Skip to main content
Version: Next

Architecture Overview

Data Trust & Security KIT Icon

Introduction​

What This Guide Is About​

The Data Trust & Security KIT helps you build systems that can verify and trust data in an Eclipse Tractus-X network (like Catena-X, Chem-X, etc). Think of it as a toolkit that ensures the data your company shares and receives is authentic, accurate, and trustworthy.

In today's world, you can't just accept data at face value - especially when it comes to sustainability, compliance, and supply chain information. This guide shows you how to implement verification mechanisms so that when someone shares carbon footprint data, battery information, or supply chain details, you can be confident it's legitimate.

Architecture Overview​

Here's how the Data Trust & Security KIT fits into the larger Eclipse Tractus-X ecosystem:

data trust & security kit architecture

Real-World Example: Digital Product Pass Verification​

How It Works in Practice​

The Digital Product Pass project has already implemented the concepts from this Data Trust & Security KIT, giving you a real example of how everything works together.

This implementation creates a trust layer on top of normal data exchanges between companies. Here's what it does:

  • Enables Attestation Provider Verification - Independent auditors can verify specific data attributes or complete datasets
  • Provides Consumer Validation - Data consumers can check whether the verification is legitimate
  • Maintains Data Sovereignty - Companies keep control of their data while still enabling verification
  • Uses Standard Technology - Built on Verifiable Credentials and existing Eclipse Tractus-X infrastructure

The system is designed to be a template that other use cases can follow. Whether you're working with carbon footprints, battery passports, or any other type of data, you can use the same verification patterns.

Key Innovation: The system offers both third-party verification (by external auditors) and self-attestation (where companies certify their own data), giving you flexibility based on your trust requirements.

Since it uses the Eclipse Dataspace Components (EDC) Connectors for data exchange, it fits seamlessly into the existing Eclipse Tractus-X architecture without requiring major changes to how data flows between companies.

Learn More: You can find detailed information about this implementation in the Digital Product Pass Verification Success Story.

Complete Documentation: The complete implementation is available at eclipse-tractusx/digital-product-pass/dpp-verification

NOTICE​

This work is licensed under the CC-BY-4.0.

  • SPDX-License-Identifier: CC-BY-4.0
  • SPDX-FileCopyrightText: 2025 Contributors to the Eclipse Foundation
  • SPDX-FileCopyrightText: 2025 Fujitsu Limited
  • SPDX-FileCopyrightText: 2025 Robert Bosch GmbH
  • SPDX-FileCopyrightText: 2025 Spherity GmbH
  • SPDX-FileCopyrightText: 2025 Schaeffler AG
  • SPDX-FileCopyrightText: 2025 SIEMENS AG
  • SPDX-FileCopyrightText: 2025 Fraunhofer-Gesellschaft zur Foerderung der angewandten Forschung e.V. (represented by Fraunhofer IPK)
  • SPDX-FileCopyrightText: 2025 CGI Deutschland B.V. & Co. KG
  • SPDX-FileCopyrightText: 2025 TÜV SÜD Auto Service GmbH
  • SPDX-FileCopyrightText: 2025 BASF SE
  • SPDX-FileCopyrightText: 2025 BMW AG
  • SPDX-FileCopyrightText: 2025 Cofinity-X GmbH
  • SPDX-FileCopyrightText: 2025 Henkel AG & Co. KGaA
  • Source URL: https://github.com/eclipse-tractusx/eclipse-tractusx.github.io