Masana abwino, owerenga okondedwa!
Ndakhala ndikutsata zosintha ndi nkhani za pulogalamu ya Digital Economy kwakanthawi. Kuchokera pakuwona kwa wogwira ntchito mkati mwa dongosolo la EGAIS, ndithudi, ntchitoyi idzakhalapo kwa zaka zambiri. Zonse kuchokera ku lingaliro lachitukuko, komanso kuchokera ku kuyesa, kubwereranso ndi kukhazikitsidwa kwina, kutsatiridwa ndi kusintha kosapeŵeka ndi kowawa kwa mitundu yonse ya nsikidzi. Komabe, nkhaniyi ndi yofunika, yofunika komanso yofulumira. Makasitomala wamkulu ndi dalaivala wa zosangalatsa zonsezi, ndithudi, boma. Kwenikweni, monga padziko lonse lapansi.
Njira zonse zakhala zikuyenda mu digito kapena zili m'njira yopitako. Izi zikadali zodabwitsa. Komabe, pali zovuta zina za mendulo zakuchita bwino. Ndine munthu yemwe nthawi zonse ndimagwira ntchito ndi ma signature a digito. Ndine wothandizira mwina "dzulo", koma "zakale" zodalirika ndi njira zopambana zotetezera zizindikiro zamagetsi pogwiritsa ntchito zizindikiro. Koma digito imatiwonetsa kuti zonse zakhala mu "mitambo" kwa nthawi yayitali ndipo CEP ikufunikanso kumeneko ndipo ikufunika mwachangu kwambiri.
Ndinayesa kulingalira, pamlingo wa malamulo ndi luso lamakono, ngati n'kotheka, momwe zinthu zimakhalira ndi ma signature a cloud electronic kuno ndi ku Ulaya. M'malo mwake, zolemba zambiri zasayansi zasindikizidwa kale pamutuwu. Choncho, timalimbikitsa akatswiri pa nkhaniyi kuti agwirizane nawo pa chitukuko cha mutuwo.
Chifukwa chiyani CEP pamtambo ndi yokongola? Ndipotu pali ubwino. Pali zokwanira za ubwino umenewu. Ndi yachangu komanso yabwino. Zikumveka ngati mawu otsatsa, mungavomereze, koma izi ndizomwe zimafunikira pa siginecha ya digito yamtambo.
Kuthamanga kuli pakutha kusaina zikalata popanda kumangidwa ndi ma tokeni kapena makhadi anzeru. Sikutikakamiza kugwiritsa ntchito kompyuta yokhayo. Nkhani zana limodzi pa zana la nsanja ya OS iliyonse ndi asakatuli. Izi ndizowona makamaka kwa mafani azinthu za Apple, omwe amakhala ndi zovuta zina pothandizira siginecha zamagetsi pamakina a MAC. Tulukani kulikonse padziko lapansi, ufulu wosankha ma CA (ngakhale omwe si a Russia). Mosiyana ndi zida za CEP, matekinoloje amtambo amakulolani kuti mupewe zovuta zokhudzana ndi mapulogalamu ndi zida. Chimene, inde, chiri choyenera, ndipo, inde, mofulumira.
Ndipo kodi munthu sangakopeke bwanji ndi kukongola koteroko? Mdierekezi ali mwatsatanetsatane. Tiye tikambirane za chitetezo.
"Mtambo" CEP ku Russia
Chitetezo cha mayankho amtambo, makamaka ma signature a digito, ndi chimodzi mwazinthu zowawa kwambiri kwa akatswiri achitetezo. Ndi chiyani chomwe sindimakonda, wowerenga adzandifunsa, chifukwa aliyense wakhala akugwiritsa ntchito mautumiki amtambo kwa nthawi yaitali, ndipo ndi SMS ndizodalirika kwambiri kuti atumize ku banki.
Kwenikweni, kachiwiri, tiyeni tibwerere mwatsatanetsatane. Siginecha ya digito yamtambo ndi tsogolo lomwe ndizovuta kutsutsana nalo. Koma osati tsopano. Kuti muchite izi, zosintha zowongolera ziyenera kuchitika zomwe zingateteze mwiniwake wama signature amtambo.
Kodi tili ndi chiyani masiku ano? Pali zolemba zingapo zomwe zikufotokozera lingaliro la siginecha ya digito, kasamalidwe ka zikalata zamagetsi (EDF), komanso malamulo oteteza zidziwitso ndi kufalitsa deta. Makamaka, muyenera kuganizira Civil Code (Civil Code of the Russian Federation), yomwe imayang'anira kugwiritsa ntchito siginecha zamagetsi m'zikalata.
Federal Law No. 63-FZ "Pa Zikwangwani Zamagetsi" za 06.04.2011/XNUMX/XNUMX. Lamulo loyambira ndi chimango lomwe limafotokoza tanthauzo lambiri lakugwiritsa ntchito siginecha ya digito popanga zochitika zamitundu yosiyanasiyana ndikupereka ntchito.
Federal Law No. 149-FZ “Pazidziwitso, matekinoloje azidziwitso ndi chitetezo chazidziwitso za pa Julayi 27.07.2006, XNUMX. Chikalatachi chikufotokoza lingaliro la chikalata chamagetsi ndi zigawo zonse zogwirizana.
Pali malamulo owonjezera omwe akukhudzidwa ndi kayendetsedwe ka EDI
Federal Law 402-FZ "Pa Accounting" ya Disembala 06.12.2011, XNUMX. Lamulo lamalamulo limapereka kukhazikitsidwa kwa zofunikira pazowerengera zama accounting ndi ma accounting mu mawonekedwe apakompyuta.
Kuphatikiza. Mutha kuganizira za Arbitration Procedural Code of the Russian Federation, zomwe zimalola zikalata zosainidwa ndi siginecha yamagetsi ngati umboni kukhothi.
Ndipo apa ndi pamene zinandichitikira kuti ndifufuze mozama pa nkhani ya chitetezo, chifukwa miyezo yathu ya crypto-protection njira imaperekedwa ndi FSB ndikuwonetsetsa kuperekedwa kwa zizindikiro zovomerezeka. Pa February 18, miyezo yatsopano ya GOST idayambitsidwa. Chifukwa chake, makiyi osungidwa mumtambo samatetezedwa mwachindunji ndi ziphaso za FSTEC. Kuteteza makiyi okha ndikulowa motetezeka mu "mtambo" ndi miyala yapangodya yomwe sitinayithetse. Kenaka, ndiyang'ana chitsanzo cha malamulo ku European Union, chomwe chidzasonyeze bwino chitetezo chapamwamba kwambiri.
Zochitika zaku Europe pakugwiritsa ntchito siginecha za digito zamtambo
Tiyeni tiyambe ndi chinthu chachikulu - matekinoloje amtambo, osati ma signature a digito okha omwe ali ndi muyezo womveka bwino. Maziko ake ndi gulu la Cloud Standard Coordination (CSC) la European Telecommunications Standards Institute (ETSI). Komabe, pali kusiyana pakati pa mfundo zoteteza deta m'mayiko osiyanasiyana.
Maziko a chitetezo chokwanira cha data ndi chiphaso chovomerezeka kwa opereka malinga ndi ISO 27001:2013 pamakina owongolera chitetezo chazidziwitso (yolingana yaku Russia GOST R ISO/IEC 27001-2006 itengera mtundu wa 2006 wa muyezo uwu).
ISO 27017 imapereka zinthu zina zachitetezo pamtambo zomwe zikusowa mu ISO 27002. Dzina lovomerezeka la muyezowu ndi "Code of practice for information security controls based on ISO/IEC 27002 for cloud services." ISO/IEC 27002 for cloud services ").
M'chilimwe cha 2014, ISO inafalitsa muyeso wa ISO 27018:2015 woteteza deta yaumwini mumtambo, ndipo kumapeto kwa 2015, ISO 27017:2015 pazidziwitso zachitetezo chazidziwitso za mayankho amtambo.
Kumapeto kwa 2014, Chigamulo chatsopano cha Nyumba Yamalamulo ya ku Ulaya No. 910/2014, chotchedwa eIDAS, chinayamba kugwira ntchito. Malamulo atsopanowa amalola ogwiritsa ntchito kusunga ndi kugwiritsa ntchito kiyi ya EPC pa seva ya wothandizira odalirika wodalirika, wotchedwa TSP (Trust Service Provider).
Mu Okutobala 2013, European Committee for Standardization (CEN) idatengera ukadaulo wa CEN/TS 419241 "Zofunika Zachitetezo Pazinthu Zodalirika Zothandizira Kusaina Seva", zoperekedwa pakuwongolera ma signature amtambo. Chikalatacho chikufotokoza magawo angapo akutsatira chitetezo. Mwachitsanzo, kutsata kwa "level 2" komwe kumafunikira kuti mupange siginecha yamagetsi yoyenerera kumafunikira kuthandizira pazosankha zamphamvu zotsimikizira ogwiritsa ntchito. Malinga ndi zofunikira za mulingo uwu, kutsimikizika kwa ogwiritsa ntchito kumachitika mwachindunji pa seva yosayina, mosiyana, mwachitsanzo, kutsimikizika komwe kumaloledwa ku "level 1" mu pulogalamu yomwe imapeza seva yosayina m'malo mwake. Komanso, molingana ndi izi, makiyi osayina ogwiritsa ntchito kuti apange siginecha yamagetsi yoyenerera ayenera kusungidwa kukumbukira chipangizo chapadera chotetezedwa (hardware security module, HSM).
Kutsimikizika kwa ogwiritsa ntchito pamtambo kuyenera kukhala ndi zinthu ziwiri. Monga lamulo, njira yomwe imapezeka kwambiri komanso yosavuta kugwiritsa ntchito ndikutsimikizira kulowa kudzera pa code yomwe mwalandira mu uthenga wa SMS. Mwachitsanzo, maakaunti ambiri a RBS a mabanki aku Russia akhazikitsidwa. Kuphatikiza pa ma tokeni anthawi zonse a cryptographic, kugwiritsa ntchito pa foni yam'manja ndi majenereta achinsinsi anthawi imodzi (zizindikiro za OTP) zitha kugwiritsidwanso ntchito ngati njira yotsimikizira.
Pakadali pano, nditha kutsimikizira kwakanthawi ponena kuti ma CEP amtambo akungopangidwabe ndipo ndikuyambika kwambiri kuti tichoke pa hardware. M'malo mwake, iyi ndi njira yachilengedwe, yomwe ngakhale ku Europe (o, chachikulu!) Inatha pafupifupi zaka 13-14 mpaka miyezo yolondola kapena yocheperako idapangidwa.
Mpaka titapanga miyezo yabwino ya GOST yomwe imayendetsa ntchito zathu zamtambo, ndi molawirira kwambiri kuti tilankhule za kusiya mayankho a hardware. M'malo mwake, iwo tsopano, m'malo mwake, ayamba kupita ku "hybrids", ndiko kuti, kugwira ntchito ndi ma signature amtambo. Zitsanzo zina zomwe zimakwaniritsa miyezo yaku Europe yogwirira ntchito ndi Cloud zakhazikitsidwa kale. Koma tidzakambirana izi mwatsatanetsatane muzinthu zatsopano.
Source: www.habr.com