N'ehihie ọma, ezigbo onye na-agụ akwụkwọ!
Anọ m na-agbasi mbọ ike na-agbaso mmelite na akụkọ nke mmemme Digital Economy ruo oge ụfọdụ. Site n'echiche nke onye ọrụ ime nke usoro EGAIS, n'ezie, usoro ahụ ga-adịru ọtụtụ iri afọ. Ma site n'echiche nke mmepe, na site n'echiche nke ule, nlọghachi azụ na mmejuputa ọzọ, na-esote mgbanwe na-apụghị izere ezere na mgbu nke ụdị ahụhụ niile. Ka o sina dị, okwu ahụ dị mkpa, dị mkpa na ngwa ngwa. Onye isi ahịa na onye ọkwọ ụgbọ ala nke ihe ọchị a niile bụ, n'ezie, steeti. N'ezie, dị ka n'ụwa nile.
Usoro niile abanyela ogologo oge na dijitalụ ma ọ bụ na-aga ya. Nke a ka dị ebube. Agbanyeghị, enwere mbelata na nrite maka ịma mma. Abụ m onye na-arụ ọrụ mgbe niile na mbinye aka dijitalụ. Abụ m onye na-akwado ma eleghị anya "ụnyaahụ", mana "usoro ochie" nke a pụrụ ịdabere na ya na mmeri nke iji chebe mbinye aka electronic site na iji akara ngosi. Ma dijitalụ na-egosi anyị na ihe niile dị na "igwe ojii" ogologo oge na CEP dịkwa mkpa n'ebe ahụ ma chọọ ngwa ngwa.
M gbalịrị ịchọpụta, na ọkwa nke usoro omebe iwu na nkà na ụzụ, ebe o kwere omume, otú ihe si guzo na ígwé ojii mbinye aka n'ebe a na Europe. N'ezie, e bipụtala ihe karịrị otu akwụkwọ nyocha sayensị n'isiokwu a. Ya mere, anyị na-agba ndị ọkachamara n'okwu a ume ka ha sonye na mmepe nke isiokwu.
Kedu ihe kpatara CEP na igwe ojii ji mara mma? N'ezie, enwere uru. Enwere uru ndị a zuru oke. Ọ dị ngwa na adaba. Ọ dị ka slogan mgbasa ozi, ị ga-ekwenye, mana ndị a bụ ebumnuche ebumnuche nke mbinye aka dijitalụ igwe ojii.
Ọsọ ọsọ dabere na ikike ịbanye akwụkwọ na-ejikọghị ya na token ma ọ bụ kaadị smart. Ọ naghị amanye anyị ka anyị jiri naanị desktọpụ. Otu narị pasent akụkọ cross-platform maka OS na ihe nchọgharị ọ bụla. Nke a bụ eziokwu karịsịa maka ndị na-akwado ngwaahịa Apple, ndị nwere ụfọdụ ihe isi ike na-akwado mbinye aka electronic na usoro MAC. Wepụ n'ebe ọ bụla n'ụwa, nnwere onwe nke nhọrọ nke CA (ọbụna ndị na-abụghị ndị Russia). N'adịghị ka ngwaike CEP, teknụzụ igwe ojii na-enye gị ohere izere ihe isi ike na ndakọrịta nke ngwanrọ na ngwaike. Nke, ee, dabara adaba, na, ee, ngwa ngwa.
Oleekwa otú a na-apụghị ịrafu mmadụ site na mma dị otú ahụ? Ekwensu dị na nkọwa. Ka anyị kwuo maka nchekwa.
"Cloud" CEP na Russia
Nchekwa nke ngwọta igwe ojii, na karịsịa mbinye aka dijitalụ, bụ otu n'ime isi ihe mgbu maka ndị ọkachamara nchekwa. Kedu ihe na-adịghị amasị m, onye na-agụ ga-ajụ m, n'ihi na onye ọ bụla na-eji ọrụ ígwé ojii ogologo oge, na SMS ọ bụ ọbụna ihe a pụrụ ịdabere na ya iji nyefe ụlọ akụ.
N'ezie, ọzọ, ka anyị laghachi azụ na nkọwa. Cloud mbinye aka dijitalụ bụ ọdịnihu nke siri ike ịrụ ụka. Ma ọ bụghị ugbu a. Iji mee nke a, mgbanwe usoro ga-emerịrị nke ga-echebe onye nwe akara mbinye aka dijitalụ igwe ojii.
Gịnị ka anyị nwere taa? Enwere ọtụtụ akwụkwọ na-akọwa echiche nke mbinye aka dijitalụ, njikwa akwụkwọ eletrọnịkị (EDF), yana iwu gbasara nchekwa ozi na mgbasa ozi. Karịsịa, ịkwesịrị iburu n'uche koodu obodo (Civil Code of the Russian Federation), nke na-achịkwa iji akara mbinye aka electronic na akwụkwọ.
Iwu Federal No. 63-FZ "Na akara aka electronic" ụbọchị 06.04.2011/XNUMX/XNUMX. Iwu nke isi na usoro nke na-akọwa nkọwa izugbe nke iji mbinye aka dijitalụ mgbe ị na-eme azụmahịa nke ụdị dị iche iche na inye ọrụ.
Iwu Federal No. 149-FZ "Na ozi, teknụzụ ozi na nchedo ozi ụbọchị July 27.07.2006, XNUMX. Akwụkwọ a na-akọwapụta echiche nke akwụkwọ eletrọnịkị na akụkụ niile metụtara ya.
Enwere iwu ndị ọzọ metụtara iwu nke EDI
Iwu Federal 402-FZ "Na Akaụntụ" ụbọchị Disemba 06.12.2011, XNUMX. Iwu omebe iwu na-enye maka nhazi nke ihe achọrọ maka akwụkwọ ndekọ ego na akwụkwọ ndekọ ego n'ụdị electronic.
Incl. Ị nwere ike iburu n'uche na Usoro Arbitration Procedural Code nke Russian Federation, nke na-enye ohere akwụkwọ ndị mbinye aka electronic bịanyere aka na ya dị ka ihe akaebe n'ụlọ ikpe.
Ma ọ bụ ebe a ka ọ dị m ka m tinyekwuo n'ime okwu nke nchekwa, n'ihi na ụkpụrụ anyị maka crypto-protection na-enye site na FSB ma hụ na a na-enye akwụkwọ ikike nke nkwekọrịta. Na February 18, ewebata ụkpụrụ GOST ọhụrụ. Ya mere, igodo ndị echekwara na igwe ojii anaghị echekwa ya ozugbo site na asambodo FSTEC. Ichebe igodo n'onwe ha na ntinye nchebe na "igwe ojii" bụ isi nkuku nke anyị edozibeghị. Na-esote, m ga-eleba anya na ihe atụ nke iwu na European Union, nke ga-egosipụta n'ụzọ doro anya usoro nchebe dị elu karị.
Ahụmahụ ndị Europe n'iji mbinye aka dijitalụ igwe ojii
Ka anyị malite na isi ihe - teknụzụ igwe ojii, ọ bụghị naanị akara dijitalụ nwere ụkpụrụ doro anya. Ihe ndabere bụ otu Cloud Standard Coordination (CSC) nke European Telecommunications Standards Institute (ETSI). Agbanyeghị, a ka nwere ndịiche na ụkpụrụ nchekwa data n'ofe mba dị iche iche.
Ndabere maka nchekwa data zuru oke bụ asambodo amanyere iwu maka ndị na-eweta dịka ISO 27001: 2013 maka sistemu nchekwa nchekwa ozi (Russian GOST R ISO/IEC 27001-2006 kwekọrọ na ụdị 2006 nke ọkọlọtọ a).
ISO 27017 na-enye ihe nchekwa ndị ọzọ maka igwe ojii na-efu na ISO 27002. Aha gọọmentị zuru oke nke ọkọlọtọ a bụ "Usoro omume maka njikwa nchekwa ozi dabere na ISO/IEC 27002 maka ọrụ igwe ojii." ISO/IEC 27002 maka ọrụ igwe ojii. ").
N'oge okpomọkụ nke 2014, ISO bipụtara ụkpụrụ ISO 27018: 2015 maka ichekwa data nkeonwe na igwe ojii, yana n'ikpeazụ 2015, ISO 27017: 2015 na njikwa nchekwa ozi maka ngwọta igwe ojii.
N'oge mgbụsị akwụkwọ nke 2014, Mkpebi ọhụrụ nke European Parliament No. 910/2014, nke a na-akpọ eIDAS, malitere. Iwu ọhụrụ ahụ na-enye ndị ọrụ ohere ịchekwa ma jiri igodo EPC dị na sava nke onye na-ahụ maka ọrụ ntụkwasị obi, nke a na-akpọ TSP (Onye na-enye ọrụ ntụkwasị obi).
Na October 2013, European Committee for Standardization (CEN) nakweere nkọwa teknụzụ CEN/TS 419241 "Security Requirements for Trustworthy Systems Supporting Server Signing", raara nye iwu nke ígwé ojii mbinye aka dijitalụ. Akwụkwọ ahụ na-akọwa ọtụtụ ọkwa nke nnabata nchekwa. Dịka ọmụmaatụ, nnabata “ọkwa 2” chọrọ iji mepụta mbinye aka eletrọnịkị tozuru oke chọrọ nkwado maka nhọrọ njirimara onye ọrụ siri ike. Dị ka ihe ndị a chọrọ n'ọkwa a, njirimara onye ọrụ na-apụta ozugbo na ihe nkesa mbinye aka, n'ụzọ dị iche, dịka ọmụmaatụ, na nkwenye kwadoro maka "ọkwa 1" na ngwa nke na-enweta ihe nkesa mbinye aka n'aha onwe ya. Ọzọkwa, dịka nkọwapụta a siri dị, igodo mbinye aka onye ọrụ maka imepụta mbinye aka eletrọnịkị tozuru oke ga-echekwarịrị na ebe nchekwa ngwaọrụ echekwara pụrụ iche (modul nchekwa ngwaike, HSM).
Nnwale onye ọrụ na ọrụ igwe ojii ga-abụrịrị opekata mpe ihe abụọ. Dịka iwu, nhọrọ kachasị dị mfe ma dị mfe iji bụ nkwenye nbanye site na koodu enwetara na ozi SMS. Dịka ọmụmaatụ, ọtụtụ n'ime akaụntụ RBS nkeonwe nke ụlọ akụ Russia emejuputala ya. Na mgbakwunye na akara ngosi cryptographic nke a na-emebu, enwere ike iji ngwa dị na smartphone na ndị na-emepụta okwuntughe otu oge (OTP token) dị ka ụzọ nyocha.
Ka ọ dị ugbu a, enwere m ike nweta nkwubi okwu nwa oge gbasara eziokwu ahụ bụ na a ka na-emepụta CEP igwe ojii yana ọ dị oke n'oge ịhapụ ngwaike. Na ụkpụrụ, nke a bụ usoro okike, nke ọbụna na Europe (oh, nnukwu!) dị ihe dị ka afọ 13-14 ruo mgbe e mepụtara ụkpụrụ ziri ezi ma ọ bụ karịa.
Ruo mgbe anyị na-emepụta ụkpụrụ GOST dị mma na-achịkwa ọrụ igwe ojii anyị, ọ dị oke n'oge ikwu maka ịhapụ ihe ngwọta ngwaike kpamkpam. Kama, ha ga-amalite ugbu a, n'ụzọ megidere nke ahụ, na-amalite ịkwaga na "ngwakọ", ya bụ, na-arụ ọrụ na mbinye aka igwe ojii. Emebelarị ihe atụ ụfọdụ na-agbaso ụkpụrụ Europe maka ịrụ ọrụ na Cloud. Ma anyị ga-ekwu maka nke a na ntakịrị nkọwa na ihe ọhụrụ.
isi: www.habr.com