Sovity Connector Plugin: Data Space Federation
The Sovity Connector Plugin: Data Space Federation is a component that enables the Sovity Connector to operate across multiple identity management systems and participate in a federated dataspace environment. In the standard configuration, connectors typically trust a single identity issuer responsi
Purpose
The tool contributes to DSSC’s objectives by enabling data sharing beyond individual data spaces, allowing participants to access and exchange data across otherwise isolated ecosystems. It enhances interoperability by demonstrating how connectors operating under different identity providers and governance frameworks can interact, supporting a federated approach that extends interoperability across multiple data spaces. At the same time, it preserves data sovereignty, as data providers retain full control over their data, usage policies, and access conditions, even in cross-data-space scenarios. Overall, the tool provides a practical step toward a federated network of interoperable data spaces, aligning with DSSC’s vision for a scalable and sovereign data ecosystem.
About
The Sovity Connector Plugin: Data Space Federation is a component that enables the Sovity Connector to operate across multiple identity management systems and participate in a federated dataspace environment.
In the standard configuration, connectors typically trust a single identity issuer responsible for validating the X.509 certificates used during connector-to-connector communication. The plugin extends this model by allowing connectors to trust multiple certificate issuers resulting in connectors being able to authenticate and interact with Sovity connectors from different dataspaces with different identity providers.
Conceptually, the plugin extends the identity management model from a simple user-based structure (e.g., user 1, user 2) to a more expressive user-and-group-based structure (e.g., user 1 belonging to dataspace A, user 1 belonging to dataspace B).
Building blocks
Blueprint compliance
Details
- Technology readiness level
- TRL 6
- Domain / sector / industry
- The tool is sector-agnostic and can be applied to any domain requiring secure, cross-organizational data exchange.
- Geographical application area
- While developed with a global perspective and intended for international use, the tool is currently a key pillar of the European data ecosystem. It is designed to scale across borders, making it relevant for any international collaboration that requires a high level of trust and data sovereignty.
- Dependencies
- The tool depends on the Sovity Connector, as it extends its functionality and operates as an add-on component within the connector environment. It is distributed via containerized services and therefore requires a container runtime such as Docker on a Linux-based system. No additional software dependencies are required beyond standard container orchestration and networking capabilities. The tool is designed to integrate into existing dataspace deployments where connectors and identity services are already configured.
- Business offerings
- The tool is currently provided as an open-source solution (Apache 2.0) via a public repository and is not offered as a managed service, SaaS, or PaaS. There is no formal commercial support offering at this stage; however, the tool can be self-deployed and integrated with the Sovity Connector. Future support models (e.g. managed service or enterprise support) may be considered depending on adoption.
- Additional functionalities
- The tool extends Identity and Attestation Management by enabling federated identity interoperability and additionally supports Trust Framework, Data Exchange, Access and Usage Policies Enforcement, and Participation Management through cross-dataspace trust establishment and participant recognition.
- Similar/competing implementations
- Similar tools include connector frameworks such as the Eclipse Dataspace Connector and related implementations (e.g. IDS-based connectors), which enable sovereign data exchange and support decentralized identity management approaches. In particular, EDC-based solutions can achieve federated interoperability through decentralized identity mechanisms. However, to the best of our knowledge, no existing tools explicitly support federation across multiple centralized identity management systems (e.g. multiple DAPS instances). The presented tool addresses this gap by enabling interoperability between connectors operating under different centralized identity authorities, effectively creating a federation across multiple identity domains.
Relevant documents & links
Community rating
Ranked by people who have used it, not by self-assessment.
Not Yet Rated. This tool needs 5 ratings before it gets a score. Until then it sits mid-catalogue rather than at the bottom, so a lack of ratings is never mistaken for a poor one.
Reviews
No reviews yet — be the first to share your experience.