面向SaaS的商用密码统一服务平台设计

Design of SaaS-oriented Commercial Cryptographic Algorithm Comprehensive Service Platform

文章提出一种面向SaaS的商用密码统一服务平台设计方案。通过该方案构建的平台,实现高度整合统一的密码资源,直接面向移动信息系统业务应用场景,提供统一的用户管理、统一身份认证、统一的密码规范、密码运算接口和密码运维管理等全面的密码业务支撑服务,支持移动信息系统基于商密算法的安全升级,满足信息系统的商用密码应用、安全性标准要求和政策要求。

This paper proposes a design scheme of SaaS-oriented commercial cryptographic algorithm comprehensive service platform. Through the platform constructed by the scheme, the highly integrated and unified cryptographic resources are realized,which directly face the mobile information system business application scenarios and provide comprehensive cryptographic support services such as unified user management, unified identity authentication, unified cryptographic specification, cryptographic operation interface and cryptographic operation and maintenance management to support the security upgrade of mobile information system based on commercial cryptographic algorithm, meet the requirements of commercial cryptographic application and security standards and policies of information system.