Ntchitoyi ndiyotchuka kwambiri ku USA polemba ntchito zakutali za okonza ma plumbers, akatswiri otenthetsera ndi mpweya, ndi zina zotero. Ku Russia palinso malo ofanana: ndi bwino kusankha mwamsanga katswiri. Ngakhale m'mikhalidwe yapano ndikwabwino kukhomerera alumali nokha kuti musamayanjane ndi aliyense. Komabe, posachedwa USAFact (wowunikira makampani masauzande ambiri, kuphatikiza Akatswiri a Utumiki) ndi GlobalSign kuti mukhazikitse chizolowezi cha Digital Signing Service, yomwe idatumizidwa m'miyezi inayi - ndipo tsopano ndiyovomerezeka kuti iwonetseretu akatswiri onse a Utumiki.
Ichi ndi chitsanzo cha momwe mungakonzekerere ntchito zakutali kwa ogwira ntchito olembedwa ndikuchita bwino zikalata. Zogwirizana ndi zomwe zikuchitika pano.
Makampani akusintha ma signature a digito chifukwa cha zabwino zake zomveka:
- Kutuluka kwa mapepala opanda mapepala. Kupulumutsa nthawi, ndalama ndi chuma.
- Njira zamabizinesi ogwira mtima. Kusaina pakompyuta kumapangitsa kuti ntchito iliyonse ikhale yosavuta.
- Kuthekera kwa mafoni. Kuyankhulana mkati mwa bungwe ndi makasitomala kumakhala kosavuta.
A Public Key Infrastructure (PKI) imatsimikizira kukhulupirika ndikutsimikizira kulembedwa kwa chikalata chilichonse. Zidindo zanthawi zimatsimikizira nthawi yomwe chikalatacho chinasainidwa, chomwe chili chofunikira pakuchita zinthu motengera nthawi, kusakanidwa, ndi kusunga deta kuti ifufuze. Dongosolo lonse loyang'anira zolemba zokhala ndi ma signature a digito liyenera kutsata zofunikira zomwe zikugwira ntchito m'dziko laulamuliro, komanso m'maiko omwe abwenzi ndi makasitomala amagwira ntchito.
(DSS) ndi nsanja yowopsa, yothandizidwa ndi API yotumiza mwachangu masiginecha a digito omwe amapereka:
- Sainani mwapang'onopang'ono chikalata chilichonse kapena kusinthana kwa digito pakukhazikitsa kwa PKI
- Kupereka satifiketi yosainira
- AATL ndi Microsoft Root thandizo
- Kusunga makiyi achinsinsi kutengera HSM
- Kuwunikidwa kwa mayankho ofunikira pakuwunika
- Zisindikizo zapamwamba zamagetsi ndipo, zitavomerezedwa, siginecha zoyenerera zimatsatira muyezo wa eIDAS
Utumiki wamtambo umathandizira kwambiri kutumiza kasamalidwe ka zikalata mothandizidwa ndi ma signature a digito. Ntchito zonse zimangodutsa mu API.
Kubwereranso kwa Akatswiri a Utumiki, posachedwapa adayambitsa zopereka zatsopano zomwe zimapangidwira kuti makasitomala azivutika. Koma izi zimafuna luso lopanga mapangano odalirika m'nyumba zamakasitomala. Akatswiri a Utumiki adagwira ntchito ndi USAFact kuti apange pulogalamu yapaintaneti yomwe idayendetsa wogulitsa ntchitoyo powerengera zosiyanasiyana, kuwalola kuti alowetse zofunikira asanapange PDF yomwe ingasayinidwe ndi kujambulidwa pakompyuta. Zikaonekeratu kuti yankho loyamba silinali lodalirika, USAFact inayamba kufunafuna njira yabwinoko. Kenako adasankha GlobalSign kuti agwiritse ntchito siginecha ya digito.
Pambuyo pomaliza pulogalamu yoyendetsa, Akatswiri a Utumiki akuyembekeza kutumiza DSS yochokera kumtambo kunthambi zonse za 94 za US ndi maofesi a 600. Ogwiritsa ntchito onse angakhale ndi chidaliro kuti zonse zomwe zasonkhanitsidwa zidzakhalabe zamakono komanso zotetezeka, panopa komanso m'tsogolomu.
Digital Signing Service imapereka chilichonse chomwe mungafune kuti mutumize siginecha za digito ndi kuphatikiza kosavuta kwa REST API. Zigawo zonse zothandizira za cryptographic, kuphatikiza ziphaso zosayina, kasamalidwe ka makiyi, seva yanthawi yayitali, ndi ntchito ya OCSP kapena CRL, zimaperekedwa mu foni imodzi ya API yokhala ndi chitukuko chochepa komanso palibe zida zam'deralo zomwe zingayang'anire.
Source: www.habr.com