View data security configurations-Ant Privacy-Preserving Computation Platform-阿里云帮助中心

Before you perform data analytics in the Multi-party Secure Analytics console, you must confirm the usage limits for offline samples. These limits are determined by the security configurations of the raw data.

Data security configurations

When a data owner grants offline samples to a Multi-party Secure Analytics project, they configure data security. They define whether target fields are association keys or group keys and decide whether to enable the protection switch for those fields. For more information about association keys and group keys, see Terms. Joint analysis requires offline samples, and the logic of your script depends on the data security policy of these samples. If the protection switch is enabled for a target field, its use as an association key or group key is restricted. The field must be processed by comparison or aggregate functions before it can be returned in the results of a SELECT statement. Enabling the protection switch makes writing scripts less flexible but increases field security. The following table describes the four data security configuration scenarios and their field usage limits:

Association key	Group key	Protection switch	Field usage limits
Not selected	Not selected	Enabled	The field cannot be an association key or a group key. It must be processed by comparison or aggregate functions before it can appear in the results of a `SELECT` statement.
Selected	Not selected	Enable	The field can be an association key but not a group key. It must be processed by comparison or aggregate functions before it can appear in the results of a `SELECT` statement.
Not selected	Selected	Enabled	The field cannot be an association key but can be a group key. It must be processed by comparison functions, aggregate functions, or a `GROUP-BY` statement before it can appear in the results of a `SELECT` statement.
Not selected	Not selected	Disabled	The field can be used without restrictions. It can be an association key and a group key. When the protection switch is disabled, the field value is not protected. This means the field can appear in plaintext in the results of a `SELECT` statement.

Important

When you edit script files, you must strictly adhere to the security usage limits for the data. If a script's data usage exceeds the limits of its security configuration, the task execution engine rejects the script and the task fails.

View data security configurations

To view data security configurations, follow these steps:

Log on to the Multi-party Secure Analytics console. In the upper-right corner, select the project from the drop-down list.
Note
If you cannot find the project, contact your organization's administrator to add you to the project in the management console.
In the Modeling Data area in the lower-left corner of the console, expand the node under Offline Tables, and then expand the node that corresponds to your offline data.
Under the node, click the name of the offline data table that you want to view.
On the data details page for the offline table that appears on the right, view the data security configurations. These configurations indicate whether association keys, group keys, and the protection switch are enabled.
Different security configurations impose different limits on data usage, which affects how the data can be used in SQL script files.