摘要
本文针对商用密码在信息系统中的应用现状及问题,从环境、业务和管理3个方面对密码应用需求进行了分析,并对相应的商用密码应用改进策略进行了研究。通过以环境安全为基础、以业务安全为导向,以安全管理为保障,实现密码应用的合规性,构建起网络安全的纵深防御体系,进而提升密码应用能力。
This paper analyzed the requirements of cryptography application from three aspects of environment,business and management,and studied the corresponding improvement strategies of the commercial cryptography application.Based on environmental security,guided by business security and guaranteed by security management,the compliance of cryptography application is realized,and the deep defense system of network security is built,thus the cryptography application ability is improved.
作者
马爱良
彭华熹
张艳
张杨
何申
MA Ai-liang;PENG Hua-xi;ZHANG Yan;ZHANG Yang;HE Shen(China Mobile Research Institute,Beijing 100032,China)
出处
《电信工程技术与标准化》
2021年第12期22-26,共5页
Telecom Engineering Technics and Standardization
关键词
商用密码
密码应用
密码部署
信息系统安全
commercial cryptography
cryptography application
cryptography deployment
information system security
