initial data acquisition to metadata assignment and database registration, every step follows a well-defined sequence. This consistency ensures that the data remain traceable, their provenance is well documented, and subsequent analyses are reproducible. * **User-Friendly Access and Search:** A web-based interface mirrors the directory structures of the underlying beamline storage, thereby providing an intuitive navigation experience. The integration of Elasticsearch [58] enables efficient discovery through keyword and full-text searches. Additionally, preview functionalities such as thumbnails and spectral plots allow users to rapidly evaluate the relevance of datasets. * **Flexible and Efficient Data Retrieval:** For datasets within a few gigabytes, users can directly download the ZIP archives through a web interface for straightforward access. For datasets exceeding this size, the system supports downloads via the aria2 protocol [59]. In such cases, users must launch the download separately to handle the download process. This method retains the original tree-structured directory organization and ensures efficient and reliable transfers through parallel downloads and hash-based data integrity verification using Metalink [60]. These flexible options accommodate datasets of various sizes, thereby enhancing the usability and performance of synchrotron X-ray experimental data management. * **Robust Security, Authentication and Authorization:** The system employs OpenID Connect 1.0 [61] for secure user verification, ensuring that access tokens are issued through standardized procedures and are used to safeguard communication. These tokens facilitate secure authentication (verifying the identity of users) and authorization (granting users an appropriate level of access to their role) for operations such as data registration, search, and access via the BENTEN API. In addition, the platform incorporates a two-factor authentication (2 FA), requiring an email-based verification during logging in to enhance security. These measures protect intellectual property, enable controlled data sharing, and ensure secure operation. Integration with the NIMS MIX platform facilitates secure interoperability between external collaborators and future data repositories. By meticulously designing the data pipeline, focusing on metadata quality, and aligning efforts with ongoing international standardization initiatives, the PEFC project's data management infrastructure positions itself on the frontiers of reproducibility, interoperability, and collaborative research. Looking ahead, we plan to deepen the integration with emerging metadata standards, broaden the range of MI tools employed, and continuously refine our security and access policies. Ultimately, this evolving framework will ensure that  
Figure 18: Overview of data management using the BENTEN platform. Beamline-collected datasets are curated and annotated with metadata before database registration. The curated data are made available for analysis via a web interface and can be transferred to the NIMS MIX platform for advanced MI-based evaluations. our data serve not only the immediate needs of the PEFC research community, but also the long-term advancement of materials science as a whole. The FC-BENTEN platform has been developed based on user needs to facilitate efficient data registration, browsing, searching, and downloading.