密码评估视角下的信息系统密码应用改造

Transformation of Password Application in Information System Based on Password Evaluation

为进一步增强国家信息安全、推动核心技术国产化,加快对信息系统的密码应用的改造是十分必要的。基于商用密码应用安全性评估以及国家的相关法律法规文件的要求,本文总结了目前信息系统建设过程中,密码应用改造中常见的问题,并从通用要求、密码技术应用要求和安全管理要求三方面提出了改进建议。这些建议能为有效增强信息系统的密码应用安全性提供参考。

In order to further enhance the national information security and promote the localization of core technologies,it is very necessary to speed up the transformation of the password application of the information system.Based on the security evaluation of commercial password application and the requirements of relevant national laws and regulations,this paper summarizes the common problems in the password application transformation in the current information system construction process,and puts forward improvement suggestions from three aspects:General requirements,password technology application requirements and security management requirements.These suggestions can provide a reference for effectively enhancing the security of password application in information system.