摘要
商业银行特别是大型商业银行信息系统是国家重要的关键信息基础设施,密码技术的应用对信息保护至关重要.传统信息系统各自建设密码服务功能,存在重复建设、专业性差、维护成本高、易出现安全隐患等问题.企业级密码服务平台是在商业银行信息安全架构实践基础上,运用SOA技术,将密码服务从各应用系统中解耦,实现密码服务功能的组件化、标准化、智能化和参数化,为企业所有信息系统提供组件式密码服务,提高应用系统开发效率,有力保障商业银行网络和信息系统安全.
The information system of commercial banks,especially large-scale commercial banks,is an important information infrastructure of the country,and the application of cryptography is vital to information protection.The traditional information system has its own function of cryptography service,which has problems such as repetitive construction,poor professional performance,high maintenance cost and security risks.Enterprise cryptography service platform is based on the practice of commercial bank information security architecture>uses SOA techniques to decouple the cryptography service from each application system,and realizes the componentization,standardization,intelligence and parameterization of the cryptography service function.Enterprise cryptography service platform provides component cryptography services for all enterprise information systems,and ensures the safety of the network and information system of commercial banks.
作者
郭汉利
张辉
李爱宏
Guo Hanli;Zhang Hui;Li Aihong(China Construction Bank Department of Information Technology Management, Beijing 100033)
出处
《信息安全研究》
2017年第10期917-921,共5页
Journal of Information Security Research
关键词
商业银行
密码技术
组件化
密码管理中心
安全代理
安全服务
commercial bank
cryptography
modulization
key management center
security agent
security service