统一密钥支撑体系的研究

Research on Unified Key Support System

随着企业互动化、移动化和智能化业务的逐步推进,密码技术作为业务信息安全保护的核心内容越来越重要,但由于业务系统所采用的密码算法及应用模式的不同,通常企业存在多种多样的密钥管理系统,导致密钥资源无法有效快速利用,缺少统一的密钥监控和保护措施。文中介绍的统一密钥支撑体系以密钥管理PDCA为模型,从密钥管理体系及标准,密钥监控与分析系统和密钥安全性检测平台出发构建层次化的体系架构,规范业务系统密码技术的使用方式和流程,完善密钥全生命周期安全管控措施,建立业务系统标准化、通用和统一的密钥检测和评价体系,消除密码应用的安全隐患,保障密钥的安全、可靠以及高效使用,提升企业密钥管理水平。

With the interactive,mobile and intelligent business step by step,password security protection technology as the core content of business information is becoming more and more important,but because the password algorithm and application mode adopted by business system is different,usually enterprise key management system varied,leading to key resources cannot effectively use,lack of key monito-ring and protection measures unified. Unified key support system introduced takes key management PDCA as the model,starting from the key management system and standard,architecture of key monitoring and analysis system and the key safety detection platform construct the hierarchical system,specifying the cryptography application system using methods and processes,improving key lifecycle safety man-agement measures,establishing business system standardization,universal and unified key detection and evaluation system,removing the password application security hidden danger,ensuring the key safe,reliable,and efficient use,enhancing the enterprise key management level.