互联网标识隐私保护政策及技术研究

Overview on Privacy Policy and Technology of Internet Identifier

互联网标识是互联网中识别和管理物品、信息、机器的关键基础资源,是互联网运行和发展的重要基础.在将个人信息与基础资源对应标识的过程中,也存在个人信息泄露的重大安全隐患.目前欧盟《通用数据保护条例》(GDPR)、《中华人民共和国网络安全法》等隐私保护法律的出台,对个人信息安全保护提出了更严格的要求.本文首先结合隐私政策法律条例,以典型的互联网标识——域名为切入点,深入分析互联网标识业务流程中的隐私风险点;接着结合数据生命周期的不同隐私保护需求,提出了域名信息在发布、存储、挖掘、使用各环节的隐私保护技术框架;最后针对每种互联网标识数据生命周期,提出具体隐私保护技术解决方案.

Internet identifier is the key resource for identifying and managing goods,information and machines in the Internet.It is an important basis for the operation and development of the Internet.In the process of correspondingly identifying personal information and basic resources,there are also major security risks of personal information leakage.At present,the introduction of privacy protection laws such as the GDPR and the Cyber Security Law of the People’s Republic of China imposes stricter requirements on the protection of personal information.This study first analyzes the privacy risk of the Internet identifier and discusses the challenges of personal privacy protection;then uses the typical Internet identifier-domain name as an example to deeply analyze the privacy risk in the Internet identifier service process.Combining the different privacy protection needs of the data life cycle,the Internet identifier privacy protection technology framework for the publication,storage,mining and use is proposed.Finally,specific privacy protection technology solutions are proposed for each kinds of Internet identifier data life cycle.