CIPF - yintoni na le nto? indlela lokufihla yokuvikela ulwazi

Igama elithi "zokufihlakeleyoComment 'ivela kwigama lesiGrike elithi' efihlakeleyo" yaye "nokubhala." Ibinzana aveza njongo ephambili yolu zokufihlakeleyoComment - kukho ukhuseleko nokuhlala kuyimfihlo kwamaphepha emibuzo ukwaziswa. Ukukhusela ulwazi kungathatha indawo ngeendlela ezahlukahlukeneyo. Ngokomzekelo, xa umda ufikelelo ngokwasemzimbeni kwidata ngokufihla transmission channel, ukudala iingxaki emzimbeni eqhagamshelwe imigca unxibelelwano njalo njalo. D.

Injongo zokufihlakeleyoComment

Ngokungafaniyo kwiindlela zakudala zokufihlakeleyoComment, zokufihlakeleyoComment iquka ukufumaneka ngokupheleleyo umjelo isilumkiso imigewu yaye iqinisekisa nemfihlo nenyani ulwazi ngokusebenzisa ubuchule ufihlo ezenza ulwazi ingafikeleleki ekufundeni engagunyaziswanga. inkqubo yokhuseleko Modern lokufihla (CPS) - inkqubo yekhompyutha software-hardware esibonelela ukhuselo ulwazi olulandelayo parameters.

• Ubumfihlo - ukungakwazi ukufunda ulwazi ngabantu Awunamalungelo ezifanelekileyo ukufikelela. Icandelo iphambili ngokubonelela imfihlo iqhosha CIPF (key), nto leyo ulandelelwano Iweziganeko alpha-yamanani ukuba umsebenzisi ukufikelela ibhloko CIPF ethile.
• Ingqibelelo - nakwenzeka zotshintsho olungagunyaziswanga, ezifana ukuhlela ulwazi kususwa. Ukuze oku ifakwe kwingcaciso komsebenzi original ngohlobo ipateni test, ayinakubalwa algorithm incazelo kwaye ngokuxhomekeke isitshixo. Ngaloo ndlela, ngaphandle ulwazi isitshixo ukudibanisa okanye ukutshintsha iinkcukacha kube nzima.
• Lwephaswedi - ububhali bolwazi, kwaye amaqela ngokuthumela yayo kunye nokufumana. ulwazi ayihambi ngokusebenzisa amajelo onxibelelwano kufuneka ngokukodwa afuneka umxholo, ixesha kwendalo kunye transmission imvelaphi umamkeli. Kufuneka kukhunjulwe ukuba umthombo ngezisongelo kuphela kuba umhlaseli, kodwa amaqela abandakanyekayo ngokutshintshiselana ngolwazi kunye ukuthembana kancinane. Ukuze kungavimbela isimo esinjalo isebenzisa i-CPS timestamps nkqubo kukungakwazi kwakhona reference okanye ulwazi ingxelo, kwaye utshintshe umyalelo ngokulandelelana kwayo.

• Umqambi - proof and non-ukulahla izinto eyenziwa yi ulwazi lomsebenzisi le. Eyona ndlela iqhelekileyo ukuqinisekisa ke yogesi lwedijithali (EDS). inkqubo EDS iqulathe ubuchule ezimbini: a indalo utyikityo nokuqinisekiswa. Nokusebenzisa onzima ECC Kucetyiswa ukusetyenziswa kwamaziko kwezatifiketi software indalo kunye nolawulo zasayinwa. La maziko kufuneka luzalisekiswe njengoko umntu ozimeleyo ngokupheleleyo iindlela isakhiwo CIPF lwangaphakathi. Kuthetha ntoni oku kuthetha ukuba lo mbutho? Oku kuthetha ukuba zonke iintengiselwano zilungiswa kunye lotyikityo ngekhompyutha eqinisekisiweyo yimibutho ezizimeleyo kunye ngomgunyathi wombhali ngathi akunakwenzeka.

ubuchule ufihlo

Ukuza kuthi ga ngoku, phakathi CIPF esilawulwa Encryption evulekileyo ngokusebenzisa amaqhosha twatsa kwaye yezi kunye ubude ngokwaneleyo ukubonelela yobumbaxa cryptographic ezifunekayo. Ubuchule ezixhaphakileyo:

• keys twatsa - Russian P-28147.89, AES, ezintlantlu, RC4;
• keys yezi - Afrika;
• esebenzisa umsebenzi hashi - P-34.11.94, MD4 / 5/6, SHA-1/2.

Amazwe amaninzi eyabo yesizwe ubuchule encryption. EUnited States yasebenzisa AES algorithm kwafakwa ubude angundoqo 128-256 amasuntswana kunye RF lotyikityo elektroniki algorithm P-34.10.2001 kunye block algorithm incazelo P 28147,89 kunye iqhosha bit-256. Ezinye izinto iinkqubo zesizwe lokufihla abavumelekanga ukuba ithunyelwe ngaphandle kweli lizwe, imizamo yokuphuhlisa CIPF zifuna mvume.

inkqubo encryption Hardware

CIPF hardware - lo zecebo elibonakalayo, equlethe i-software encryption, ukurekhodwa kunye nokusasazwa kolwazi. izixhobo ufihlo kuba ngohlobo izixhobo zakho, ezifana USB-encoders ruToken kunye IronKey flash drives, iibhodi ukwandiswa we computers zobuqu, itshintshela womnatha ezizodwa kunye imizila, ngokusekelwe apho kunokwenzeka khona ukuba ukwakha uthungelwano lwekhompyutha ekhuselekileyo ngokupheleleyo.

Hardware CIPF ngokukhawuleza ifakiwe kwaye usetyenziswa ngesantya esiphezulu. Ilishwa - eliphezulu xa kuthelekiswa ne-software and firmware CIPF, iindleko kunye umda ukhetho nokuphuculwa.

Kwakhona, i yentsimbi kuquka iyunithi CPS yakhelwe ezahlukeneyo izixhobo zokurekhoda kunye iinkcukacha ezifuna encryption ukufikelela umda ulwazi. Ezi zixhobo ziquka tachometers izithuthi, ukulungisa imida zezithuthi, ezinye iintlobo izixhobo zonyango, njl Ukugqibezela umsebenzi kwiinkqubo ezifana kufuna ukusebenza eyahlukileyo lomthumeli imodyuli CPS specialist.

System software ye crypto

CPS software - ipasile software esikhethekileyo encryption data kwi wogcino (nzima flash drives, memory amakhadi, CD / DVD) nangokusulela nge-intanethi (e-mail, iifayile, attachments, amagumbi chat ekhuselekileyo, njalo njalo). Kukho iinkqubo ezininzi, xa Vol. H. Free, umzekelo, i-DiskCryptor. Kuba software CPS kwakhona ziquka uthungelwano ekhuselekileyo virtual ukwabelana ngolwazi, ukusebenza "ngaphezulu kwe Internet» (VPN), ukwandiswa HTTP Internet protocol kunye HTTP encryption SSL - icryptographic transfer ulwazi protocol, lisetyenziswa kwi IP-zeefoni kunye izicelo Internet neenkqubo.

software CPS busetyenziswa kakhulu kwi Internet, kwiikhompyutha zabo zasemakhaya kunye nakwezinye iindawo apho iimfuno zendlela ukuze isebenze kwaye ihlala azikho phezulu kakhulu. Okanye njengoko kunjalo kwi Internet, ngexesha xa kufuneka udale iintlobo ngeentlobo ngothungelwano olukhuselekileyo.

I-hardware ne-software ze crypto

Luhlanganisa imisebenzi engcono kwiimeko-hardware kunye neenkqubo software CIPF. Le yeyona ndlela inokuthenjwa kwaye esebenza ukuyila iinkqubo ekhuselekileyo kunye nothungelwano data. Ixhasa zonke iinguqulelo ze uqinisekiso lomsebenzisi, njengoko yentsimbi (USB-isitshixo okanye smart card) kunye "zemveli" - igama lomsebenzisi kunye negama lokugqitha. firmware CIPF ixhasa zonke ubuchule yangoku ufihlo, yokuba neseti eninzi iimpawu lokudala yogesi ekhuselekileyo uxwebhu-based, zonke iziqinisekiso karhulumente ezifunekayo. Ufakelo lwenziwa yi intonga umqambi CIPF abaqeqeshiweyo.

"Ye crypto-PRO» inkampani

Enye iinkokeli imarike Russian lokufihla. Le nkampani ukuphuhlisa uluhlu olupheleleyo iinkqubo zokhuseleko iinkcukacha usebenzisa usayino lwedijithali ngokusekelwe ubuchule lokufihla ngamazwe kunye Russian.

iinkqubo Inkampani zisetyenziswa kuxwebhu ngekhompyutha kwemibutho zorhwebo kunye norhulumente yonikezelo-mali nokunika ingxelo yerhafu, kwiimeko ezahlukeneyo iinkqubo ezidolophini kunye karhulumente, njalo njalo. d. Le nkampani esikhutshwe mvume ngaphezulu kwezigidi ezi-3. CryptoPro lwecomputer CSP kunye namaphepha-mvume 700 iziqinisekiso amaziko. "Crypto-Pro" inika abaphuhlisi interfaces ngokuba yi iyalungisa izinto ukhuselo mfihlo zabo iimveliso software kwaye inika uluhlu olupheleleyo ukuya iinkonzo kulwenziwo CIPF.

Crypto crypto

Ekuphuhliseni CryptoPro CSP usebenzise indlela yokusebenza eyakhelwe-ngaphakathi Providers lokufihla Architecture lokufihla Service Windows. Sesakhiwo ikuvumela ukuba ukwazi ukuqhagamshela iimodyuli ezongezelelweyo ezimeleyo ukuba asebenzise ubuchule efunekayo encryption. Ukusebenzisa iimodyuli kuveliswa umsebenzi semawusi, ukhuseleko incazelo unako ukwenza zombini software kunye CIPF zekhompyutha.

keys media

Ezahlukeneyo zingasetyenziswa njenge labucala iqhosha hardware, ezifana:

• amakhadi smart kunye nabafundi;
• izitshixo electronic and readers zokusebenza izixhobo Touch Inkumbulo;
• ezahlukeneyo USB-izitshixo kunye kumphati USB-drives;
• iifayile irejistri Windows, Solaris, Linux.

imisebenzi lokufihla

CryptoPro CSP FAGCI eqinisekisiweyo ngokupheleleyo kwaye zingasetyenziswa:

1. Ukuqinisekisa ukusebenza kunye ugunyaziso yamaxwebhu elektroniki ekuyileni ukuqinisekiswa yogesi ngokuhambelana nemigangatho Russian ukubethela.

2. Gcwalisa uyimfihlo, ukuchana, ukuthembeka kunye ngedatha zofihlo kwaye nokukhuselwa imitative ngokuvisisana nemilinganiselo encryption Russian and TLS protocol.

3. Ukuhlolwa esweni ukuthembeka kwenkqubo ikhowudi ukunqanda ukuba kungangeni nabani kunye notshintsho.

4. Ukudala inkqubo ummiselo yokhuseleko.