Kumvetsa Kulemba Malemba m’Chiairishi

Kulemba mawu olembedwa pamanja ndi chilolezo cha maziko a chitetezo chimene chimasintha mawu osavuta kumva kukhala olembedwa mozungulira pogwiritsa ntchito maajensi. Mabungwe ogwira ntchito ku Ireland, kulembedwa mawu ophiphiritsa si kuteteza kwa luso chabe koma ndi lamulo lofunikira pansi pa General Data Protection Regation (GDPR) ndi Irish Data Protection Act 2018. Bungwe la Irish Data Protection Commission (DPC) lakhala likugogomezera nthaŵi zonse kuti kulembedwa kwa mawu olembedwa ndi chinsinsi ndi “mayendedwe oyenera [1] kuteteza chidziŵitso cha munthu mwini, ndipo kusapezeka kwake kungatsogolere ku zovala ndi kusungitsa.

Kulemba mawu kumateteza zinthu zitatu zoyambirira: Kupuma (zolembedwa pa maseŵero, masewero, malo ofufuzira mfundo), m'njira (zotsatira), ndi pogwiritsira ntchito (zotsatira). Pamene kuli kwakuti kumasulira kofikiriridwa kwa pamapeto ndi m'njira kumakhazikitsidwa bwino, kulembedwa kolembedwa motsatirapo kukupitirizabe. Mabungwe ambiri a ku Ireland, ayamba kulemba mawu olembedwa pamanja atakhala pansi ndipo potumiza akugwiritsa ntchito mphamvu, zitsimikiziro za maziko a maziko a kulembera kwa ma pulogalamu.

Ntchito Yomanga ndi Yokonza Zinthu ku Ireland

Zofunika za GDPR Kuti Ulembe

Mfundo 32 ya GDPR imalamula kuti oyang'anira ndi okonza zinthu agwiritse ntchito njira zoyenerera ndi zoyendera za gulu kutsimikizira mlingo wa chisungiko woyenerera ku ngozi. Kulemba kumatchulidwa bwino monga myeso umodzi wotero, limodzi ndi kupeka, kusunga, kukhulupirika, kupezeka, ndi kulimba kwa njira zoyendera. Malangizo a DPC pa “Kusungika kwa Sayansi Yaumwini ” amagogomezera kuti kulembedwa kwa mawu kuyenera kugwiritsiridwa ntchito pokhapokha ngati kufufuza kolembedwa kolembedwa molembedwa motsimikizirika kumasonyeza kuti njira zina zotetezera zimapereka chitetezo chofanana ndi zimenezo.

Pansi pa Mfundo 33, kusokonezeka kwa makompyuta kuyenera kudziŵitsidwa ku DPC m'maola 72 ngati imabweretsa ngozi kwa anthu. Komabe, ngati mfundozo zinatsekeredwa ndi malamulo amphamvu ndipo makiyi sanasinthidwe, kuswa sikungafunikire chidziŵitso chifukwa chakuti chidziŵitsocho nchosamveka kwa zipani zopanda lamulo. Zimenezi zimagogomezera kufunika kwa lamulo la kulembedwa kwa mawu olembedwa motsatira malamulo monga kuchepetsa ulamuliro.

Ntchito Yoteteza Moyo wa Anthu ya mu 2018

Desert ya Ireland’s Data Protection Act 2018 yowonjezera GDPR ndi makonzedwe enieni a kusungitsa lamulo, mathero a zaumoyo, ndi ntchito za DPC. Ngakhale kuti siikuwonjezera zofunika zatsopano zolembedwa, imatsimikizira mfundo yakuti njira za chitetezo ziyenera kuikidwa molingana ndi kulembedwa. Mabungwe opanga zinthu zapadera za chidziŵitso (m., thanzi, maselo, mediageodition system) ayenera kugwiritsa ntchito kulembedwa molakwika.

ePrivacy ndi Kulankhulana ndi Anthu

Kwa makampani a foni ndi magetsi ku Ireland, ePrivacy Directive (kutembenuzidwa kudzera ku S.I. No. 336/2011) imafunikira kulembedwa kwa tsatanetsatane wa zolankhulana. Zimenezi zimaphatikizapo kuimbirana mawu, ma-imeyili, ndi kutumiza mauthenga. DPC ndi ComReg afalitsa pamodzi malangizo a chitetezo, kuphatikizapo zofunika zolemba mawu kwa ogwiritsa ntchito intaneti.

Kudziŵa ndi Kusiyanitsa Zinthu

Asanagwiritse ntchito kumasulira kope, mabungwe ayenera kuŵerengera zinthu zawo. Kusankha zinthu pa kaundula kuyenera kutchula mfundo zogwirizana ndi: anthu onse, za mkati, zachinsinsi, kapena zoletsedwa. Ku Ireland, mfundo za munthu aliyense (zonse zimene zimatchula munthu wamoyo) ziyenera kuonedwa ngati chinsinsi. Zigawo zapadera za data ya munthu (zachikhalidwe, zikhulupiriro zachipembedzo, zikhulupiriro za ndale, ndi zinanso) zimavomereza mlingo wapamwamba wa chitetezo, makamaka kumasulira kwa chidziŵitso cha AES-256 pa mpukutu ndi TLS 1.

Malo osungiramo zinthu n’ngofunika kwambiri. Chikalata chimene chimatumizako zinthu: kuyambira pa zosonkhanitsidwa za makasitomala kufika ku madongosolo a CRM, maseŵero olemba mailo, ndi thulusi. Malo alionse osungiramo zinthu afunika kulembedwa. DPC imayembekezera kuti mabungwe asungenso Chikalata chamakono cha Procesting Activities (ROPA) chomwe chimaphatikizapo kulembedwa mwatsatanetsatane kaamba ka cholinga chilichonse chokonza.

Malamulo a Chikalata ndi Miyezo

Malamulo Amphamvu Oikira Chinsinsi

Kwa olemba ena, Adversity Sound Standard (AES) yokhala ndi makiyi 256 ndi muyezo wa golidi. AES-256 amavomerezedwa ndi National Security Agency (NSA) ya chidziŵitso chachinsinsi ndipo imachirikizidwa kwambiri m'ziwiri ndi pulogalamu yamakono. Madongosolo amwambo amene AES sapezeka, Triple DES (ADES) ndi ovomerezekabe koma ayenera kuchotsedwa. Peŵani kuchotsa maalamu monga DES, RC4, kapena MD5 kuti mukhale pulogalamu.

Kufufuza mu trams , Transport Lamps Security (TLS) ndi njira yamakono yovomerezeka. TLS 1.2 idakali yovomerezeka koma iyenera kukonzedwa ndi suti yolimba yofufuzira komanso yoiimira bwino kutsogolo. Mabungwe a BLS 1.0 ndi 1.1 chifukwa cha kudziŵika monga POODLE ndi ENA. Irish National Cyber Security Center (NCSCC) imalimbikitsa kugwiritsira ntchito TLS 1.2 kapena kuposa pa mawero onse ogwiritsa ntchito zinthu zaumwini.

Kulembedwa Kothera Kumapeto

Kwa kugawana makalata ndi mafaelo, kuwonjezera ku kulembedwa (E2EE) kumatsimikizira kuti wolandira yekha ndi amene angalembetse chidziŵitsocho. Makampani ozikidwa pa Ireland ndi a zaumoyo amagwiritsira ntchito E2EE pomaimira anthu odwala, ma appoto a ku banki, ndi makampani achinsinsi. Kutumiza kuyenera kugwiritsira ntchito malaibulale ovuta kwambiri monga OpenSSL, Bouncic Castle, kapena Libsodium.

Kulemba Malemba Mwachinsinsi

Kulemba pa Disiki Kwambiri (FDE)

Malaptop onse, madesktop, ndi mafoni a m'manja amene antchito ku Ireland amagwiritsa ntchito ayenera kukhala ndi mawu onse olembedwa pa disiki ovomerezeka. Mafoni onse amathandiza kuti zinthu zizilembedwa bwino. Mafoni a m'manja asakhale ndi dzina lovomerezeka.

Chikalata Cholembedwa m’Chitaganya cha Zulu

Madataibulale okhala ndi mfundo zaumwini ayenera kulembedwa mobisa pa mlingo wa pulogalamu ya mu ifayi (kulembedwa kwa dzina la pulogalamu yooneka ngati yolembedwa pamanja) kapena pa ndandanda ya mapulogalamu apadera. Microsoft SQL Server, MLOGO, ndi PostgreSQL zonse . Mabungwe a ku Ireland ayenera kutsimikizira kuti makiyi a mtambo amasunga mayeeto omasulira mawu m'EU kapena m'manja a GDPR, Azore SQL , Google Claf SQL , logwiritsa ntchito makiyilo a makito kapena makiyilo oyendetsedwa ndi woyang'anira. Mabungwe a ku Ireland ayenera kutsimikizira kuti asunge makizidwa a m'mapepala oyenera a GDR kapena a GPR

Kufufuza Mafayi ndi Kaye wa Kugwiritsa Ntchito

Kwa maseŵero a mafaira onse ndi kusungidwa kwa mtambo (m'jereng'ono, OneDrive, Google Coclation), amatheketsa kumasulira kopekera pa nthawi yopuma ndi kugwiritsa ntchito malamulo a anthu. Kulemba pa kompyuta kwapamwamba kumalola kuyendetsa motsatira mfundo za m'Baibulo: Mwachitsanzo, kusindikiza minda ina mu pulogalamu monga manambala a paspotipopu kapena mbiri ya zamankhwala. Kutero kumachepetsa kumasuka ngati pulogalamu ya pansi pa pulogalamu ya zamankhwala yawonongeka.

Kunenera Kumbuyo Kusintha

Kuyenda kwa anthu onse okhala ndi chinsinsi chaumwini kuyenera kulembedwa mobisa. Izi zimaphatikizapo kuyendetsa galimoto pakati pa olemba mabwana m'malo a kampani ya yunivesite. Pamene kuli kwakuti GDPR sifuna kulembedwa molunjika m'mizere yachinsinsi, lamulo la kuchepetsa madata ndi kuopsa kwa kuopseza kwa m'm'm'midzi kutsutsana nawo. GPSEPT SOUTS ya makompyuta ndi SSH poyang'anira. Zitsanzo za Web, HTTPS ndi mitukwana ya HSTS ndi kulandirira zikalata zodalirika kuchokera kwa Magudulo a `Active, Global Global, kapena DigiCert.

Kulemba mawu a pa intaneti n’kofunika kwambiri makamaka kwa makampani a ku Ireland omwe ali ndi chidziŵitso cha makasitomala. Gwiritsani S/MIME kapena PGP pokopera mawu a m'makalata, ndipo mufune TLS polumikizana ndi SMTP (STRTTLS). Makampani ambiri a ntchito zaumoyo (magalamu, auchigawenga, audoko) tsopano amagwiritsira ntchito madoko a chitetezo cha mapepala posinthana makope m’malo mwa makope a mamesewero.

Kuyang’anira Kofunika Koposa

Kulemba ndi mphamvu kwambiri ngati njira yoyendetsera zinthu. DPC imayembekezera kuti mabungwe akhale ndi njira yolembedwa yoyendetsera zinthu zofunika kwambiri monga mbadwo, kusunga, kusintha, kugwiritsa ntchito, ndi kuwononga. Machitidwe abwino kwambiri amaphatikizapo:

  • Separate sunga mfungulo zachinsinsi: Tsungani makiyi owonjezera mu Chikwangwani cha ezamalonda (HSM) kapena ntchito yoyang'anira mtambo (AWS KMS, Azure Key Vault, Google Clouth KMS) yolekanitsidwa ndi chidziŵitso chobisidwa. Musasunge makiyilo mu pulojekita imodzi kapena disiki imodzimodzi ndi text.
  • Kuzungulira Kkeyi: Kujambula makiyi pafupifupi chaka chilichonse kapena pamene muganiza kuti musintha mfundo zofunika. Kusinthasintha kwamphamvu pogwiritsa ntchito KMS yolinganiza.
  • Mwayi wakulowa m'zipembedzo: Kuletsa kulowa m'makiyi kwa olamulira ochepa ololedwa. Gwiritsirani ntchito ulamuliro wozikidwa pa mbali ina ndipo mufunikira chitsimikiziro cha mbali zambiri za madongosolo a malunji.
  • Kubwerera kumbuyo ndi kubwereranso kwa tsoka: [[FLT :1] Musunge makiyi olembedwa mosabisa (m' lekuatiso, mu HSM kapena kusungidwa pa malo a pa Intaneti). Popanda makiyi, ma data olembedwa molakwika amatayidwa kwamuyaya. Zosungiramo zofunika ziyenera kusungidwa ndi mlingo wofanana wa chitetezo monga makiyi amoyo.
  • Kuwononga kwakukulu: Pochotsa madongosolo, chotsani motetezereka makiyi olemba mawu ogwirizanitsidwa kupangitsa zolembedwa zosapezeka. Tsatirani zitsogozo za NSP 800-57 za chiwonongeko chachikulu.

Kulemba Malemba Kuti Mugwiritse Ntchito Nkhani Mwatsatanetsatane

Zipangizo Zoyendera M’manja ndi Ntchito Yogwira Kutali

Ndi kuchuluka kwa ntchito yakutali ndi yauve ku Ireland, kugwiritsa ntchito foni ndi tabuleti zogwiritsidwa ntchito pantchito kuyenera kukhala ndi zipangizo zogwiritsa ntchito. Chifukwa cha zimenezi, zimenezi zimatheka ndi zolembedwa zopanda kuweruzidwa. FORROid, imasiyana ndi zipangizo koma mabaibulo amakono amatsata motsatira mfundo za Mobile Screat Management (MDM) kukakamiza malamulo olembedwa ndi zipangizo zofufuzira ngati zatayika. DPC ili ndi mabungwe oyenerera kulephera kubisa zipangizo zamakono zokhala ndi mfundo zaumwini, makamaka m'chigawo cha za za zaumoyo.

Ntchito za M’mitambo

Pogwiritsira ntchito Infrapublicare-as-Service (IaS) kapena Platform-as-Service (Paas) (PaaS), mabungwe a ku Ireland ayenera kumvetsetsa chitsanzo chawo cha thayo. Msonkhani amaimira malo osungira a pansi, koma makasitomala ali ndi udindo wobisa matanthauzo awo a masamu. Gwiritsirani ntchito memo kufishi ya mbali imene ingathe kutumiza chidziŵitso ku mtambo. Software-a-Service (SAS) yonga Sasses Force kapena Ofesity, pendani kuti woperekayo amagwiritsira ntchito kulembedwa mawu olembedwa molakwika ndi m'sitima, ndi kupereka makiyikiyi osungidwa osungidwa (M) ngati akhudzidwa ndi chidziŵitso.

Kuthandiza Kupeza Zinthu Zofunika Kuziphunzira

Zotetezera kaŵirikaŵiri zimakhala ndi chidziŵitso chozindikira mofanana ndi madongosolo opanga. Ziyenera kulembedwa ponse paŵiri m'njira (kutumiza zothandizira) ndi pa kupuma (pa zoulutsira za kumbuyo). Zothandizira tape ziyenera kugwiritsira ntchito kulembedwa kwa mphamvu ya kompyuta (m., LTO8 ndi kulembedwa motsatira mawu). Zosungira za m'malemba ziyenera kugwiritsira ntchito kulembedwa motsatira mawu olembedwa bwino ndi makiyi ogwiritsidwa ntchito mosiyana. Njira zoyesera nthaŵi zonse kutsimikizira kuti zotetezera zokhalamo zobisidwa zingalembedwe mwachipambano.

Maulamuliro a Kupezeka ndi Kupima

Kulemba mawu olakwika kumataya phindu lake ngati ogwiritsa ntchito osakhala ovomerezeka apeza makiyi ounike kapena makompyuta opezeka m'njira zovomerezeka. Kugwiritsa ntchito madongosolo amphamvu ogwiritsa ntchito makompyuta onse ogwiritsa ntchito mfundo zosavuta kumva. Gwiritsirani ntchito kulowa mu pulogalamu yogwirizana ndi mbali zosiyanasiyana, kutsimikizira nthawi yokwanira, ndi nthawi yotsalira. Malo ogwiritsa ntchito popanga zinthu zokhala ndi masamu osavuta: kulephera mobwerezabwereza kutulutsa mayeso, kapena kufika kwachilendo kuchokera ku malo amene sanayembekezeredwe. DPC imayembekezera mabungwe kuti akhale ndi njira zodula zinthu zimene zimamasulira masamu a masamu komanso kuti achenjeze, ndi macheke a ntchito okayikira.

Kuyankha Kofulumira ndi Kulemba

Njira yogwiritsa ntchito bwino kwambiri kumasulira mawu olembedwa pa Intaneti ikhoza kufewetsa kwambiri yankho la chochitika. Ngati zipangizo zobisidwa kapena ma datafoni zabedwa, mabungwe sangafunikire kudziŵitsa DPC kapena kukhudza anthu ngati kulembedwa kwa mawu olembedwa moonjezerapo ndi makiyi sanasunthidwe. Khulutsani mfundo imeneyi pokonzekera kugonetsa. Komabe, ngati pali kuthekera kulikonse kuti makiyi avumbulidwa (m.g., woukirayo apeze njira yapamwamba yoyendetsera dongosolo la oyendetsa zinthu), samalirani kuswa monga chochitika chotheratu. Muka tebulo loyesera njira zothandizira kuyankha ndi kukonza makiyikiritso pansi pa ziwopsezo zowonedwa.

Kuletsa Kulemba Mabuku ndi Maphunziro a Ntchito

Konzerani njira yolembedwa tsatanetsatane yomwe imabisa zinthu zonse zapamwambazi: kuti ndi algoritime ziti zimene ziyenera kulembedwa mobisa, njira zofunika zoyendetsera, kugwiritsa ntchito bwino kumasulira thambo, ndi zochitika. Lamulo limeneli liyenera kuvomerezedwa ndi akulu oyang'anira ndi kubwereza chaka chilichonse. Antchito onse amene amasamalira zinthu zaumwini ayenera kuphunzitsidwa mfundo zolembedwa mwachinsinsi: mmene angadziŵire mawu obisika olembedwa. Kulankhulana kosadziŵika bwino, mmene angagwiritsirire ntchito i-injini kapena ziwitso zogawira , ndi mmene angaperekere kulephera kopeka.

Kufufuza ndi Kufufuza

Kufufuza kwanthaŵi zonse kwa njira zanu zolemba mawu olembedwa nkofunika potsatira lamulo la GDPR. Mafufuzidwe ayenera kutsimikizira kuti madongosolo onse okhala ndi zolembedwa zaumwini athandiza, kuti maauth system afika, ndandanda yofunika kwambiri ya kusintha kwa zinthu yatsatiridwa, ndi kuti mathirakiti akupitirizidwa. Malipoti a kuŵerengera monga mbali ya mapepala anu oŵerengera mlandu pansi pa Mfundo 5(2). DPC angapemphe umboni umenewu pofufuza. Lingalirani kugwiritsira ntchito zida zoyendera zimene zimasuzumira masitolo a makompyuta osalembedwa, masulo, kapena zikalata zopanda mphamvu ya TLS.

Magulu a ku Ireland Amakonda Kulemba Zolakwika

Post-quantom copyrnography yayandikira. Ngakhale kuti makompyuta a quantam sati awonongeretu kulembedwa kwamakono, NCSC Ireland imalimbikitsa kuti mabungwe ayambe kukonzekera kaamba ka kupenyeka. Kulinganiza kwa pambuyo pa quantanteum ndi kutsimikizira kuti madongosolo anu olemba mawu anga angasinthidwe ku ma algorim atsopano akapezeka. Mofananamo, homomomorphic complorpotic ndi ma a maatracyism ambiri akupeza malo osungiramo zinthu zachinsinsi zosungiramo zinthu zachinsinsi, ngakhale kuti si oyenerera kugwiritsa ntchito.

Anapeza Zinthu Zofunika

Mabungwe a ku Ireland angafufuze malangizo otsatirawa kuti apeze malangizo atsatanetsatane:

Kumaliza

Kugwiritsa ntchito njira zolembera mawu olembedwa bwino kwambiri ku Ireland ndi njira yofunikira kulinganiza bwino, kuyendetsa zinthu mwamphamvu, ndi kuyendetsa zinthu. Mwakusankha matanthauzo amphamvu, kugwiritsa ntchito makiyi, kusindikiza mokhazikika, kutumiza, ndi kugwirizanitsa ndi zoyembekezeredwa za DPC, mabungwe angachepetse kwambiri upandu wa kuswa chidziŵitso ndi kusonyeza kugwirizana ndi GDPR. Kugwiritsa ntchito si ntchito imodzi yanthaŵi koma projekiti yopitiriza ya kupenda, kukonza, kukonza, ndi kuwongolera. Mabungwe a ku Ireland amene amayang'anira kumasulira koyambirira kwa chitetezo sikudzangokwaniritsa kokha ziyeneretso zolamulira koma kumakulitsanso chidaliro ndi makasitoma ndi anzawo ogwirizana nawo pa Khiriontale ndi chuma choyendera ndalama.