中国电信商密云核心架构及发展探讨

Discussions on Core Architecture and Development of China Telecom's Commercial Cipher Cloud

介绍了云平台应用存在的用户信息滥用、隐私泄露等潜在安全风险,提出了合理运用国家商用密码算法是提高云计算应用安全、增强云计算使用者使用信心的重要手段。通过阐述密码技术、商密技术与云安全的关系,提出了发展商密云的安全理念,分析了中国电信基于国家商用密码算法的商密云安全平台及应用服务体系,从打造商密云产业链、推动国家商用密码产业发展、提升国家整体信息安全水平等方面探讨了中国商密云发展的策略。

This paper describes the security risks existing in cloud platform application. It proposes that the rational use of national commercial cryptographic algorithms is an important means to improve the cloud computing application security and enhance the confidence of cloud computing users. Through explanation of the relationship among between cryptographic technique,business secret technology,cloud security,it gives the safety concept of commercial cipher cloud,analyzes China Telecom＇s commercial cipher cloud platform and application service system based on national commercial cipher algorithm,discusses the development strategy of China＇s commercial cipher cloud from several aspects of building up the commercial cipher cloud industrial chain,promoting the development of national commercial cipher industry,and enhancing the level of China＇s information security.