密码评估视角下的信息系统密码应用改造  

Transformation of Password Application in Information System Based on Password Evaluation

作　　者：邓福彪 林颖 徐九洲 DENG Fubiao;LIN Ying;XU Jiuzhou(Fujian Jinmi Network Security Evaluation Technology Co.,Ltd,Fuzhou,China,350003)

机构地区：[1]福建金密网络安全测评技术有限公司,福州350003

出　　处：《福建电脑》2022年第8期33-36,共4页Journal of Fujian Computer

摘　　要：为进一步增强国家信息安全、推动核心技术国产化,加快对信息系统的密码应用的改造是十分必要的。基于商用密码应用安全性评估以及国家的相关法律法规文件的要求,本文总结了目前信息系统建设过程中,密码应用改造中常见的问题,并从通用要求、密码技术应用要求和安全管理要求三方面提出了改进建议。这些建议能为有效增强信息系统的密码应用安全性提供参考。In order to further enhance the national information security and promote the localization of core technologies,it is very necessary to speed up the transformation of the password application of the information system.Based on the security evaluation of commercial password application and the requirements of relevant national laws and regulations,this paper summarizes the common problems in the password application transformation in the current information system construction process,and puts forward improvement suggestions from three aspects:General requirements,password technology application requirements and security management requirements.These suggestions can provide a reference for effectively enhancing the security of password application in information system.

关 键 词：信息系统 商用密码安全性评估 密码改造 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]