EOSC-ENTRUST D13.4 Year one version of EOSC-ENTRUST Blueprint & Interoperability Framework

EOSC-ENTRUST aims to create a European network of Trusted Research Environments (TREs) for sensitive data and drive European interoperability between TREs by development of a common blueprint for federated data access and analysis – the EOSC-ENTRUST Blueprint & Interoperability Framework (ENTRUST Blueprint, for short). The final ENTRUST Blueprint will consist of template legal agreements, architecture specifications, operating procedures, interface definitions, and a glossary of terminologies. This document is the first version of the ENTRUST Blueprint and presents a draft architecture specification and glossary. All existing specifications and implementations of sensitive data processing environments are based on stand-alone design with no or very limited data interoperability. The inclusion of interoperability can lead to profound changes in the basic assumptions of these environment requirements. Therefore, we have drafted a general purpose vision of this interoperability based on preliminary versions of the DARE UK Federated Architecture Blueprint (DARE UK Blueprint, for short). The DARE UK Blueprint is based on the Five Safes framework and dataspace design thinking to allow research on sensitive data within a network of participating TREs. We have carefully mapped four existing TRE architectures and the first version of ENTRUST Driver use case requirements to the high level DARE UK Blueprint. Our analyses suggest that our architecture proposal should fit existing European TRE provider architectures and support all Driver requirements while maintaining the Five Safes principles for sensitive data research. Going forward, we will collaborate with the Drivers to evaluate the current architecture proposal and with additional TRE providers to collect broader data on how provider TREs map to the ENTRUST Blueprint capabilities. We will open our proposed architecture for broader comments and suggestions for improvement through a dedicated version-controlled project.