Masikati akanaka, muverengi anodiwa!
Ndanga ndichishingairira kutevera zvigadziriso uye nhau dzeiyo Digital Economy chirongwa kwenguva yakati. Kubva pakuona kwemushandi wemukati weEGAIS system, hongu, maitiro acho achagara kwemakumi emakore. Zvose kubva pakuona kwekusimudzira, uye kubva pakuona kwekuedzwa, kudzokororwa uye kuwedzera kushandiswa, kuteverwa nekugadziriswa kusingadzivisiki uye kunorwadza kwemarudzi ose emabhugi. Zvakadaro, nyaya yacho inofanirwa, yakakosha uye yekukurumidzira. Mutengi mukuru uye mutyairi wekunakidzwa kwese uku, hongu, nyika. Chaizvoizvo, sezvakangoita pasi rose.
Ese maitirwo agara aenda mudhijitari kana ari munzira kuenda kwairi. Izvi zvichiri zvinoshamisa. Zvakadaro, pane zvakaderera kune menduru dzekugona. Ini ndiri munhu anogara achishanda nemasaini edhijitari. Ini ndiri mutsigiri wezvingangodaro "nezuro", asi "yechinyakare" yakavimbika uye inokunda-inokunda nzira dzekudzivirira masiginecha emagetsi uchishandisa zviratidzo. Asi digitalization inotiratidza kuti zvinhu zvose zvave zviri mu "makore" kwenguva yakareba uye CEP inodiwawo ikoko uye inodiwa nokukurumidza zvikuru.
Ndakaedza kufunga, pamwero wemitemo uye hunyanzvi hwekugadzira, pazvinogoneka, kuti zvinhu zvinomira sei nemasaini emagetsi egore pano uye muEurope. Muchokwadi, anopfuura rimwe dissertation yesainzi yakatoburitswa pamusoro penyaya iyi. Naizvozvo, tinokurudzira nyanzvi munyaya iyi kuti vabatane mukusimudzira musoro wenyaya.
Nei CEP iri mugore ichiyevedza? Kutaura zvazviri, pane zvakanakira. Pane zvakakwana zvezvakanakira izvi. Inokurumidza uye yakanakira. Zvinoita senge sirogani yekushambadzira, unobvuma, asi aya ndiwo maitiro echinangwa chegore redhijitari siginecha.
Kumhanya kuri mukukwanisa kusaina magwaro pasina kusungirirwa kune tokeni kana smart makadhi. Hazvimanikidzi kuti tishandise desktop chete. zana muzana remuchinjika-chikuva nyaya kune chero OS uye mabhurawuza. Izvi ndezvechokwadi kunyanya kune vateveri vezvigadzirwa zveApple, kune avo kune mamwe matambudziko mukutsigira siginecha yemagetsi muMAC system. Buda kubva kupi zvako munyika, rusununguko rwekusarudza maCA (kunyangwe asiri eRussia). Kusiyana neCEP Hardware, matekinoroji emakore anotendera iwe kudzivirira matambudziko nekuenderana kwesoftware uye hardware. Izvo, hongu, zvakaringana, uye, hongu, nekukurumidza.
Uye munhu haagoni sei kunyengedzwa norunako rwakadaro? Dhiyabhorosi ari muhuwandu. Ngatitaure nezvekuchengeteka.
"Cloud" CEP muRussia
Iko kuchengetedzeka kwemafu mhinduro, uye kunyanya masiginecha edhijitari, ndiyo imwe yenzvimbo dzinorwadza dzevashandi vekuchengetedza. Chii chaizvo chandisingade, muverengi achandibvunza, nekuti munhu wese anga achishandisa makore masevhisi kwenguva yakareba, uye neSMS inotonyanya kuvimbika kuita kubhengi.
Chaizvoizvo, zvakare, ngatidzokere kumashoko. Cloud digital siginecha inguva yemberi yakaoma kupokana nayo. Asi kwete zvino. Kuti uite izvi, shanduko yekutonga inofanira kuitika iyo inodzivirira muridzi wegore digitaalinen siginecha.
Chii chatinacho nhasi? Kune akati wandei magwaro anotsanangura pfungwa yedhijitari siginecha, zvemagetsi gwaro manejimendi (EDF), pamwe nemirairo yekudzivirira ruzivo uye kutenderera kwedata. Kunyanya, iwe unofanirwa kufunga nezve Civil Code (Civil Code yeRussian Federation), iyo inodzora kushandiswa kwemasaini emagetsi mumagwaro.
Federal Law No. 63-FZ "PamaSiginecha Emagetsi" yakaitwa 06.04.2011/XNUMX/XNUMX. Iwo mutemo wekutanga uye wehurongwa unotsanangura zvazvinoreva zvekushandisa masiginecha edhijitari paunenge uchiita kutengeserana kwemhando dzakasiyana uye nekupa masevhisi.
Federal Law No. 149-FZ βPamusoro peruzivo, matekinoroji eruzivo nekuchengetedzwa kweruzivo rwemusi waChikunguru 27.07.2006, XNUMX. Gwaro iri rinotsanangura pfungwa yegwaro remagetsi uye zvikamu zvese zvinoenderana.
Kune mamwe zviito zvemutemo zvinobatanidzwa mukugadziriswa kweEDI
Federal Law 402-FZ "PaAccounting" yaDecember 06.12.2011, XNUMX. Chiitiko chemutemo chinopa kurongeka kwezvinodiwa zveakaunzi uye accounting zvinyorwa mumagetsi fomu.
Incl. Iwe unogona kufunga nezveArbitration Procedural Code yeRussian Federation, iyo inobvumira magwaro akasainwa nemagetsi siginicha sehumbowo mudare.
Uye apa ndipo pazvakaitika kwandiri kuti ndiongorore zvakadzama munyaya yekuchengeteka, nokuti mitemo yedu ye crypto-protection nzira inopiwa neFSB uye inovimbisa kubudiswa kwezvitupa zvekuenderana. Musi waFebruary 18, mitemo mitsva yeGOST yakaunzwa. Nekudaro, makiyi akachengetwa mugore haana kuchengetedzwa zvakananga neFSTEC zvitupa. Kudzivirira makiyi pachavo uye kupinda kwakachengeteka mu "gore" ndiwo matombo emakona atisati tagadzirisa. Tevere, ini ndichatarisa muenzaniso wekutonga muEuropean Union, iyo icharatidza zvakajeka imwe yepamusoro yekuchengetedza system.
Chiitiko cheEurope mukushandisa cloud digital siginecha
Ngatitangei nechinhu chikuru - cloud technologies, kwete chete masiginecha edhijitari ane chiyero chakajeka. Hwaro ndeye Cloud Standard Coordination (CSC) boka reEuropean Telecommunications Standards Institute (ETSI). Nekudaro, kuchine misiyano mumatanho ekudzivirira data munyika dzakasiyana siyana.
Hwaro hwekuchengetedzwa kwedata rakazara ndeyekusungirwa chitupa kune vanopa zvinoenderana neISO 27001:2013 yeruzivo rwekuchengetedza manejimendi masisitimu (inoenderana Russian GOST R ISO/IEC 27001-2006 yakavakirwa pa2006 vhezheni yechiyero ichi).
ISO 27017 inopa zvimwe zvinhu zvekuchengetedza zvegore izvo zvisipo kubva muISO 27002. Zita repamutemo rakazara rechiyero ichi ndere βCode of practice yeruzivo rwekuchengetedza zvidzoro zvichibva pa ISO/IEC 27002 ye cloud services.β ISO/IEC 27002 ye cloud services. ").
Muzhizha ra2014, ISO yakaburitsa ISO 27018:2015 yakajairwa pakuchengetedza dhata remunhu mugore, uye mukupera kwa2015, ISO 27017:2015 pane zvekuchengetedza ruzivo zvidzoreso zvemakore.
Mukupera kwe2014, Chisarudzo chitsva cheParamende yeEurope Nhamba 910 / 2014, inonzi eIDAS, yakatanga kushanda. Mitemo mitsva inobvumira vashandisi kuchengetedza uye kushandisa kiyi yeEPC pane sevha yeanotenderwa anovimbika sevhisi, iyo inonzi TSP (Trust Service Provider).
Muna Gumiguru 2013, European Committee for Standardization (CEN) yakagamuchira tekinoroji yakatarwa CEN/TS 419241 "Security Requirements for Trustworthy Systems Supporting Server Signing", yakatsaurirwa kumutemo wegore digital siginicha. Gwaro rinotsanangura matanho akati wandei ekuchengetedza kuchengetedzwa. Semuenzaniso, "level 2" kutevedzera kunodiwa kugadzira siginecha yemagetsi inokodzera kunoda rutsigiro rwesarudzo dzakasimba dzehuchokwadi hwemushandisi. Zvinoenderana nezvinodiwa zveiyi nhanho, kuvimbiswa kwemushandisi kunoitika zvakananga pane siginecha sevha, mukupesana, semuenzaniso, kune chokwadi chinotenderwa "level 1" mune application inowana siginecha server pachinzvimbo chayo. Zvakare, zvinoenderana neichi chirevo, mushandisi siginecha makiyi ekugadzira akakodzera siginecha yemagetsi anofanirwa kuchengetwa mundangariro yechinhu chakachengeteka chakachengeteka (hardware kuchengetedza module, HSM).
Kutendeseka kwemushandisi mune gore sevhisi kunofanirwa kunge kuri maviri-zvinhu. Sekutonga, iyo inonyanya kuwanikwa uye iri nyore kushandisa sarudzo ndeyekusimbisa kupinda nekodhi yakagamuchirwa muSMS meseji. Semuenzaniso, mazhinji eakaundi ega eRBS emabhangi eRussia akaitwa. Kuwedzera kune akajairwa cryptographic tokens, application pane smartphone uye imwe-nguva password jenareta (OTP tokens) inogona zvakare kushandiswa senzira yekusimbisa.
Parizvino, ini ndinogona kutora mhedziso yenguva pfupi nezve chokwadi chekuti makore CEPs achiri kungoumbwa uye kuchiri kumberi kuti ubve pahardware. Muchidimbu, iyi inzira yechisikigo, iyo kunyange muEurope (o, huru!) Yakagara makore anenge 13-14 kusvikira mamwe maitiro asina kururama akagadzirwa.
Kusvikira tagadzira yakanaka GOST zviyero zvinoronga masevhisi edu egore, kuchiri kumberi kutaura nezvekusiiwa kwakazara kwezvigadziriso zvehardware. Asi, ivo zvino, pane zvinopesana, vachatanga kuenda kune "mahybrids", ndiko kuti, kushanda nemasaini emafu zvakare. Mimwe mienzaniso inosangana neEuropean zviyero zvekushanda neCloud yakatoitwa. Asi isu tichataura pamusoro peizvi mune zvishoma zvakadzama mune zvinyorwa zvitsva.
Source: www.habr.com