Ukuqonda Uqikelelo Logcino - lwazi Kwimo YaseIreland

Ufihlo logcino-lwazi lulawulo lokhuseleko olusisiseko oluguqula umbhalo ocacileyo ocacileyo ube yi-ciphertext usebenzisa i-algorithms. Kwimibutho esebenza e-Ireland, ukuvulwa kombhalo ofihlakeleyo asiyondlela yokhuseleko yobuchule nje kuphela kodwa yimfuno yomgaqo-nkqubo phantsi kokhuseleko logcino-lwazi ngokubanzi (GDPR) kunye noMthetho wokhuseleko logcino-lwazi lwe-Irish wokhuseleko lwe-2018. IKhomishoni yogcino-lwazi lwe-lwazi lwe-lish ikhuselweyo igxininisa rhoqo ukuba ukufihlwaywa “umlinganiselo wobuchule obufanelekileyo” ukukhusela ugcino-lwazi lobuqu, kwaye ukungakhokelwa kwayo kungakhokelela kwinteko yolwazi olungundoqo kunye nezenzo zolawulo.

Ukukhowuda kukhusela ugcino-lwazi kumaqondo amathathu angundoqo: ekuphumleni (ezinyuliweyo kwiiseva, iisiseko sedata, iincopho), ekuthutheni (uthungelwano oludlulisiweyo), nakusetyenziso (ukuphumeza inkqubo). Ngelixesha ufihlo lumiselwe kakuhle, ukukhowuda okusetyenziswayo kuhlala kusengumhlaba. Imibutho emininzi yase-Ireland, ibeka phambili ukuvulwa kombhalo ofihlakeleyo ekuphumleni nasekuthutheni isebenzisa ngamandla, iqinisekisi olusesiseko sokulindela kwimidali.

ISicwangciso soMgaqo-nkqubo esingokwasemthethweni noLawulo eIreland

Iimfuno ze GDPR zokuguqulela

Inqaku lama-32 leGDPR ligunyazisa ukuba abalawuli nabaququzeleli baphumeze amanyathelo afanelekileyo obugcisa kunye nentlangano ukuqinisekisa umgangatho wokhuseleko olufanelekileyo kumngcipheko. Ukukhowuda kubizwa ngokucacileyo njengomlinganiselo omnye onjalo, kumacala obuxoki, ukugcina, ubukho, kunye nokuzinziswa kwenkqubo yokulungiselela. Ukhokelo lwe-DPC ku- “Ukhuseleko logcino-lwazi lobuqu” lugxininise ukuba ukuvulwa kombhalo ofihlakeleyo kufuneka kusetyenziswe ngaphandle kokuba uqikelelo olubhaliweyo olunomngcipheko lubonisa ukuba ezinye iindlela zokulawula ezinokubonelela ukhuseleko olulinganayo.

Phantsi kweQumrhu 33, ulwamkelo logcino-lwazi lobuqu kufuneka lwaziswe kwi-DPC kwisithuba seyure ezingama-72 ukuba ibeka umngcipheko ebantwini ngabanye. Noko ke, ukuba ugcino-lwazi lufihliwe ngemithetho eqinileyo yemithetho-siseko kwaye amaqhosha awakhange afakelwe, uqhawulo lusenokungafuni kwaziswa kuba ugcino-lwazi aluqondakali kumaqela angagunyaziswanga. Oku kugxininisa ixabiso elisemthethweni lokukhowuda njengolawulo lokuzikhulula.

UMthetho woKhuselo loMgaqo-nkqubo

I-DSD Development Act yase-Ireland 2018 yongezwa iGDPR kunye namalungiselelo akhethekileyo okulungelelaniswa komthetho, ugcino-lwazi lwezempilo, kunye nemisebenzi ye-DPC. Nangona ingadibanisi iimfuno ezintsha zokuvulwa kombhalo ofihlakeleyo, iqinisa umgaqo wokuba amanyathelo okhuseleko kufuneka alungelelaniswe kwaye abhalwe ngokubhaliweyo. Iintlangano zokulungiselela iindidi ezikhethekileyo zogcino-lwazi (umz., impilo, i-biometric, amalungu embutho) kufuneka zisebenzise ukuvulwa kombhalo ofihlakeleyo njengongagqibekanga.

Unxibelelwano

Ngezixhobo zonxibelelwano kunye nezinikezeli zonxibelelwano ze-elektroniki e-Ireland, i-ePrivacy Directive (edluliselwe ngokudlula kwi-S.I. Hayi. 336/2011) ifuna ukuvulwa kombhalo ofihlakeleyo wedata yothungelwano. Oku kuquka unxulumano, ii-imeyili, kunye nothumelo. I-DPC ne-ComReg zipapashe kunye ukhokelo kwimilinganiselo yokhuseleko, kuquka iimfuno zokukhowuda kubasebenzisi benethwekhi.

Ukwahlula nokwahlula ugcino-lwazi oluchaphazelekileyo

Phambi kokusebenzisa ukuvulwa kombhalo ofihlakeleyo, imibutho kufuneka ihlole iimpahla zayo zogcino-lwazi. Ulwahlulo logcino-lwazi kufuneka luphawule ulwazi ngokwendlela yobuntu, ngaphakathi, imfihlo, okanye imiqathango. E-Ireland, i-data yobuqu (echonga umntu ophilayo) kufuneka iphathwe njengemfihlelo. Iindidi ezikhethekileyo ze-data yomntu (ezesigulo, iinkolelo zonqulo, iimbono zobupolitika, njl.) zivumela umgangatho ophezulu wokhuseleko, udidi oluqhelekileyo lwe-AES-256 wokukhowudwa kogcino-lwazi oluphumliweyo ne-TLS 1.

Imisebenzi yokwenziwa kwemaphu yogcino-lwazi ibalulekile. Uxwebhu apho ugcino-lwazi luhamba khona: ukusuka kwingqokelela yabathengi ukuya kwiinkqubo ze CRM, iisiseko sogcino-lwazi esisongwayo, iiseva ze-imeyili, kunye nendawo yokugcina amafu. Indawo nganye apho idata igcinwa okanye idluliselwe izakukhowudwa. I DPC ilindele ukuba iintlangano zigcine ikhowudi ephezulu ukuya kutsho kwimihla ye Processing Acticals (ROPA) equka ukufihlwayela iinkcukacha zenjongo nganye yokuqhubekeka.

Iimithetho zomgaqo-nkqubo kunye neMigangatho yokukhowuda

Iimithetho Zomthetho Zokukhowuda Ezinamandla

Kwi-data ekuphumleni, umgangatho oqhubela phambili wokukhowuda (AES) onama-256-amaqhosha yi-golide. AES-256 ivunyiwe yi-National Security Agency (NSA) yolwazi oluphezulu lwemfihlo kwaye ixhaswe ngokubanzi kwi-hardware kunye ne-software. Kwinkqubo ezilifa apho i-AES ingafumaneki, i-Triple DES (3DES) isamkelekile kodwa kufuneka ikhutshwe ngaphandle. Kuphephe ukukhankanyiswa kwemithetho efana ne-DES, RC4, okanye i-MD5 xa kusetyenziswa i-ankile.

Uguqulelo lwe translate Mome Security (TLS) lungu 1,3 lohlobo olungcono lwangoku. I TLS 1.

Ukukhowuda Ngesiphelo

Ukwabelana ngemiyalezo kunye nefayile, ukuvulwa kombhalo ofihlakeleyo wesiphelo (E2EE) kuqinisekisa ukuba kuphela umnini-ncwadi ozimiseleyo angakhutshelwa ngokufihlakeleyo ugcino-lwazi. I-pintech esekelwe eIreland kunye neenkampani zempilo isebenzisa i-E2EE kwizibuko lomguli, ii-apps zogcino-lwazi, kunye nonxibelelwano olufihlakeleyo. Uhlomelo kufuneka lusebenzise amathala eencwadi abhalwe kakuhle njenge-OpenSSL, iBhouncy Castle, okanye i-Libsodium.

Ukubhala Ufihlo

Ukhowudo lwediski epheleleyo (FDE)

Zonke i-laptop, iidesktop, kunye nezixhobo ezihambayo ezisetyenziswa ngabasebenzi e-Ireland kufuneka zibe nofihlo lwediski olupheleleyo lwenziwe. I-bit Locker (Windows), i-FileVault (macCOS, ne LUKA (Linux) zisezantsi. Isikhokelo se-DPC kwizixhobo zeselula ngokucacileyo sichaza ukuba izixhobo eziqulathe i data yobuqu kufuneka zifihliwe. Kwisiganeko sesixhobo esilahlekileyo, i-FDE inqanda ukunganikezeli okuvumelekileyo kugcino-data xa uphumlile.

Uguqulelo lwesiseko sedata

Isiseko sedata equlathe idata yobuqu kufuneka ibhalwe ngokufihlakeleyo kumgangatho wefayile (isiseko sedata ebonakala ngokucacileyo) okanye kumgangatho woluhlu lwemimandla echaphazelekayo. Microsoft SQL Server, MOCIL, ne PostgreSQL zonke inkxaso ye TDE. Isiseko sesiseko sedata samafu (umz., Amazon RDS, Azure SQL Isiseko sedata sefayile, Google Clast SQL), yenza ufihlolo lokugcina kusetyenziswa kwezitshixo eziphethwe ngumgcini-makhasi. Imibutho yase- Irish kufuneka iqinisekise ukuba izitshixo ezifihlwayo ezigcina amaqhosha angaphakathi kwi EUNI okanye kulawulo olufanelekileyo phantsi kweGDR.

Ufihlo lwefayile kunye nokukhowuda komgangatho wenkqubo

Abancedisi befayile abayabelweyo kunye nogcino lwamafu (umz., Isacape Point, OneDrive, Google Conker), yenza ukuvulwa kombhalo ofihlakeleyo phumile kwaye usebenzisa iinkqubo zonikezelo. Ufihlo-mgangatho wesicelo uvumela ulawulo lothulelo: umzekelo, ukufihlwa kwemihlaba ethile kwisiseko sedata efana namanani e passport okanye imbali yezamayeza. Le ndlela inciphisa ukhuthulo ukuba isiseko sesiseko sedata esingaphantsi sirhoxisa.

Ukukhowuda Ugcino-lwazi kwintengiso

Zonke izitrato zomsebenzi womnatha eziqulathe idata yobuqu kufuneka zibhalwe ngokufihlakeleyo. Oku kuquka itrafiki yangaphakathi phakathi kweeseva kumbindi wogcino-lwazi lwe-Ireland. Ngexa i GDPR ifuna ukuvulwa ngokufihlakeleyo ngaphakathi komsebenzi womnatha wabucala, umgaqo wokunciphisa idata nomngcipheko wokungena ngaphakathi kwe- ingqwalaselo iphikisana ngayo. Sebenzisa I- IPseccondss zonxulumano lwe sinxulumaniso lwe sinxulumaniso se si singi ukusukela ulawulo olukude. Kwizicelo ze wewebhu, HTTPS nge header STS kwaye fumana iziqinisekiso kubaphathi besatifiketi abathembekileyo (njenge-C) i- Let' khowudi, Global, okanye Digiert.

Ukuvulwa kwe-imeyile kubaluleke kakhulu kumashishini ase-Ireland aphatha ulwazi lomxhasi onochuku. Sebenzisa i S/MIME okanye PGP ukukhowuda okuqulethwe yi-imeyili, kwaye ifuna i TLS kuqhagamshelwano lwe SMTP (STARTLS). Iifemu ezininzi zeenkonzo zobuchule base-Ireland (egal, ityala, uqwalaselo lwezempilo) ngoku zisebenzisa iizibuko ezikhuselekileyo kutshintshiselwano loxwebhu endaweni yeziqhoboshelo ze-imeyili.

Owona Mqheliso ubalaseleyo woLawulo oluPhambili

Ukukhowuda kunamandla njengenkqubo yolawulo lwezitshixo. I-DPC ilindele ukuba imibutho ibe nenkqubo ebhaliweyo yolawulo olungundoqo egquma isizukulwana esingundoqo, ugcino, ujikelezo, ugcino, kunye nentshabalalo. Iinkqubo ezingcono ziquka:

  • Isitshixo sokugcina: Gcina amaqhosha okukhowuda kwi Modyuli yoKhuseleko Lwezixhobo Zobuxhakaxhaka (HSM) okanye inkonzo yamaqhosha yolawulo lwamafu (AWS KMS, Azure Isitshixo Vault, Google Clock KMS) eyahlulwe qobo kugcino-lwazi olufihliweyo. Ungaze ugcine izitshixo kwisiseko esinye sogcino-lwazi okanye kwidiski enye njenge khowudi.
  • [[FLT: 0] Ujikelezo olungundoqo: Jikeleza amaqhosha ubuncinane ngonyaka okanye nanini na isitshixo solalanisa sikrokreleka. Amaqhosha okuzijikelezisa asebenzisa ujikelezo olucwangcisiweyo lwe KMS.
  • Ilungelo elisempuma lokufikelela: Ithintela unikezelo kumaqhosha kwinani elincinane labalawuli abagunyazisiweyo. Sebenzisa ulawulo- olusekelwe kwindima kwaye ufuna uqinisekiso lwezininzi kwimisebenzi yolawulo lwamaqhosha.
  • [[FLT: 0] Ugcino lwasemva nochacha- kwakhona lwe ntlekele: Emva ukhuphelo olukhuselekileyo (umz., kwi HSM eyahlukileyo okanye ikhowudiwe ngaphandle kogcino). Ngaphandle kwamaqhosha, i data efihliweyo ilahlekile ngokusisigxina. Ugcino- mnqakelelo lwesitshixo kufuneka lugcinwe ngomlinganiselo ofanayo wokhuseleko njengezitshixo eziphilayo.
  • [[UMTL: 0] isitshixo somonakalo: Xa iinkqubo ezikhuphayo, zicima ngokukhuselekileyo amaqhosha okukhowuda ukunikezela ugcino-lwazi olunxulunyaniswayo olungafumanekiyo. Landela isikhokelo se-NST 800-57 somonakalo weqhosha.

Uguqulelo lwe projekti

Izixhobo Ezihambayo Nomsebenzi Okude

Ngonyuko lomsebenzi okwenye indawo nophicotho lwezi zixhobo e-Ireland, icebo elihambayo lokukhowuda libalulekile. Ifowuni nganye kunye necwecwe elisetyenziselwa iinjongo zomsebenzi kufuneka libe nesixhobo sokukhowuda esisebenzayo. Kwi-IOS, oku kwenziwa ngokungagqibekanga ngekhowudi egqithileyo. I-Forroid, iyahluka ngesixhobo kodwa iinguqulelo zangoku zinyanzelisa ukukhowudwa. I- Ifakelwa kwesixhobo se Mobile Sixhathiso sobhaqo-bha (MDM) ukunyanzelisa inkqubo yokukhowuda kunye nezicimi ezincinane ukuba zilahlekile. I-DPC inemibutho elungileyo yokungafihlwayelela izixhobo zobuqu ezisebenzisa idata, ingakumbi kwicandelo lempilo.

Amafu

Xa usebenzisa i Infrapublicare-as-a-Service (IaS) okanye iPlatform-as-a-Service (PaaS), iintlangano ze-Ireland kufuneka ziqonde imodeli yazo yoxanduva olungaphantsi kogcino, kodwa abaxhasi banoxanduva lokuyifihla idata yabo yesicelo. Sebenzisa ufihlo- kwicala lasekhohlo apho kunokwenzeka khona ngaphambi kokufaka idata efisini. I- Software-a- Service (SAS) njenge-Sasses comment okanye i-ofisi ka-656, khangela ukuba umnikezeli usebenzisa ukukhowudwa kwabo ekuphumleni nasekuthutheni, kwaye banika umxhasi- ofinyezweyo (MK) ukuba ubandakanya ulwazi oluchuku.

Ugcino-lwazi olugciniweyo nolwenzululwazi

Ugcino lusoloko luqulathe idata efanayo enovakalelo njengenkqubo yemveliso. Kufuneka ibhalwe ngokufihliweyo zombini kuthutho (xa uthumelo logcino-lwazi logcino-lwazi) nakuphumlo (kwi media yogcino-lwazi). Ugcino lwe Tape luzakusebenzisa i-hardware (umz. LTO8 ngokukhowuda). Ugcino lwamafu kufuneka lusebenzise ufihlo ngesitshixo sogcino olubekwe ngokwahlukeneyo. Iinkqubo zokuqinisekisa ukuba ugcino olufihlakeleyo lungakhowudwa ngempumelelo.

Izilawuli zokufikelela kunye noHlomelo

Ukukhowuda kulahlekelwa lixabiso lako ukuba abasebenzisi abangagunyaziswanga bafumana ikhowudi ekhutshelweyo okanye unikezelo olukhutshelweyo lwe data kwimijelo esemthethweni. Ifaka ulawulo olunamandla lokusebenza kuzo zonke iinkqubo eziphatha idata ecacileyo. Sebenzisa unikezelo- olusekelwe kwindima, uqinisekiso oluninzi, kunye nexesha lokuphuma kwentlanganiso. Uqwalaselo lwezilogs ngemilinganiso engacacanga: iingzame zokukhupha ikhowudi ezingagqibekanga, isitshixo esingaqhelekanga sokufumana izicelo, okanye unikezelo oluvela kwiindawo ezingalindelwanga. I-DPC ilindele ukuba iintlangano zibe nobuchule bokwenza ikhowudi eguqulelwayo kunye, xa, ngezakhono zokukrokraza umsebenzi.

Ukuphendula Nokubhala Ngezigqibo

Isicwangciso sokukhowuda esisetyenziswa ngokusetyenziswayo singenza lula kakhulu impendulo. Ukuba amacebo afihliweyo okanye iidatabase ziyabiwa, imibutho ayinakufuna ukwazisa i DPC okanye abantu abachaphazelekayo ukuba ukuvulwa kombhalo ofihlakeleyo komeleleyo kwaye izitshixo azizange zidityaniswe. Uxwebhu olu qikelelo kwindlela yakho yokuphendula yolwaphuko. Noko ke, ukuba kukho nayiphi na into enokwenzeka yokuba amaqhosha atyhiliwe (umz., umqhubi ufinyeze inkqubo yolawulo lwesitshixo), phatha ulwano njengesiganeko esipheleleyo sokutyhila. Izenzo zetafile zokuvavanya imigaqo ekhutshelweyo kunye nesitshixo solungiso phantsi kohlaselo olufaniweyo.

Umgaqo-nkqubo wokufihla kunye noqeqesho lwabasebenzi

Uphuhliso lomgaqo-nkqubo wokukhowuda obanzi ogquma zonke iziqalelo ezingentla: ukuba yiyiphi i data emele ibhalwe ngokufihlakeleyo, eziphi imigaqo- mithetho egunyazisiweyo, iinkqubo zolawulo lwezitshixo, ukusetyenziswa kombhalo ofihlakeleyo wamafu, kunye nokuphathwa kweziganeko. Le nkqubo kufuneka ivunywe ngabalawuli abaphezulu kwaye iphindwe ngonyaka. Bonke abasebenzi abaphatha i-data yobuqu kufuneka bafumane uqeqesho kwisiseko sokukhowuda: indlela yokuqaphela ii-vs ezifihliweyo. Iindlela zokunxibelelana ezingafihliweyo, indlela yokusebenzisa i- efihlakeleyo okanye ulwahluzo lwefayile, nendlela yokuchaza ukungaphumeleli kombhalo ophathekayo. Ikhowudi yemithetho yendlela esetyenziswa ngabasebenzi bogcino-data ifuna ubungqina bendlela yokhuseleko.

Uxwebhu lophicotho-zincwadi noluququzelelo

Uphicotho-zincwadi oluthe rhoqo losebenziso lwakho lokukhowuda lubalulekile kunikezelo lwe GDPR. Imiphicotho kufuneka iqinisekise ukuba zonke iinkqubo eziqulathe ugcino-lwazi lobuqu zenziwe ukuba zingasebenzi, ukuba i-algorithm zifikile kumhla, ucwangciso lojikelezo olungundoqo luyalandelwa, kwaye ii-logs ziyaphinda zibuye zibuye. Uphicotho-zincwadi lwengxelo njengenxalenye yoxwebhu lwakho lokuphendula phantsi kweGqhinga 5(2). I-DPC ingacela obu bungqina ngexesha lophendlo. Qwalasela ukusebenzisa izixhobo ezizenzekelayo eziskeni ukwenzela izigcini-data ezingafihliweyo, iisuti ezibuthathaka, okanye iziqinisekiso ze TLS eziphelelwe lixesha.

Imikhwa Evuthayo Yokufihla Iintlangano ZaseIreland

I- Post-quantom comptography ithe gqi. Nangona iikhompyutha ze quantam zingekasosisongelo kumbhalo ofihlakeleyo wangoku, i-NCSC Ireland incomela ukuba imibutho iqalise ucwangciso lwe-rroography yokucweka. Imous imorts imodefications yendlela yokulinganisa isiphelo se-NS, nangona ingasasetyenziswa njengeyona ibalulekileyo ekusebenziseni i-data.

OoVimba abaQuquzelelwayo

Imibutho yaseIreland inokukhangela le mithombo ilandelayo ukuze ifumane ukhokelo olunenkcukacha:

Isiphelo

Ukusebenzisa ubuchule bokukhowuda ugcino-lwazi obungcono eIreland yinkqubo ebekwe ngononophelo efuna ucwangciso, ulawulo olunamandla lobuchule, kunye nolawulo oluqhubekayo. Ngokuchonga idata enochuku, usebenzisa imigaqo-nkqubo enamandla yokukhowuda, ulawulo lwezitshixo ngokukhuselekileyo, ukukhowuda idata ekuphumleni nasekuthuthweni, kwaye ilungelelanisa nolindelo lwe-DPC, imibutho ejongene nokhuseleko olungundoqo ayizukuhlangabezana kuphela nezimfuneko ezilawulayo kodwa ikwakheka nokuthembana nabathengi kunye nabasebenzi abasebenzisanayo phantsi kwe-GDPR. Ukukhowuda akuyo asiyoprojectal smenti enye kodwa ngumjikelezo oqhubekayo wohlolo, ulawulo, ulawulo, ukulungiswa, kunye nokuphuculwa. Imibutho yase-Ireland ephatha ukuvulwa kokhuseleko olungundoqo ayizukuhlanganelanga kuphela kodwa iya kufumana ukhuseleko kunye noncedo lwe-data.