基于商用密码应用的不动产统一登记信息系统建设及思考——以宁夏回族自治区为例

Construction and thinking of unified real estate registration information system based on commercial encryption application:a case study of Ningxia Hui Autonomous Region

宁夏不动产统一登记信息系统是全国第一批“省级大集中”建设的不动产登记信息系统,随着数据的不断汇集,数据存储和网络传输存在大量的个人隐私数据泄露风险及网络非法入侵风险。本文探讨了基于商用密码应用的信息系统改造,从信息系统密码应用基本要求进行安全风险分析,总结了技术框架、系统架构及部署方案。最终所建设的信息系统通过了商用密码应用安全性评估,实现不动产登记信息在互联网、电子政务外网及自然资源业务专网3套网络中加密传输及应用,对提高系统信息安全风险防范能力、保护人民群众不动产信息安全具有重要意义。

Ningxia unified real estate registration information system is the first"provincial-level centralized"construction of real estate registration information system throughout the country.However,as a carrier of business handling of real estate registration in Ningxia,there are a lot of risks of personal privacy data exposure and illegal network intrusion in its data storage and network transmission.By exploring the application and reform of commercial password in the system and analyzing the security risk from the basic requirements of information system password application,this paper summarizes the technical framework,system architecture and deployment scheme.Finally the constructed information system has passed the security assessment for commercial password applications and the encryption transmission and application of real estate registration information in three networks:Internet,e-government extranet and natural resources business private network have been realized.It makes a great difference in improving risk prevention ability of the system information as well as effectively protecting people's real estate information security.