工业互联网商用密码应用体系研究  

Research on Industrial Internet Commercial Cryptography Application System

作　　者：王伟忠 闫瑞泽 查奇文 王聪 Wang Weizhong;Yan Ruize;Zha Qiwen;Wang Cong(China Academy of Industrial Internet,Beijing 100102)

机构地区：[1]中国工业互联网研究院,北京100102

出　　处：《信息安全研究》2024年第6期519-525,共7页Journal of Information Security Research

基　　金：工信部2021年产业技术基础公共服务平台项目(2021-H026-1-1)。

摘　　要：工业互联网是新型基础设施建设的重要组成部分,商用密码是保障工业互联网安全的核心技术和基础支撑.研究并分析了工业互联网安全风险和商用密码应用需求,从技术、管理、测评3个维度构建了工业互联网商用密码应用体系.基于工业互联网商用密码应用体系,可形成商用密码在工业互联网应用时“如何建、如何用、如何管、如何评”的体系化解决方案,对持续提升工业互联网基于商用密码技术的内生安全保障能力和创新能力,推动工业化与信息化在更广范围、更深程度、更高水平上实现融合发展,具有重要借鉴意义.The Industrial Internet is an important component of new infrastructure construction,and commercial cryptography is the core technology and basic support for Industrial Internet security.This paper studies and analyzes the security risks associated with the Industrial Internet and the application requirements for commercial cryptography,and constructs an industrial Internet commercial cryptography application system from three dimensions:technology,management and evaluation.Based on the Industrial Internet commercial cryptography application system,it can form a systematic solution of“how to build,use,manage,and evaluate”commercial cryptography in the Industrial Internet applications,which has important reference significance for continuously improving the endogenous security and innovation capabilities of the Industrial Internet based on commercial cryptography technology.It is of great significance to promote the integrated development of industrialization and informatization across a wider scope,deeper extent,and a higher level.

关 键 词：工业互联网 商用密码应用体系 商用密码应用技术 商用密码应用管理 商用密码应用测评 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393.09[自动化与计算机技术—计算机科学与技术] TN918.1[电子电信—通信与信息系统]