征信查询前置系统信息安全防控策略探析  

An Analysis of the Strategies for Credit Information Security Management of Credit Information Inquiry Front-end System

作　　者：贺小琳 He Xiaolin(Chengdu Branch of the People’s Bank of China,Chengdu 610041,Sichuan,China)

机构地区：[1]中国人民银行成都分行,四川成都610041

出　　处：《征信》2022年第7期51-55,共5页Credit Reference

摘　　要：随着金融信用信息基础数据库的社会关注度不断提高,信息泄露风险也不断上升。目前中国人民银行分支机构已普遍采用征信查询前置系统提供征信查询服务,但系统的信息安全防控功能有待完善。在阐述利用技术手段防范征信信息泄露思路的基础上,梳理人民银行征信查询系统存在的信息泄露风险点,提出运用征信查询前置系统访问控制策略、用户控制、异常查询监测、在线核查、薄弱环节管控、敏感信息处理等手段,构筑人民银行征信信息安全防火墙,保障信息安全。With the increasing social attention to the basic database of financial credit information,the risk of information leakage is also increasing.At present,the attributes and branches of the People's Bank of China(PBOC)have generally adopted the credit information inquiry front-end system to provide credit information inquiry services;however,the information security prevention and control functions of the system need to be improved.On the basis of expounding the idea of using technical means to prevent the leakage of credit information,the paper combs the risk of information leakage for the credit information inquiry system of the People’s Bank of China.Then it proposes to build the credit information security firewall of the People's Bank of China to ensure information security by using the access control strategy,user control,abnormal inquiry monitoring,online verification,weak link management and control,and sensitive information processing of the front-end system for credit inquiry.

关 键 词：征信查询 前置系统 征信信息安全 信息泄露 

分 类 号：F832.4[经济管理—金融学]