| 主权项 |
1. A method for an apparatus which operates in a data cloud, the method comprising:
requesting, by the apparatus, trust information from a service cloud; receiving, by the apparatus, the trust information from the service cloud; performing, by the apparatus, a trust assessment of the service cloud based on the trust information; controlling, by the apparatus, transmission of data to the service cloud according to a result of the trust assessment; and transmitting, by the apparatus, the data to the service cloud when the result of the trust assessment indicates that the service cloud is trustworthy, the data to be used with a target service provided by the service cloud, wherein the data cloud comprises a data trust application programming interface (API), and the requesting of the trust information comprises the data trust API requesting the trust information from a service trust API of the service cloud, wherein the method further comprises requesting, by data trust API, the service description information from the service trust API, the service description information describing the target service, and receiving, by the data trust API, the service description information from the service trust API, wherein the service trust API retrieves the service description information from a service description database which operates in the service cloud, and wherein the method further comprises: the data trust API transmitting a request to a Target System Security Posture Retrieval (TSSPR) host agent (HA) which operates in the data cloud to identify a security parameter to be used for performing the trust assessment of the service cloud, the request being based on the service description information. |
