Skip to main content

Dataspace Glossary

Terms and acronyms used throughout the dataspace documentation.

TermMeaning
AgreementAn ODRL policy type binding a named assigner and assignee to usage conditions over a target asset; the outcome of contract negotiation and the input to every enforcement decision.
Activity StreamsThe W3C vocabulary for describing activities in JSON-LD, used for the payloads delivered to and from the data plane inbox.
Catalogue brokerThe dataspace role that enables asset discovery; realised by the federated catalogue.
Clearing houseThe dataspace role that records evidence of exchanges; realised through negotiation history, activity logs, and decision and obligation logging rather than a dedicated component.
ConnectorThe participant-side runtime (control plane plus data plane) through which an organisation negotiates agreements and exchanges data.
ConsumerThe role of the participant requesting and receiving data under an agreement.
Control planeThe connector half that manages agreements and transfer process state, but never payload data.
Data planeThe connector half that moves payload data, enforcing policy on every access.
DataspaceA federation of independent organisations exchanging data under agreed rules without a central data custodian.
Dataspace appAn application component owning the data behind a dataset, registered in the app factory and invoked by the data plane to serve queries and handle activities.
DCATThe W3C Data Catalogue vocabulary, version 3, used to describe datasets, distributions, and data services in the federated catalogue.
DIDDecentralised Identifier, the W3C identifier scheme for participants; the primary method anchors DID documents on the IOTA Rebased ledger.
DSPThe Dataspace Protocol, the connector-to-connector protocol for catalogue requests, contract negotiation, and transfer processes; this platform implements the 2025-1 series.
Duty / obligationAn ODRL rule requiring an action to be fulfilled as part of a policy; unfulfilled policy obligations cause evaluation to deny.
EDREndpoint Data Reference, the common name for the token-bearing data address a provider issues at transfer start; here it is the DSP DataAddress with the bearer token in its endpoint properties.
JSON-LDJSON for Linked Data, the serialisation used for all protocol messages, catalogue entries, and policies.
JSONPathAn expression language for addressing values inside a JSON document, used by the dataspace ODRL profile for field-level targets and by decisions to name what they apply to.
JWTJSON Web Token, the compact signed form in which verifiable credentials travel as trust payloads.
NFTNon-Fungible Token, the on-ledger anchor used by the attestation packages.
ODRLThe W3C Open Digital Rights Language, version 2.2, the policy expression language for offers and agreements.
OfferAn ODRL policy type stating the conditions a provider is willing to grant over an asset, published in the catalogue without a named assignee.
PAPPolicy Administration Point, the component that stores and manages policies and agreements.
PDPPolicy Decision Point, the component that evaluates an agreement against an action, payload, and context to produce decisions.
PEPPolicy Enforcement Point, the component that applies decisions to payloads, removing or replacing what is not granted.
PIDProcess identifier, the consumer or provider side identifier of a transfer process in DSP messages.
PIPPolicy Information Point, the component that gathers context facts from registered information sources for evaluation.
PMPPolicy Management Point, the component that locates candidate policies for a locator.
PNAPPolicy Negotiation Admin Point, the component providing negotiation history.
PNPPolicy Negotiation Point, the component that runs the DSP contract negotiation state machine.
ProviderThe role of the participant offering datasets and serving the data under an agreement.
PXPPolicy Execution Point, the component that runs side effects (logging, automation) before and after evaluation.
Trust payloadThe credential presented as a bearer token on every protocol call and verified into an identity plus attribute data.
URNUniform Resource Name, the location-independent identifier form (for example urn:uuid:...) used for dataset, policy, and process identifiers.
Usage controlEnforcing the conditions of an agreement on every access to the data, down to individual fields, rather than only at the moment of transfer.
VCVerifiable Credential, the W3C model for cryptographically verifiable claims, used both as the trust payload and as the basis for attestation.
XACMLThe OASIS eXtensible Access Control Markup Language, origin of the policy point (PAP, PDP, PEP, PIP) pattern the rights management components follow.
XSDXML Schema Definition datatypes, used to type ODRL constraint operand values such as dates and integers.