基于量子密码技术的电子档案离线状态下安全防护实现

Implementation of electronic archives offline security protection based on quantum cryptography

随着数字档案馆(室)系统及数字资源建设的不断深入,我们在享受电子档案应用管理过程中所带来便利的同时,也面对着重要数据、集约数据的信息安全隐患。档案系统所面向的用户群体较为多元,如业务人员、调档请求人员、信息维护人员、临时访问授权人员等,且业务分类也多有不同,如授权访问、授权流转、授权打印、授权刻录等。此外,虽然目前很多单位已实施网络安全等级保护,但对于电子档案下载后离线状态时的安全问题并未得到有效解决,离线后非法复制、非法传阅、非授权访问控制等问题无法从电子档案系统本身及管理体制进行制约管控。本文介绍了与档案系统深度集成、以保护终端数据为主要目的电子文件安全保护子系统工作原理,采用了量子密码技术针对上述问题设计出可行的电子文件离线状态安全解决方案,并在蒲洁能化数字档案馆建设中进行了具体实践。

With the continuous deepening of the construction of digital archives(office)system and digital resources,while enjoying the convenience brought by the application and management of electronic archives,we are also facing the information security risks of important data and intensive data.The user groups targeted by the archive system are relatively diverse,such as business personnel,file transfer requesters,information maintenance personnel,temporary access authorization personnel,etc.,and the business classification is also different,such as authorized access,authorized circulation,authorized printing,authorized recording,etc.In addition,although many units have implemented network security level protection at present,the security problems in offline state after downloading electronic archives have not been effectively solved.The problems of illegal copying,illegal circulation,unauthorized access control after offline cannot be controlled from the electronic archives system itself and management system.This paper introduces the working principle of the electronic file security protection subsystem,which is deeply integrated with the archive system and aims at protecting the terminal data.It uses quantum cryptography technology to design a feasible offline security solution for the electronic file against the above problems,and has carried out concrete practice in the construction of Pujie Energy Digital Archives.