{"id":54535,"date":"2019-12-28T00:00:00","date_gmt":"2019-12-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/hishhnik-ili-zhertva-kto-zashhitit-udostoveryayushhie-tsentry"},"modified":"2020-02-18T14:02:33","modified_gmt":"2020-02-18T11:02:33","slug":"hishhnik-ili-zhertva-kto-zashhitit-udostoveryayushhie-tsentry","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hishhnik-ili-zhertva-kto-zashhitit-udostoveryayushhie-tsentry","title":{"rendered":"Pred\u00e1tor nebo ob\u011b\u0165? Kdo ochr\u00e1n\u00ed certifika\u010dn\u00ed autority","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Co se d\u011bje?<\/h4>\n

\nT\u00e9ma podvodn\u00fdch \u010din\u016f, kter\u00e9 se prov\u00e1d\u011bj\u00ed prost\u0159ednictv\u00edm certifik\u00e1tu elektronick\u00e9ho podpisu, v posledn\u00ed dob\u011b vzbudilo \u0161irokou ve\u0159ejnou pozornost. Feder\u00e1ln\u00ed m\u00e9dia si pravideln\u011b d\u00e1vaj\u00ed za \u00fakol p\u0159in\u00e1\u0161et d\u011bsiv\u00e9 p\u0159\u00edb\u011bhy o p\u0159\u00edpadech nez\u00e1konn\u00e9ho pou\u017eit\u00ed elektronick\u00e9ho podpisu. Nejroz\u0161\u00ed\u0159en\u011bj\u0161\u00edm zlo\u010dinem v t\u00e9to sf\u00e9\u0159e je registrace pr\u00e1vnick\u00e9 osoby nebo podnikatele na jm\u00e9no nic netu\u0161\u00edc\u00edho ob\u010dana Rusk\u00e9 federace. Tak\u00e9 popul\u00e1rn\u00ed metodou podvodu je transakce se zm\u011bnou vlastnick\u00fdch pr\u00e1v k nemovitosti (to je, kdy\u017e n\u011bkdo prod\u00e1v\u00e1 v\u00e1\u0161 byt va\u0161\u00edm jm\u00e9nem, ani\u017e byste o tom v\u011bd\u011bli).<\/p>\n

Ale nebudeme se nechat un\u00e9st popisem mo\u017en\u00fdch protipr\u00e1vn\u00edch \u010din\u016f s ECP, abychom nenab\u00edzeli kreativn\u00ed n\u00e1pady podvodn\u00edk\u016fm. Rad\u011bji se pokus\u00edme pochopit, pro\u010d tento probl\u00e9m nabral takov\u00e9 rozm\u011bry a co skute\u010dn\u011b je t\u0159eba ud\u011blat pro jeho odstran\u011bn\u00ed. K tomu si mus\u00edme jasn\u011b uv\u011bdomit, co to jsou certifika\u010dn\u00ed centra, jak p\u0159esn\u011b funguj\u00ed a zda jsou skute\u010dn\u011b tak hroziv\u00e1, jak n\u00e1m je maluj\u00ed v m\u00e9di\u00edch a v\u00fdroc\u00edch zainteresovan\u00fdch osob.
\n<\/a><\/noindex><\/p>\n

Odkud se berou podpisy?<\/h4>\n

\n\"Pred\u00e1tor
\n
\nTak\u017ee, vy jste u\u017eivatel. Pot\u0159ebujete certifik\u00e1t elektronick\u00e9ho podpisu. Nez\u00e1le\u017e\u00ed na tom, k jak\u00fdm \u00fakol\u016fm a v jak\u00e9m statusu (firma, fyzick\u00e1 osoba, podnikatel) \u2013 algoritmus pro z\u00edsk\u00e1n\u00ed certifik\u00e1tu je standardn\u00ed. A vy se obrac\u00edte na certifika\u010dn\u00ed centrum s c\u00edlem zakoupit certifik\u00e1t EP.<\/p>\n

Certifika\u010dn\u00ed centrum je spole\u010dnost, kter\u00e1 mus\u00ed splnit \u0159adu p\u0159\u00edsn\u00fdch po\u017eadavk\u016f stanoven\u00fdch rusk\u00fdm z\u00e1konod\u00e1rstv\u00edm.<\/p>\n

Aby m\u011blo pr\u00e1vo vyd\u00e1vat pos\u00edlen\u00fd kvalifikovan\u00fd elektronick\u00fd podpis, mus\u00ed certifika\u010dn\u00ed centrum proj\u00edt speci\u00e1ln\u00edm akredita\u010dn\u00edm procesem na Ministerstvu komunikac\u00ed. Akredita\u010dn\u00ed proces zahrnuje dodr\u017eov\u00e1n\u00ed \u0159ady p\u0159\u00edsn\u00fdch pravidel, kter\u00e1 nen\u00ed schopna splnit ka\u017ed\u00e1 spole\u010dnost.<\/p>\n

Konkr\u00e9tn\u011b mus\u00ed certifika\u010dn\u00ed centrum m\u00edt licenci, kter\u00e1 mu d\u00e1v\u00e1 pr\u00e1vo na \u010dinnost v oblasti v\u00fdvoje, v\u00fdroby a \u0161\u00ed\u0159en\u00ed \u0161ifrovac\u00edch (kryptografick\u00fdch) prost\u0159edk\u016f, informa\u010dn\u00edch a telekomunika\u010dn\u00edch syst\u00e9m\u016f. Tato licence je vyd\u00e1v\u00e1na FSB po absolvov\u00e1n\u00ed s\u00e9rie p\u0159\u00edsn\u00fdch kontrol uchaze\u010dem.<\/p>\n

Zam\u011bstnanci certifika\u010dn\u00edho centra mus\u00ed m\u00edt vysoko\u0161kolsk\u00e9 vzd\u011bl\u00e1n\u00ed v oblasti informa\u010dn\u00edch technologi\u00ed nebo informa\u010dn\u00ed bezpe\u010dnosti.<\/p>\n

Z\u00e1kon tak\u00e9 ukl\u00e1d\u00e1 certifika\u010dn\u00edm autorit\u00e1m pojistit svou odpov\u011bdnost za \"\u0161kody zp\u016fsoben\u00e9 t\u0159et\u00edm osob\u00e1m v d\u016fsledku jejich d\u016fv\u011bry v informace uveden\u00e9 v certifik\u00e1tu kl\u00ed\u010de pro ov\u011b\u0159ov\u00e1n\u00ed elektronick\u00e9ho podpisu vydan\u00e9ho takovou certifika\u010dn\u00ed autoritou nebo v informac\u00edch obsa\u017een\u00fdch v registru certifik\u00e1t\u016f, kter\u00fd tato certifika\u010dn\u00ed autorita vede\" v \u010d\u00e1stce nejm\u00e9n\u011b 30 milion\u016f rubl\u016f.<\/p>\n

Jak vid\u00edte, v\u0161e nen\u00ed tak jednoduch\u00e9.<\/p>\n

V sou\u010dasn\u00e9 dob\u011b v zemi existuje p\u0159ibli\u017en\u011b 500 certifika\u010dn\u00edch autorit, kter\u00e9 maj\u00ed pr\u00e1vo vyd\u00e1vat kvalifikovan\u00e9 elektronick\u00e9 podpisy (K\u00c8P). Mezi nimi jsou nejen soukrom\u00e9 certifika\u010dn\u00ed autority, ale i certifika\u010dn\u00ed autority p\u0159i r\u016fzn\u00fdch st\u00e1tn\u00edch instituc\u00edch (v\u010detn\u011b da\u0148ov\u00e9 spr\u00e1vy, soci\u00e1ln\u00edho zabezpe\u010den\u00ed a dal\u0161\u00edch), bank\u00e1ch, obchodn\u00edch platform\u00e1ch, v\u010detn\u011b st\u00e1tn\u00edch.<\/p>\n

Certifik\u00e1t elektronick\u00e9ho podpisu se vytv\u00e1\u0159\u00ed pomoc\u00ed \u0161ifrovac\u00edch algoritm\u016f certifikovan\u00fdch FSB RF. Umo\u017e\u0148uje pr\u00e1vnick\u00fdm a fyzick\u00fdm osob\u00e1m vym\u011b\u0148ovat si pr\u00e1vn\u011b z\u00e1vazn\u00e9 dokumenty v elektronick\u00e9 podob\u011b. Podle ofici\u00e1ln\u00edch \u00fadaj\u016f certifika\u010dn\u00edch autorit se v\u011bt\u0161ina (95%) K\u00c8P vyd\u00e1v\u00e1 pr\u00e1vnick\u00fdm osob\u00e1m, zbytek fyzick\u00fdm osob\u00e1m.<\/p>\n

Po tom, co se obr\u00e1t\u00edte na certifika\u010dn\u00ed autoritu, dojde k n\u00e1sleduj\u00edc\u00edmu:<\/p>\n

    \n
  1. Certifika\u010dn\u00ed autorita ov\u011b\u0159uje toto\u017enost osoby, kter\u00e1 se obr\u00e1tila o certifik\u00e1t elektronick\u00e9ho podpisu;
    \nA\u017e po potvrzen\u00ed toto\u017enosti a kontrole v\u0161ech dokument\u016f certifika\u010dn\u00ed autorita vyhotov\u00ed a vyd\u00e1 certifik\u00e1t, kter\u00fd obsahuje \u00fadaje o majiteli certifik\u00e1tu a jeho ve\u0159ejn\u00fd kl\u00ed\u010d pro ov\u011b\u0159ov\u00e1n\u00ed;<\/li>\n
  2. Certifika\u010dn\u00ed autorita spravuje \u017eivotn\u00ed cyklus certifik\u00e1tu: zabezpe\u010duje jeho vyd\u00e1n\u00ed, pozastaven\u00ed (v\u010detn\u011b na \u017e\u00e1dost majitele), obnoven\u00ed a ukon\u010den\u00ed platnosti.<\/li>\n
  3. Dal\u0161\u00ed funkc\u00ed certifika\u010dn\u00ed autority je servisn\u00ed. Je m\u00e1lo prost\u011b vydat certifik\u00e1t. U\u017eivatel\u00e9 pravideln\u011b pot\u0159ebuj\u00ed r\u016fzn\u00e9 konzultace ohledn\u011b procesu vyd\u00e1n\u00ed a pou\u017e\u00edv\u00e1n\u00ed podpisu, konzultace t\u00fdkaj\u00edc\u00ed se pou\u017eit\u00ed a v\u00fdb\u011bru typu certifik\u00e1tu. Velk\u00e9 certifika\u010dn\u00ed autority, jako je certifika\u010dn\u00ed autorita spole\u010dnosti \u201eObchodn\u00ed s\u00ed\u0165\u201c, poskytuj\u00ed slu\u017eby technick\u00e9 podpory, vytv\u00e1\u0159ej\u00ed r\u016fzn\u00e9 softwary, zefektiv\u0148uj\u00ed obchodn\u00ed procesy, sleduj\u00ed zm\u011bny v oblastech pou\u017eit\u00ed certifik\u00e1t\u016f atd. Konkuruj\u00edc\u00ed mezi sebou, certifika\u010dn\u00ed autority pracuj\u00ed na kvalit\u011b poskytovan\u00fdch IT slu\u017eeb a rozv\u00edjej\u00ed tuto oblast.<\/li>\n<\/ol>\n

    <\/p>\n

    Koz\u00e1\u010dek byl posl\u00e1n!<\/h4>\n

    \n\"Pred\u00e1tor
    \n
    \nPoj\u010fme se pod\u00edvat na bod 1 v\u00fd\u0161e uveden\u00e9ho algoritmu pro z\u00edsk\u00e1n\u00ed elektronick\u00e9ho podpisu. Co znamen\u00e1 \u201eov\u011b\u0159it toto\u017enost\u201c osoby, kter\u00e1 \u017e\u00e1d\u00e1 o certifik\u00e1t? To znamen\u00e1, \u017ee osoba, na jej\u00ed\u017e jm\u00e9no je certifik\u00e1t vyd\u00e1n, se mus\u00ed osobn\u011b dostavit bu\u010f do kancel\u00e1\u0159e certifika\u010dn\u00ed autority, nebo na v\u00fddejn\u00ed m\u00edsto, kter\u00e9 m\u00e1 s certifika\u010dn\u00ed autoritou partnerskou smlouvu, a tam p\u0159edlo\u017eit origin\u00e1ly sv\u00fdch dokument\u016f. Konkr\u00e9tn\u011b \u2013 pas ob\u010dana Rusk\u00e9 federace. V n\u011bkter\u00fdch p\u0159\u00edpadech, kdy jde o podpisy pro pr\u00e1vnick\u00e9 osoby a podnikatele, je proces ov\u011b\u0159en\u00ed je\u0161t\u011b slo\u017eit\u011bj\u0161\u00ed a vy\u017eaduje p\u0159edlo\u017een\u00ed dal\u0161\u00edch dokument\u016f.<\/p>\n

    Pr\u00e1v\u011b na t\u00e9to f\u00e1zi, tedy na samotn\u00e9m za\u010d\u00e1tku, kdy\u017e je\u0161t\u011b nedo\u0161lo k vyd\u00e1n\u00ed certifik\u00e1tu a podpisy je\u0161t\u011b nep\u0159i\u0161ly na \u0159adu, se skr\u00fdv\u00e1 nejv\u011bt\u0161\u00ed probl\u00e9m. A kl\u00ed\u010dov\u00e9 slovo zde: \u201epas\u201c.<\/p>\n

    \u00danik osobn\u00edch \u00fadaj\u016f v zemi nabral skute\u010dn\u011b pr\u016fmyslov\u011b velk\u00e9 rozm\u011bry. Existuj\u00ed internetov\u00e9 zdroje, kde si m\u016f\u017eete za mal\u00e9 pen\u00edze nebo dokonce zdarma po\u0159\u00eddit skenovac\u00ed kopie platn\u00fdch pas\u016f ob\u010dan\u016f Rusk\u00e9 federace. A skeny pas\u016f v na\u0161\u00ed zemi, zat\u00ed\u017een\u00e9 post-sov\u011btsk\u00fdm d\u011bdictv\u00edm ve stylu \u201ep\u0159edlo\u017ete doklady\u201c, lze shroma\u017e\u010fovat od ob\u010dan\u016f t\u00e9m\u011b\u0159 kdekoli \u2013 nejen v bank\u00e1ch nebo dal\u0161\u00edch finan\u010dn\u00edch instituc\u00edch, ale tak\u00e9 v hotelech, \u0161kol\u00e1ch, vysok\u00fdch \u0161kol\u00e1ch, na pokladn\u00e1ch leteck\u00fdch a \u017eelezni\u010dn\u00edch spole\u010dnost\u00ed, v d\u011btsk\u00fdch centrech, m\u00edstech obsluhy mobiln\u00edch oper\u00e1tor\u016f \u2013 v\u0161ude, kde se vy\u017eaduje p\u0159edlo\u017een\u00ed pasu pro slu\u017eby, tedy prakticky skoro v\u0161ude. S rozvojem digit\u00e1ln\u00edch technologi\u00ed tento \u0161irok\u00fd kan\u00e1l p\u0159\u00edstupu k osobn\u00edm \u00fadaj\u016fm vyu\u017e\u00edvaj\u00ed pracovn\u00edci krimin\u00e1ln\u00ed sf\u00e9ry.<\/p>\n

    Tak\u00e9 jsou velmi roz\u0161\u00ed\u0159en\u00e9 \u201eslu\u017eby\u201c kr\u00e1de\u017ee osobn\u00edch \u00fadaj\u016f konkr\u00e9tn\u00edch lid\u00ed.<\/p>\n

    Krom\u011b toho existuje cel\u00e1 arm\u00e1da tzv. \u201enomin\u00e1l\u016f\u201c \u2013 lid\u00ed, kte\u0159\u00ed jsou obvykle velmi mlad\u00ed, nebo velmi chud\u00ed a m\u00e1lo vzd\u011blan\u00ed, nebo prost\u011b ve \u0161patn\u00e9 \u017eivotn\u00ed situaci, kter\u00fdm zlo\u010dinci slibuj\u00ed skromnou odm\u011bnu za to, aby se sv\u00fdm pasem dostavili na certifika\u010dn\u00ed autoritu nebo na v\u00fddejn\u00ed m\u00edsto a tam si objednali podpis na sv\u00e9 jm\u00e9no jako nap\u0159\u00edklad \u0159editele firmy. Je t\u0159eba \u0159\u00edci, \u017ee takov\u00e1 osoba pak nem\u00e1 \u017e\u00e1dn\u00fd dal\u0161\u00ed vztah k \u010dinnosti firmy a nem\u016f\u017ee poskytnout \u017e\u00e1dnou skute\u010dnou pomoc vy\u0161et\u0159ov\u00e1n\u00ed, kdy\u017e se podvod odhal\u00ed.<\/p>\n

    Tak\u017ee, skenov\u00e1n\u00ed pasu \u2013 \u017e\u00e1dn\u00fd probl\u00e9m. Ale k ov\u011b\u0159en\u00ed je pot\u0159eba origin\u00e1l pasu, jak to tedy bude, pt\u00e1 se pozorn\u00fd \u010dten\u00e1\u0159? A abychom se t\u00e9to probl\u00e9my vyhnuli, na sv\u011bt\u011b existuj\u00ed nepoctiv\u00e9 v\u00fddejn\u00ed m\u00edsta. I p\u0159es p\u0159\u00edsn\u00fd v\u00fdb\u011brov\u00fd proces z\u00edsk\u00e1v\u00e1 status v\u00fddejn\u00edho m\u00edsta ob\u010das i krimin\u00e1ln\u00ed postavy, kter\u00e9 pak za\u010dnou prov\u00e1d\u011bt protipr\u00e1vn\u00ed \u010dinnosti s osobn\u00edmi \u00fadaji ob\u010dan\u016f.<\/p>\n

    Tyto dva faktory v kombinaci n\u00e1m d\u00e1vaj\u00ed cel\u00fd ten p\u0159ebytek probl\u00e9m\u016f s kriminalizac\u00ed pou\u017e\u00edv\u00e1n\u00ed elektronick\u00e9ho podpisu, kter\u00fd nyn\u00ed m\u00e1me.<\/p>\n

    Jeden na poli nen\u00ed voj\u00e1k?<\/h4>\n

    \n\"Pred\u00e1tor
    \n
    \nCelou tuto, bez p\u0159eh\u00e1n\u011bn\u00ed, arm\u00e1du podvodn\u00edk\u016f nyn\u00ed filtruj\u00ed pouze ov\u011b\u0159ovac\u00ed centra. V ka\u017ed\u00e9m ov\u011b\u0159ovac\u00edm centru existuj\u00ed vlastn\u00ed bezpe\u010dnostn\u00ed slu\u017eby. V\u0161echny, kdo \u017e\u00e1daj\u00ed o podpis, pe\u010dliv\u011b prov\u011b\u0159uj\u00ed u\u017e ve f\u00e1zi ov\u011b\u0159ov\u00e1n\u00ed identity. V\u0161echny, kdo cht\u011bj\u00ed spolupracovat ve statusu v\u00fddejn\u00edho m\u00edsta pro konkr\u00e9tn\u00ed ov\u011b\u0159ovac\u00ed centrum, tak\u00e9 pe\u010dliv\u011b prov\u011b\u0159uj\u00ed jak v etap\u011b uzav\u00edr\u00e1n\u00ed partnersk\u00e9 smlouvy, tak i pozd\u011bji, v pr\u016fb\u011bhu obchodn\u00ed interakce.<\/p>\n

    Jinak tomu b\u00fdt nem\u016f\u017ee, proto\u017ee nepoctiv\u00e9 ov\u011b\u0159en\u00ed hroz\u00ed ov\u011b\u0159ovac\u00edmu centru uzav\u0159en\u00edm \u2013 legislativa v t\u00e9to oblasti je p\u0159\u00edsn\u00e1.<\/p>\n

    Ale obejmout neobe\u0161liteln\u00e9 nen\u00ed mo\u017en\u00e9 a \u010d\u00e1st nepoctiv\u00fdch v\u00fddejn\u00edch m\u00edst se stejn\u011b 'prosakuje' mezi partnery ov\u011b\u0159ovac\u00edho centra. A 'nomin\u00e1l' nemus\u00ed m\u00edt v\u016fbec d\u016fvod odm\u00edtnout vyd\u00e1n\u00ed certifik\u00e1tu \u2013 v\u017edy\u0165 se obrac\u00ed na ov\u011b\u0159ovac\u00ed centrum zcela leg\u00e1ln\u011b.<\/p>\n

    Tak\u00e9, v p\u0159\u00edpad\u011b, \u017ee se odhal\u00ed podvod s podpisem na konkr\u00e9tn\u00ed osobu, pouze ov\u011b\u0159ovac\u00ed centrum pom\u016f\u017ee vy\u0159e\u0161it probl\u00e9m. Proto\u017ee ov\u011b\u0159ovac\u00ed centrum v tomto p\u0159\u00edpad\u011b odvol\u00e1v\u00e1 certifik\u00e1t podpisu, prov\u00e1d\u00ed intern\u00ed vy\u0161et\u0159ov\u00e1n\u00ed, sleduje celou \u0159et\u011bzec vyd\u00e1n\u00ed certifik\u00e1tu a m\u016f\u017ee poskytnout soudu pot\u0159ebn\u00e9 dokumenty o podvodn\u00fdch \u010dinnostech p\u0159i vyd\u00e1v\u00e1n\u00ed kl\u00ed\u010de elektronick\u00e9ho podpisu. Pouze materi\u00e1ly od ov\u011b\u0159ovac\u00edho centra pomohou v soud\u011b vy\u0159e\u0161it p\u0159\u00edpad ve prosp\u011bch skute\u010dn\u011b posti\u017een\u00e9 strany: osoby, na jej\u00ed\u017e jm\u00e9no byla podvodn\u011b vyd\u00e1na podpis.<\/p>\n

    Av\u0161ak, obecn\u00e1 digit\u00e1ln\u00ed negramotnost v tomto p\u0159\u00edpad\u011b tak\u00e9 neprosp\u00edv\u00e1 posti\u017een\u00fdm. Ne ka\u017ed\u00fd jde a\u017e do konce, aby chr\u00e1nil sv\u00e9 z\u00e1jmy. Oproti tomu je nutn\u00e9 protipr\u00e1vn\u00ed \u010dinnosti s elektronick\u00fdm podpisem bezpodm\u00edne\u010dn\u011b napadnout u soudu. A ov\u011b\u0159ovac\u00ed centra jsou v tom \u2013 hlavn\u00ed oporou.<\/p>\n

    Zab\u00edt v\u0161echny ov\u011b\u0159ovac\u00ed centra?<\/h4>\n

    \n\"Pred\u00e1tor
    \n
    \nA zde, v na\u0161em st\u00e1t\u011b, bylo rozhodnuto prov\u00e9st zm\u011bny v po\u0159adu pr\u00e1ce certifika\u010dn\u00edch center a po\u017eadavc\u00edch na n\u011b. Skupina poslanc\u016f a sen\u00e1tor\u016f vypracovala odpov\u00eddaj\u00edc\u00ed z\u00e1kon, kter\u00fd byl dokonce p\u0159ijat St\u00e1tn\u00ed dumou v prvn\u00edm \u010dten\u00ed 7. listopadu 2019.<\/p>\n

    Dokument p\u0159edpokl\u00e1d\u00e1 rozs\u00e1hlou reformu syst\u00e9mu certifik\u00e1t\u016f elektronick\u00fdch podpis\u016f. Mezi jin\u00fdm se navrhuje, \u017ee pr\u00e1vnick\u00e9 osoby a individu\u00e1ln\u00ed podnikatel\u00e9 (IP) budou moci z\u00edskat pos\u00edlen\u00fd kvalifikovan\u00fd elektronick\u00fd podpis (UKEP) pouze na FNS, a finan\u010dn\u00ed organizace \u2013 na CB. Akreditovan\u00e1 certifika\u010dn\u00ed centra (U\u0426), kter\u00e1 nyn\u00ed vyd\u00e1vaj\u00ed EP, budou moci vyd\u00e1vat jen fyzick\u00fdm osob\u00e1m.<\/p>\n

    P\u0159itom se pl\u00e1nuje v\u00fdrazn\u00e9 zp\u0159\u00edsn\u011bn\u00ed po\u017eadavk\u016f na takov\u00e1 U\u0426. Minim\u00e1ln\u00ed v\u00fd\u0161e \u010dist\u00fdch aktiv akreditovan\u00e9ho certifika\u010dn\u00edho centra by m\u011bla b\u00fdt zv\u00fd\u0161ena z 7 milion\u016f rubl\u016f na 1 miliardu rubl\u016f, a minim\u00e1ln\u00ed v\u00fd\u0161e finan\u010dn\u00edho zabezpe\u010den\u00ed \u2013 z 30 milion\u016f rubl\u016f na 200 milion\u016f rubl\u016f. Pokud m\u00e1 certifika\u010dn\u00ed centrum pobo\u010dky alespo\u0148 ve dvou t\u0159etin\u00e1ch rusk\u00fdch region\u016f, m\u016f\u017ee b\u00fdt minim\u00e1ln\u00ed v\u00fd\u0161e \u010dist\u00fdch aktiv sn\u00ed\u017eena na 500 milion\u016f rubl\u016f.<\/p>\n

    Doba akreditace certifika\u010dn\u00edch center se zkracuje z p\u011bti na t\u0159i roky. Za poru\u0161en\u00ed technick\u00fdch p\u0159edpis\u016f certifika\u010dn\u00edch center je stanovena administrativn\u00ed odpov\u011bdnost.<\/p>\n

    To v\u0161e by m\u011blo sn\u00ed\u017eit po\u010det podvod\u016f s elektronick\u00fdmi podpisy, domn\u00edvaj\u00ed se auto\u0159i z\u00e1kona.<\/p>\n

    Jak\u00fd je v\u00fdsledn\u00fd efekt?<\/h4>\n

    \n\"Pred\u00e1tor
    \n
    \nJak lze snadno vid\u011bt, nov\u00fd z\u00e1konn\u00fd n\u00e1vrh nijak ne\u0159e\u0161\u00ed probl\u00e9m krimin\u00e1ln\u00edho vyu\u017e\u00edv\u00e1n\u00ed dokument\u016f ob\u010dan\u016f Rusk\u00e9 federace a kr\u00e1de\u017ee osobn\u00edch \u00fadaj\u016f. Nen\u00ed d\u016fle\u017eit\u00e9, kdo vyd\u00e1v\u00e1 podpis \u2013 U\u0426 nebo FNS, identita vlastn\u00edka podpisu bude i nad\u00e1le muset b\u00fdt ov\u011b\u0159ov\u00e1na, a \u017e\u00e1dn\u00e9 novinky v t\u00e9to z\u00e1le\u017eitosti z\u00e1kon nepl\u00e1nuje. Pokud ned\u016fv\u011bryhodn\u00fd vyd\u00e1vaj\u00edc\u00ed bod fungoval podle krimin\u00e1ln\u00edch sch\u00e9mat pro b\u011b\u017en\u00fd U\u0426, co br\u00e1n\u00ed v tom, aby to sam\u00e9 zp\u016fsobila st\u00e1tn\u00ed instituce?<\/p>\n

    V aktu\u00e1ln\u00ed verzi z\u00e1kona nen\u00ed uvedeno, kdo a jak ponese odpov\u011bdnost za vyd\u00e1n\u00ed UC\u00c9P, pokud byla tato podpisov\u00e1 metoda pou\u017eita v podvodn\u00fdch praktik\u00e1ch. Nav\u00edc ani v trestn\u00edm z\u00e1kon\u00edku neexistuje p\u0159\u00edslu\u0161n\u00fd paragraf, kter\u00fd by umo\u017e\u0148oval st\u00edhat za vyd\u00e1n\u00ed certifik\u00e1tu elektronick\u00e9ho podpisu na z\u00e1klad\u011b ukraden\u00fdch osobn\u00edch \u00fadaj\u016f.<\/p>\n

    Dal\u0161\u00edm probl\u00e9mem je p\u0159et\u00ed\u017een\u00ed st\u00e1tn\u00edch UC, kter\u00e9 nutn\u011b nastane p\u0159i nov\u00fdch pravidlech a zkomplikuje poskytov\u00e1n\u00ed slu\u017eeb ob\u010dan\u016fm a pr\u00e1vnick\u00fdm osob\u00e1m.<\/p>\n

    Slu\u017eebn\u00ed funkce UC nen\u00ed v n\u00e1vrhu z\u00e1kona v\u016fbec zva\u017eov\u00e1na. Bude-li vytvo\u0159eno odd\u011blen\u00ed z\u00e1kaznick\u00e9ho servisu p\u0159i navrhovan\u00fdch velk\u00fdch st\u00e1tn\u00edch UCe, kolik \u010dasu to zabere a jak\u00e9 materi\u00e1ln\u00ed investice to bude vy\u017eadovat, kdo se bude starat o obsluhu klient\u016f, dokud se takov\u00e1 infrastruktura vytvo\u0159\u00ed \u2013 nen\u00ed jasn\u00e9. Je z\u0159ejm\u00e9, \u017ee z\u00e1nik konkurence v t\u00e9to oblasti by mohl snadno v\u00e9st k stagnaci v odv\u011btv\u00ed.<\/p>\n

    To znamen\u00e1, \u017ee v\u00fdsledkem bude monopolizace trhu UC st\u00e1tn\u00edmi strukturami, p\u0159et\u00ed\u017een\u00ed t\u011bchto struktur s zpomalen\u00edm ve\u0161ker\u00e9 \u010dinnosti t\u00fdkaj\u00edc\u00ed se EDO, absence podpory pro koncov\u00e9ho u\u017eivatele v p\u0159\u00edpad\u011b podvodu a \u00fapln\u00e9 zni\u010den\u00ed st\u00e1vaj\u00edc\u00edho trhu UC spolu s existuj\u00edc\u00ed infrastrukturou (to je p\u0159ibli\u017en\u011b 15 000 pracovn\u00edch m\u00edst v cel\u00e9 zemi).<\/p>\n

    Kdo tedy utrp\u00ed? Utrp\u00ed v d\u016fsledku p\u0159ijet\u00ed takov\u00e9ho n\u00e1vrhu z\u00e1kona ti sam\u00ed, kdo trp\u00ed i nyn\u00ed, tedy koncov\u00ed u\u017eivatel\u00e9 a certifika\u010dn\u00ed centra.<\/p>\n

    Podniky, kter\u00e9 prosperuj\u00ed na kr\u00e1de\u017e\u00edch osobn\u00edch \u00fadaj\u016f, budou st\u00e1le vzkv\u00e9tat. Nen\u00ed na \u010dase, aby se org\u00e1ny \u010dinn\u00e9 v trestn\u00edm \u0159\u00edzen\u00ed a z\u00e1konod\u00e1rci zam\u011b\u0159ili na tento probl\u00e9m a skute\u010dn\u011b v\u00e1\u017en\u011b reagovali na v\u00fdzvy digit\u00e1ln\u00ed \u00e9ry? Mo\u017enosti kr\u00e1de\u017e\u00ed osobn\u00edch \u00fadaj\u016f a jejich n\u00e1sledn\u00e9ho krimin\u00e1ln\u00edho vyu\u017eit\u00ed vzrostly za posledn\u00edch 10-15 let mnohon\u00e1sobn\u011b. Tak\u00e9 \u00farove\u0148 \u0161kolen\u00ed zlo\u010dinc\u016f vzrostla. Je t\u0159eba na to reagovat zaveden\u00edm p\u0159\u00edsn\u00fdch opat\u0159en\u00ed odpov\u011bdnosti za jak\u00e9koli protiz\u00e1konn\u00e9 jedn\u00e1n\u00ed s ciz\u00edmi osobn\u00edmi \u00fadaji, jak pro spole\u010dnosti a jejich zam\u011bstnance, tak pro jednotlivce. A pro to, aby se skute\u010dn\u011b vy\u0159e\u0161il probl\u00e9m krimin\u00e1ln\u00edho vyu\u017e\u00edv\u00e1n\u00ed certifik\u00e1t\u016f elektronick\u00e9ho podpisu, je t\u0159eba vytvo\u0159it legislativn\u00ed n\u00e1vrh, kter\u00fd by zahrnoval odpov\u011bdnost, v\u010detn\u011b trestn\u00ed, za takov\u00e9 jedn\u00e1n\u00ed. A ne legislativn\u00ed n\u00e1vrh, kter\u00fd pouze p\u0159erozd\u011bluje finan\u010dn\u00ed toky, komplikuje proces pro koncov\u00e9ho u\u017eivatele a nakonec nikomu neposkytuje \u017e\u00e1dnou ochranu.
    \n
    Zdroj:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442? \u0422\u0435\u043c\u0430 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0421\u041c\u0418 \u0432\u0437\u044f\u043b\u0438 \u0441\u0435\u0431\u0435 \u0437\u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u0442\u0440\u0430\u0448\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043d\u0435\u043f\u0440\u0430\u0432\u043e\u043c\u0435\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u0421\u0430\u043c\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0435 \u0432 \u044d\u0442\u043e\u0439 \u0441\u0444\u0435\u0440\u0435 \u2013 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u044e\u0440. \u043b\u0438\u0446\u0430 \u0438\u043b\u0438 \u0418\u041f \u043d\u0430 \u0438\u043c\u044f \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0438\u043d\u0430 \u0420\u0424. \u0422\u0430\u043a\u0436\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-54535","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pred\u00e1tor nebo ob\u011b\u0165? Kdo ochr\u00e1n\u00ed certifika\u010dn\u00ed autority | ProHoster","description":"Co se d\u011bje? T\u00e9ma podvodn\u00fdch jedn\u00e1n\u00ed prov\u00e1d\u011bn\u00fdch pomoc\u00ed certifik\u00e1tu elektronick\u00e9ho podpisu z\u00edskalo v posledn\u00ed dob\u011b \u0161irokou ve\u0159ejnou odezvu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hishhnik-ili-zhertva-kto-zashhitit-udostoveryayushhie-tsentry","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u0438\u0449\u043d\u0438\u043a \u0438\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430? \u041a\u0442\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u0442 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0435 \u0446\u0435\u043d\u0442\u0440\u044b | ProHoster","og:description":"\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442? \u0422\u0435\u043c\u0430 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hishhnik-ili-zhertva-kto-zashhitit-udostoveryayushhie-tsentry","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54535","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 11:45:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:03:57","updated":"2026-01-24 11:45:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=54535"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54535\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=54535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=54535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=54535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}