信息系统密码应用基本要求标准在政务云场景下的应用  

Standards for Basic requirements for Information System Password Applications in Government Cloud Scenarios

作　　者：周玮 罗礼晨 魏云涛 

机构地区：[1]深圳市东进技术股份有限公司

出　　处：《信息技术与标准化》2024年第S01期26-30,共5页Information Technology & Standardization

摘　　要：为了保障政务云上信息系统机密性、完整性、真实性安全需求,遵循GB/T 39786—2021《信息安全技术信息系统密码应用基本要求》标准,分析了政务云上信息系统所面临的安全风险,提出在政务云上通过集约化的方式建设密码资源池的方式,为云上信息系统提供加密、认证等手段,确保了云上信息系统的数据传输存储的安全,能有效地加以防范和应对,从而为政府机构提供一个更加稳健的政务服务平台。In order to ensure security requirements of information systems on the government cloud,such as the confidentiality,integrity and authenticity,in accordance with the standard GB/T 39786—2021"Information security technology-Baseline for information system cryptography application",this paper analyzes the security risks faced by information systems on the government cloud,and proposes the construction of a password resource pool through intensive methods on the government cloud to provide encryption,authentication and other means for cloud information systems,ensuring the security of data transmission and storage of cloud information systems.It can effectively prevent and respond to them,thus providing a more robust government service platform for government agencies.

关 键 词：商用密码 密码资源池 政务云 信息安全 GB/T 39786—2021 

分 类 号：D63[政治法律—政治学] TP309[政治法律—中外政治制度]