数字生态下商用密码应用安全的法治保障  

The Legal Guarantee of Commercial Cipher Codes Application Security in Digital Ecology

作　　者：张勇[1] 冯明昱 Zhang Yong;Feng Mingyu

机构地区：[1]华东政法大学刑事法学院

出　　处：《上海政法学院学报（法治论丛）》2022年第3期121-129,共9页Journal of Shanghai University of Political Science & Law(The Rule of Law Forum)

基　　金：2019年度国家社会科学基金一般项目“大数据背景下公民个人信息刑法保护体系研究”的阶段性研究成果,项目编号:19BFX074。

摘　　要：密码是信息网络安全保障的核心技术,是促进数字经济发展和保障数据安全的主要手段。在数字经济生态化背景下,数字法治建设需要确立安全与发展的系统思维。随着《密码法》的颁布实施,国家对其从严格管控逐步转向放管结合和推广应用;修订中的《商用密码管理条例》予以回应,凸显促进商用密码应用与保障安全相统一的价值导向。我国应建立商用密码分类分级保护制度,健全事中、事后监管体系,加强安全性评估和国家安全审查,明确相关主体安全义务及法律责任,并促进刑行衔接,构建商用密码应用安全保障的法律体系。Password is the core technology of information network security,and the main means to promote the development of digital economy and guarantee data security.Under the ecological background of digital economy,the construction of digital rule of law needs to establish the system thought of security and development.With the promulgation and implementation of the Cryptography Law of the People’s Republic of China,the state gradually shifted its strict control to the combination of release and regulation and promotion and application;the revised Regulation on the Administration of Commercial Cipher Codes is a response,highlighting the value orientation of promoting the unity of the application of business passwords and safeguarding security.China should establish the classification and classification protection system of commercial passwords,improve the supervision system during and after the event,strengthen the security assessment and national security review,clarify the security obligations and legal responsibilities of relevant subjects,and promote the convergence of criminal law and administrative law,so as to construct the legal system of the security guarantee of the application of commercial passwords.

关 键 词：商用密码 数字法治 安全监管 数据安全 

分 类 号：DF399[政治法律—宪法学与行政法学]