商用密码算法在政务服务一体化系统中的应用

Application of Commercial Cryptographic Algorithm in Government Affairs Service Integration System

基于商用密码应用安全性评估相关要求,对广东省卫生健康委正在建设的政务服务一体化系统密码算法应用现状和应用需求进行分析,探讨政务服务一体化系统中商用密码应用总体架构,并从物理环境安全建设、密码算法替代、身份鉴别、安全加密通道、数据存储机密性与完整性保护、密钥管理,以及安全管理体系建设等方面,阐述了政务服务一体化系统商用密码应用的具体建设内容、应用场景和工作流程,为商用密码算法在政务服务一体化系统中的应用与治理提供参考。

Based on the relevant requirements of the application security assessments of commercial cryptography algorithm,this paper analyzes the application status and application demand of the cryptography algorithm in the government affairs service integration system under construction of Health Commission of Guangdong Province. It discusses the overall architecture of the commercial cryptography algorithm in the government affairs service integration system, expounds the specific construction content,application scenario and workflow of commercial cryptography algorithm in the government service integration system from the aspects of the security construction of physical environment, substitution of cryptography algorithms,identity authentication, secure encryption channels,data storage confidentiality protection,data storage integrity protection and construction of security management system, so as to provide reference forthe application and governance of the commercial cryptography algorithm in the government affairs service integration system.