{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T11:15:56Z","timestamp":1783595756831,"version":"3.55.0"},"reference-count":56,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T00:00:00Z","timestamp":1762992000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T00:00:00Z","timestamp":1762992000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100018695","name":"HORIZON EUROPE Research Infrastructures","doi-asserted-by":"publisher","award":["101135988"],"award-info":[{"award-number":["101135988"]}],"id":[{"id":"10.13039\/100018695","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Data Sci. Eng."],"published-print":{"date-parts":[[2026,6]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Data spaces are collaborative environments where data is exchanged across organizations with agreed-upon rules, and they are emerging as crucial infrastructures for secure and efficient data sharing in the digital economy. This paper provides a comprehensive analysis of various prominent European data space architectures, specifically IDS-RAM, Gaia-X, FIWARE, and IHAN, using a structured methodology to evaluate their characteristics, strengths, and limitations. In addition, recommendations for enhancing security protocols and privacy protection mechanisms are proposed, which are essential for building trust in data sharing environments. Finally, advancements in current frameworks are identified, along with a set of proposed extension requirements designed to enhance the capabilities of data spaces. These suggestions focus on the need for standardized governance, improved interoperability, and mechanisms to ensure data sovereignty and ethical use. By addressing these areas, the paper aims to support the development of more robust data-sharing infrastructures that can adapt to the evolving landscape of data management, with a strong focus on maintaining the highest standards of security and privacy protection.<\/jats:p>","DOI":"10.1007\/s41019-025-00311-z","type":"journal-article","created":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T03:16:37Z","timestamp":1763003797000},"page":"439-454","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["A Security Analysis of European Data Space Architectures"],"prefix":"10.1007","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3420-8558","authenticated-orcid":false,"given":"Ashneet Khandpur","family":"Singh","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marcel Ortiz","family":"S\u00e1nchez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marc Garnica","family":"Caparros","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mario Reyes","family":"de los Mozos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Silvia","family":"Castellvi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Simon","family":"Dalmolen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kosmas","family":"Tsiakas","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paschalis","family":"Itsios","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ioannis","family":"Mariolis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dimitrios","family":"Giakoumis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Silvia","family":"Rodr\u00edguez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Asier Aguayo","family":"Velasco","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel","family":"Cabello","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Borja Perez","family":"Lopez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,11,13]]},"reference":[{"key":"311_CR1","doi-asserted-by":"crossref","unstructured":"Ishihara\u00a0S, Matsutsuka (2025) Towards Interoperable Data Spaces: Comparative Analysis of Data Space Implementations between Japan and Europe. In: arXiv preprint arXiv:2501.15738","DOI":"10.5220\/0013460600003967"},{"key":"311_CR2","doi-asserted-by":"crossref","unstructured":"Guggenberger TM, Langdon CS, Otto B\u00a0(2025) Data spaces as meta-organisations. In: European Journal of Information Systems, pp.\u00a01\u201321","DOI":"10.1080\/0960085X.2025.2451250"},{"key":"311_CR3","unstructured":"Martella A, Martella C, Longo A (2025) Designing Data Spaces: Navigating the European Initiatives Along Technical Specifications. In: arXiv preprint arXiv:2503.15993"},{"issue":"1","key":"311_CR4","first-page":"28","volume":"13","author":"I Kazuhiko","year":"2018","unstructured":"Kazuhiko I, Atsush Y (2018) Building a common smart city platform utilizing FIWARE (case study of Takamatsu city). NEC Tech J 13(1):28\u201331","journal-title":"NEC Tech J"},{"key":"311_CR5","unstructured":"Montero-pascual JJ, Finger M, de Abreu Duarte FM (2023) Creating a common European mobility data space. European University Institute"},{"key":"311_CR6","doi-asserted-by":"crossref","unstructured":"Doulkeridis\u00a0C et al (2023) MobiSpaces: An Architecture for Energy-Efficient Data Spaces for Mobility Data. In 2023 IEEE International Conference on Big Data (BigData). IEEE pp.\u00a01487\u20131494","DOI":"10.1109\/BigData59044.2023.10386539"},{"key":"311_CR7","unstructured":"Nagel L et al (2021) Design Principles for Data Spaces: Position Paper. Tech. rep. E, ON Energy Research Center"},{"issue":"1","key":"311_CR8","doi-asserted-by":"publisher","first-page":"205395172098201","DOI":"10.1177\/2053951720982012","volume":"8","author":"P Hummel","year":"2021","unstructured":"Hummel P et al (2021) Data sovereignty: a review. Big Data Soc 8(1):2053951720982012","journal-title":"Big Data Soc"},{"issue":"4","key":"311_CR9","doi-asserted-by":"publisher","first-page":"561","DOI":"10.1007\/s12525-019-00362-x","volume":"29","author":"B Otto","year":"2019","unstructured":"Otto B, Jarke M (2019) Designing a multi-sided data platform: findings from the International Data Spaces case. Electron Mark 29(4):561\u2013580","journal-title":"Electron Mark"},{"issue":"6","key":"311_CR10","doi-asserted-by":"publisher","first-page":"105","DOI":"10.3390\/fi12060105","volume":"12","author":"SR Bader","year":"2020","unstructured":"Bader SR, Maleshkova M (2020) SOLIOT\u2013Decentralized data control and interactions for IoT. Future Internet 12(6):105","journal-title":"Future Internet"},{"key":"311_CR11","doi-asserted-by":"crossref","unstructured":"Curry\u00a0E (2020) Dataspaces: fundamentals, principles, and techniques. In: Real-time Linked Dataspaces: Enabling Data Ecosystems for Intelligent Systems, pp.\u00a045\u201362","DOI":"10.1007\/978-3-030-29665-0_3"},{"issue":"2","key":"311_CR12","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1109\/MNET.2021.9387709","volume":"35","author":"A Braud","year":"2021","unstructured":"Braud A et al (2021) The road to European digital sovereignty with Gaia-X and IDSA. IEEE Netw 35(2):4\u20135","journal-title":"IEEE Netw"},{"key":"311_CR13","unstructured":"Gaia-X Technical Committee et al. Gaia-X Architecture Document. In: (2021)"},{"key":"311_CR14","unstructured":"Sitra (2020) Rulebook for a Fair Data Economy. Tech. rep. Sitra, The Finnish Innovation Fund. https:\/\/www.sitra.fi\/app\/uploads\/2020\/06\/rulebook-for-a-fair-data-economy.pdf"},{"key":"311_CR15","unstructured":"Sitra. IHAN\u00ae \u2013 Fair Data Economy: Blueprint for Action. Tech. rep. Version 2.5. Sitra, The Finnish Innovation Fund, 2018. https:\/\/www.sitra.fi\/app\/uploads\/2018\/12\/ihan-blueprint-2-5.pdf"},{"issue":"3","key":"311_CR16","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/IOTM.0001.1800022","volume":"2","author":"F Cirillo","year":"2019","unstructured":"Cirillo F et al (2019) A standard-based open source IoT platform: FIWARE. IEEE Internet Things Mag 2(3):12\u201318","journal-title":"IEEE Internet Things Mag"},{"key":"311_CR17","doi-asserted-by":"publisher","DOI":"10.1016\/j.datak.2024.102301","volume":"151","author":"J Lohm\u00f6ller","year":"2024","unstructured":"Lohm\u00f6ller J et al (2024) The unresolved need for dependable guarantees on security, sovereignty, and trust in data ecosystems. Data Knowl Eng 151:102301","journal-title":"Data Knowl Eng"},{"key":"311_CR18","doi-asserted-by":"crossref","unstructured":"Pettenpohl H, Spiekermann M, Jan Ruben B (2022)\u00a0International Data Spaces in a Nutshell.","DOI":"10.1007\/978-3-030-93975-5_3"},{"key":"311_CR19","unstructured":"FIWARE Foundation. WiseTown: Turning Urban Data into Smart Decisions. https:\/\/www.fiware.org\/wp-content\/uploads\/FF_ImpactStories_WiseTown-EN.pdf. Accessed: 2025-05-06. 2021"},{"key":"311_CR20","doi-asserted-by":"crossref","unstructured":"Otto B (2022) The evolution of data spaces. In: Designing data spaces: The ecosystem approach to competitive advantage. Springer International Publishing Cham, pp.\u00a03\u201315","DOI":"10.1007\/978-3-030-93975-5_1"},{"key":"311_CR21","unstructured":"International Data Spaces Association. IDS-RAM 5.0 Working Draft. https:\/\/docs.internationaldataspaces.org\/ids-ram-5-working-draft. Accessed: May 5, 2025. (2023)"},{"key":"311_CR22","unstructured":"Boris O (2021) GAIA-X and IDS. Version\u00a01.0. https:\/\/doi.org\/10.5281\/zenodo.5675897"},{"key":"311_CR23","doi-asserted-by":"crossref","unstructured":"Tardieu H (2022) Role of Gaia-X in the European data space ecosystem. In: Designing Data Spaces: The Ecosystem Approach to Competitive Advantage. Springer International Publishing Cham, pp.\u00a041\u201359","DOI":"10.1007\/978-3-030-93975-5_4"},{"key":"311_CR24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102402","volume":"110","author":"N Truong","year":"2021","unstructured":"Truong N et al (2021) Privacy preservation in federated learning: an insightful survey from the GDPR perspective. Computers & Security 110:102402","journal-title":"Computers & Security"},{"key":"311_CR25","unstructured":"International Data Spaces Association. GitHub - IDS-RAM 4.0: Focusing on the generalization of concepts, functionality, and overall processes involved in the creation of a secure \u2019network of trusted data\u2019. https:\/\/github.com\/International-Data-Spaces-Association\/IDS-RAM_4_0. [Accessed 22-11-2024]. n.d"},{"key":"311_CR26","unstructured":"International Data Spaces Association. Cover \u2014 IDS Knowledge Base. https:\/\/docs.internationaldataspaces.org\/ids-knowledgebase\/idsa-rulebook. [Accessed 22-11-2024]. n.d"},{"key":"311_CR27","unstructured":"Gaia-X European Association for Data and Cloud AISBL. Gaia-X Architecture Document: Release22.04. Tech. rep. Version 22.04, April 2022. Gaia-X European Association, 2022. https:\/\/gaia-x.eu\/wp-content\/uploads\/2022\/06\/Gaia-x-Architecture-Document-22.04-Release.pdf"},{"key":"311_CR28","unstructured":"Drees\u00a0H et al (2021) Mobility data space\u2013first implementation and business opportunities. In: ITS World Congress.\u00a0"},{"key":"311_CR29","unstructured":"International Data Spaces Association. IDS Reference Architecture Model 3.0. https:\/\/internationaldataspaces.org\/wp-content\/uploads\/IDS-Reference-Architecture-Model-3.0-2019.pdf. Accessed: 2025-05-06. (2019)"},{"key":"311_CR30","doi-asserted-by":"crossref","unstructured":"Ahle U, Hierro JJ (2022) FIWARE for Data Spaces.\u00a0","DOI":"10.1007\/978-3-030-93975-5_24"},{"key":"311_CR31","doi-asserted-by":"crossref","unstructured":"Perata JP, Betarte G (2023) A Security Analysis of a Referential Architecture of the FIWARE Platform. In (2023) XLIX Latin American Computer Conference (CLEI). IEEE 1\u20139","DOI":"10.1109\/CLEI60451.2023.10346164"},{"key":"311_CR32","doi-asserted-by":"crossref","unstructured":"Aun\u00a0JM et al (2024) Evaluation and Utilisation of Privacy Enhancing Technologies-A Data Spaces Perspective. Data in Brief, p.\u00a0110560","DOI":"10.1016\/j.dib.2024.110560"},{"key":"311_CR33","unstructured":"Vollmer N. Recital 71 EU General Data Protection Regulation (EU-GDPR). Privacy\/Privazy according to plan. \u2014 privacy-regulation.eu. https:\/\/www.privacy-regulation.eu\/en\/recital-71-GDPR.htm. [Accessed 22-11-2024]"},{"key":"311_CR34","unstructured":"European Commission. Proposal for a Regulation laying down harmonised rules on artificial intelligence. https:\/\/digital-strategy.ec.europa.eu\/en\/library\/proposal-regulation-laying-down-harmonised-rules-artificial-intelligence. [Accessed 22-11-2024]. n.d"},{"key":"311_CR35","doi-asserted-by":"publisher","DOI":"10.3390\/su12093885","author":"Andres Munoz-Arcentales","year":"2020","unstructured":"Munoz-Arcentales Andres et al (2020) Data usage and access control in industrial data spaces: implementation using FIWARE. Sustainability. https:\/\/doi.org\/10.3390\/su12093885","journal-title":"Sustainability"},{"key":"311_CR36","unstructured":"SecurePrivacy.ai. Navigating the Data Privacy Landscape in 2024 \u2014 Laws, AI, and Future Trends. https:\/\/secureprivacy.ai\/blog\/navigating-data-privacy-2024. [Accessed 22-11-2024]. n.d"},{"key":"311_CR37","unstructured":"Gaia-X European Association for Data and Cloud AISBL. Gatekeeper for the Digital Economy. https:\/\/gaia-x.eu\/wp-content\/uploads\/2024\/08\/GXDCH_Gatekeeper-Digital-Economy.pdf. Accessed: 2025-05-06. (2024)"},{"key":"311_CR38","unstructured":"GDPR-info.eu. Art. 12 GDPR \u2013 Transparent information, communication and modalities for the exercise of the rights of the data subject - General Data Protection Regulation (GDPR). https:\/\/gdpr-info.eu\/art-12-gdpr\/. [Accessed 22-11-2024]. n.d"},{"key":"311_CR39","unstructured":"GDPR-info.eu. Art. 8 GDPR \u2013 Conditions applicable to child\u2019s consent in relation to information society services - General Data Protection Regulation (GDPR). https:\/\/gdpr-info.eu\/art-8-gdpr\/. [Accessed 22-11-2024]. n.d"},{"key":"311_CR40","doi-asserted-by":"publisher","first-page":"635","DOI":"10.1007\/s12599-019-00609-z","volume":"61","author":"B Otto","year":"2019","unstructured":"Otto B (2019) Interview with Reinhold Achatz on \u201cdata sovereignty and data ecosystems.\u201d Bus Inf Syst Eng 61:635\u2013636","journal-title":"Bus Inf Syst Eng"},{"issue":"2","key":"311_CR41","doi-asserted-by":"publisher","first-page":"441","DOI":"10.3390\/s24020441","volume":"24","author":"P Bellini","year":"2024","unstructured":"Bellini P et al (2024) Data sources and models for integrated mobility and transport solutions. Sensors 24(2):441","journal-title":"Sensors"},{"key":"311_CR42","doi-asserted-by":"crossref","unstructured":"Bauer M (2022) Fiware: Standard-based open source components for cross-domain iot platforms. In 2022 IEEE 8th World Forum on Internet of Things (WF-IoT). IEEE p. 1\u20136","DOI":"10.1109\/WF-IoT54382.2022.10152259"},{"key":"311_CR43","unstructured":"FIWARE Foundation. Interoperability of FIWARE and GS1 Standards Boosts Innovation in the IoT Space. https:\/\/www.fiware.org\/news\/interoperability-of-fiware-and-gs1-standards-boosts-innovation-in-the-iot-space\/. [Accessed 22-11-2024]. n.d"},{"key":"311_CR44","unstructured":"International Data Spaces Association (IDSA). Interoperability in Data Spaces. https:\/\/docs.internationaldataspaces.org\/ids-knowledgebase\/idsa-rulebook\/idsa-rulebook\/3_interoperability"},{"key":"311_CR45","unstructured":"European Commission. European Interoperability Framework: Promoting seamless services and data flows for European public administrations. Tech. rep. Final brochure. European Commission, $$\\text{ISA}^{2}$$ Programme, (2017). https:\/\/ec.europa.eu\/isa2\/sites\/default\/files\/eif_brochure_final.pdf"},{"key":"311_CR46","unstructured":"International Data Spaces Association. IDS Reference Architecture Model 5.0 \u2013 Working Draft. https:\/\/docs.internationaldataspaces.org\/ids-ram-5-working-draft. Accessed: 2025-05-06. 2024"},{"key":"311_CR47","doi-asserted-by":"publisher","DOI":"10.17485\/ijst\/2016\/v9i36\/102055","author":"N Lal","year":"2016","unstructured":"Lal N, Qamar S, Shiwani S (2016) Search ranking for heterogeneous data over dataspace. Indian Journal of Science and Technology. https:\/\/doi.org\/10.17485\/ijst\/2016\/v9i36\/102055","journal-title":"Indian Journal of Science and Technology."},{"key":"311_CR48","unstructured":"Gaia-X European Association for Data and Cloud AISBL. Gaia-X Framework. https:\/\/docs.gaia-x.eu\/framework\/?tab=clearing-house. [Accessed 22-11-2024]. n.d"},{"key":"311_CR49","unstructured":"FIWARE Foundation. Data Spaces and Digital Twins for Empowering cities to embrace sustainability. https:\/\/www.fiware.org\/2024\/09\/03\/data-spaces-and-digital-twins-for-empowering-cities-to-embrace-sustainability\/. n.d"},{"key":"311_CR50","unstructured":"FIWARE Foundation. Releases. FIWARE\/catalogue. https:\/\/github.com\/FIWARE\/catalogue\/releases. [Accessed 22-11-2024]. n.d"},{"key":"311_CR51","unstructured":"FIWARE Foundation. FIWARE Catalogue 8.4.1 is out! https:\/\/www.fiware.org\/news\/fiware-8-4-1-is-out\/. [Accessed 22-11-2024]. n.d"},{"key":"311_CR52","unstructured":"FIWARE Foundation. Paving the way for a digital future: FIWARE\u2019s great success of the year 2023! https:\/\/www.fiware.org\/2023\/12\/28\/paving-the-way-for-a-digital-future-fiwares-great-success-of-the-year-2023\/. [Accessed 22-11-2024]. n.d"},{"key":"311_CR53","doi-asserted-by":"crossref","unstructured":"\u00a0Lachner C, Rausch T, Dustdar S\u00a0(2021) A privacy preserving system for AI-assisted video analytics. In: 2021 IEEE 5th International Conference on Fog and Edge Computing (ICFEC). IEEE. pp.\u00a074\u201378\u00a0","DOI":"10.1109\/ICFEC51620.2021.00018"},{"key":"311_CR54","unstructured":"FIWARE Foundation. Molina de Segura: Becoming a Smart, Sustainable and Inclusive City. https:\/\/www.fiware.org\/wp-content\/uploads\/FF_ImpactStories_MolinaDeSegura.pdf. Accessed: 2025-05-06. 2021"},{"key":"311_CR55","doi-asserted-by":"crossref","unstructured":"\u00a0Singh\u00a0M, Jain SK (2011) A survey on dataspace. In: Advances in Network Security and Applications: 4th International Conference, CNSA 2011, Chennai, India, July 15-17, 2011. Springer, pp.\u00a0608\u2013621","DOI":"10.1007\/978-3-642-22540-6_59"},{"key":"311_CR56","unstructured":"International Data Spaces Association (IDSA). Data Sharing in a Data Space: Infographic. Tech. rep. International Data Spaces Association, 2020. https:\/\/internationaldataspaces.org\/wp-content\/uploads\/IDSA-Infographic-Data-Sharing-in-a-Data-Space.pdf"}],"container-title":["Data Science and Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s41019-025-00311-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s41019-025-00311-z","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s41019-025-00311-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T10:18:29Z","timestamp":1783592309000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s41019-025-00311-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,13]]},"references-count":56,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2026,6]]}},"alternative-id":["311"],"URL":"https:\/\/doi.org\/10.1007\/s41019-025-00311-z","relation":{},"ISSN":["2364-1185","2364-1541"],"issn-type":[{"value":"2364-1185","type":"print"},{"value":"2364-1541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,13]]},"assertion":[{"value":"29 November 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 June 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 July 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"13 November 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}}]}}