云计算下的轨道交通信息系统数据安全

Data Security of Rail Transit Information System under Cloud Computing

轨道交通信息系统作为城市公共交通的重要信息基础设施,其数据安全是网络空间安全的基础,是国家安全的重要组成部分,其重要性已经引起政府部门和企事业单位的重视。而云平台化的轨道交通运营在为数据传输、计算服务、生产管理带来便利的同时,也为乘客及企业信息安全带来巨大隐患。本文通过分析云计算下轨道交通信息系统的数据安全所面临的挑战、关键技术、威胁来源,对照国家网络安全和数据安全法律法规及轨道交通行业相关要求,结合传统和云计算环境下的数据安全痛点,提出了围绕数据全生命周期的六步防护措施,并对宁波轨道交通提出系统化的应对措施和解决方案,制定相关标准和实施办法。

As a fundamental information infrastructure of the urban public transport network,the rail transit information system(RTIS)is highly important in maintaining the state security and the security of data and internet.The data security problem of RTIS has attracted attentions from the government and connected businesses.With the help of cloud platforms and cloud computing,convenience has been brought to the daily transition of data,computing services,and production management of rail transit operations.However,risks come along with benefits to the security of passenger and business information.According to the national laws and regulations on the internet and data security of rail transit industry,this work discusses main challenges,key technologies,main threats for the data security of RTIS,and proposes a six-step protection solution based on the lifecycle of data in RTIS.Finally,the solution is systematically implemented on the rail transit system of Ningbo with new standards and detailed approaches.