Ukuqonda Ukukopishwa Kokwaziswa Embhalweni Wase - Ireland

Ukuvulwa kwemininingwane kuyikhosha okuyisisekelo okulawula ukuvikelwa kombhalo ocacile ofundekayo owenziwa ngokucacisiwe usebenzisa imithetho-algorithm. Izinhlangano ezisebenza e-Ireland, ukukhomba akuyona nje isivikelo sobuchwepheshe kodwa kuyisidingo esisilawulayo ngaphansi kwe-General Data Protection Regation (GDPR) kanye ne-Irry Data Protection Act 2018. I-Integer Data Protection Commission (DPC) igcizelele njalo ukuthi ukufica okuyimfihlo “isilinganiso esisemthethweni” sokuvikela imininingwane yomuntu siqu, futhi ukungahoxi kwayo kungaholela ekuthenjweni nasekubopheni inqubo eqinisekile.

Ukubhala kuvikela ukwaziswa ezingeni ezintathu eziyinhloko: lapho kuphunyukile (kuhlelwe kwizisebenzi, ama-memone, ama-memone, ama-memove), ekuthutheni (ukudlulisa imiyela), nalapho kusetshenziswa (ukukhipha izinhlelo). Nakuba ukukopisha okufihlwayo kuphumile nakuhanjiswa kusunguliwe kahle, ukuvulwa kombhalo obhalwe ngokuyimfihlo kusalokhu kusenzile. Izinhlangano eziningi zase-Ireland, ezifaka kuqala ukufihlwa kwamagama lapho ziphumule futhi zithubeleza zisebenzisa iziyalezo eziqinile, eziqinisisiwe yi-algoringslm elilindele isisekelo kuma-reminerator.

Isimiso Esingokomthetho Nesokuqondisa E - Ireland

Izimfuneko zeGDPR zokubhala

ISiphakamiso 32 se-GDPR sigunyaza ukuba abalawuli nabaqondisi basebenzise izinyathelo ezifanele zobuchwepheshe kanye nenhlangano ukuze kuqinisekiswe izinga lokuphepha elifanele ingozi. Ukubhala kubizwa ngokucacile njengesilinganiso esisodwa, kanye nesilinganiso samagama anjalo, ukufihla, ukuthembeka, ukutholakala, nokuzivuselela kwezimiso zokulungisa. Isiqondiso seDPC ‘ Ukugcinwa Kwemininingwane Yobuntu-muntu siqu' sigcizelela ukuthi ukufihlwa kokubhalwa kweminyathiwe kufanele kusetshenziswe ngaphandle kokuba ukuhlolwa kwengozi kubonisa ukuthi ezinye izindlela zokulawula isivikelo.

Ngaphansi kweSiphakamiso 33, ukungqubuzana kokwaziswa komuntu siqu kumelwe kwaziswe kuyi-DPC phakathi namahora angu-72 uma ibeka ingozi kubantu ngabanye. Nokho, uma ukwaziswa kufihliwe ngemithetho eqinile nesihluthulelo kungahlehliswanga, ukudingwa kungadinga isaziso ngoba ukwaziswa akunangqondo emaqenjini angagunyaziwe. Lokhu kugcizelela ukubaluleka okusemthethweni kokufihlwa njengendlela yokulawula.

I - Data Providence Act 2018

I-DSC i-Act yase-Ireland’s Device Act 2018 inemithelela ekhethekile yokusebenza komthetho, ukwaziswa kwempilo, nemisebenzi ye-DPC. Nakuba inganezeli izimfuneko ezintsha zokuvulwa kombhalo oyimfihlo, iqinisa isimiso sokuthi isilinganiso sokuphepha kumelwe silinganiswe futhi sibhalwe phansi. Izinhlangano zokuhlela izigaba ezikhethekile zemininingwane (umz., impilo, ukuhlanganisa, amalungu enyunyana yezohwebo) kufanele zisebenzise ukufihlwa kwemishwa njengephutha.

ukuxhumana nge - ePriváry ne - Tetragrammark

Kuzo izisekelo zezokuxhumana nezokuxhumana ze-electronic ne-electronic service e-Ireland, i-ePrivracy Directive (edluliselwe nge-S.I.A. u-336/2011) idinga ukukhonjwa kwemininingwane yezokuxhumana. Lokhu kuhlanganisa izingcingo zephimbo, ama-imeyili, kanye nokuthumela imiyalezo. I-DPC ne-ComReg zinyatheliswe kanye-yodwa ngeziqondiso zezokuphepha, kuhlanganise nezimfuneko zokukhomba izinombolo zabasebenzisi benethi.

Ukuthola Nokwenza Imininingwane Eqand ’ Ikhanda

Ngaphambi kokuba kusetshenziswe ukukopishwa kwe-copyright, izinhlangano kumelwe zihlole imininingwane yazo. Uhlelo lokwaziswa oluhlelwayo kufanele luphawule ukwaziswa ngokwesu lolwazi: umphakathi, ngaphakathi, imfihlo, noma imingcele. E-Ireland, imniningo yomuntu siqu (noma isiphi isikhombi esichaza umuntu ophilayo) kumelwe iphathwe njengeyimfihlo. Izigaba ezikhethekile zemininingwane yomuntu siqu (engamakha, izinkolelo ezingokwenkolo, imibono yezombangazwe, njll.) ivumela izinga eliphakeme kakhulu lesivikelo, ngokuvamile i-AES-256 yokuvulwa kokwaziswa uma kuphuzwa futhi i-TSS33 i-data ethunyelwe nge-trans.

I-meap zrap ibalulekile. Ibhukwana lapho kugeleza khona i-data yomuntu siqu: kusukela ekuqoqweni kwemininingwane yekhasimende kuya ku-CRM, izisethi ze-roll zedata, izisebenzisi ze-imeyili, nokugcinwa kwamafu. Indawo ngayinye lapho i-metam igcinwa khona noma idluliswa khona kufanele ibhalwe ngasese. I-DPC ilindele ukuba izinhlangano zigcine i-Recodential of Processing Actiques (ROPA) ehlanganisa ukufihlwa kwemininingwane yokulungisa ngayinye.

Amanani Nezindinganiso Zokubhala Okuyimfihlo

Amanani anamandla okubhala okubhala

Imininingwane efingqiwe ye-Expital Sound Sound Standard (AES) enezihluthulelo eziyi 256-bit indinganiso yegolide. I-AES-256 ivunyelwe yi-National Security Agency (NSA) yokwaziswa okuphezulu kwemfihlo futhi isekelwe kabanzi kwi-i-proftware ne-octal. Kusetshenziswa izimiso zefa lapho i-AES ingekho khona, i-Triple DES (3DES) isamukelekile kodwa kufanele ikhishwe. Gwema ukusebenzisa algobezi njenge-DES, RC4, noma i-MD5 ekusebenziseni i-pasting.

Imininingwane ekuthuthweni, i-Transport Lamps Security (TLS) inqubo yamanje engcono kakhulu. I-TLS 1.2 isamukeleka kodwa kufanele ilinganiswe ngezingubo eziqinile eziyisikhonkwane kanye nokufihla okuphelele phambili. Amanhlangano kufanele akhinyabeze i-TLS 1.0 no-1.1 ngenxa yezinto ezaziwayo njenge POODLE ne-EARC. I-Irish National Cyber Security Center (NCSCC) itusa ukusebenzisa i-TLS-1.2 noma ngaphezulu kuyo yonke imisebenzi ye we we webhusayithi ephatha imininingwane yomuntu siqu.

Ukubhala okufingqiwe mayelana nokuphela

Ukuhlanganisa imiyalezo nehele, ukukopisha kokugcina-ke-eye-eye-e-ee kuqinisekisa ukuthi umuntu ohloselwe ukwamukela angawufinyelela umniningo. Izinkampani ezisekelwe e-Ireland zisebenzisa i-E2EE ekuphatheni izikhungo ezibekezelayo, iziphakamiso zokubhaka, nezokuxhumana kwamakhasimende okuyimfihlo. Izinhlelo zokuxhumana kufanele zisebenzise imitapo enemitapo ebhalwe kahle njenge-OpenSSL, Bouncic Castle, noma i-Libsodium.

Ukufingqa Ukukhomba Emsebenzini

Ukubhala okugcwele kwidiski (FDE)

Wonke ama-laptop, amadesktop, kanye nama-cellals asetshenziswa izisebenzi e-Ireland kufanele kube nokuvulwa okugcwele kwediski kuvunyelwe. I-bit Locker (Windows), i-FileVault (maccos), ne-LUKAS (Linux) zijwayelekile. Isiqondiso se-DPC kwimishini yeselula sisho ngokucacile ukuthi imishini equkethe imininingwane yomuntu siqu kumelwe ibhalwe ngokufihlekile. Uma kwenzeka i-FDE ilahlekelwe isisetshenziswa, ivimbela ukufinyelela okuvumelekile komniningo kokwaziswa uma uphumule.

Ukubhalwa kwedata yekhomphyutha

Idatamu yokwaziswa okunemininingwane yomuntu siqu kufanele ibhalwe nge-head elinganayo (i-data esobala yokuvulwa nge-codemic) noma esingeni lezinhlu zezisekelo ikakhulukazi. I-Microsoft SQL Server, I-MVUMVU, ne-PostgresQL yonke isekela i-TDE. Izinhlangano ze-Irish kuqinisekisa ukuthi izinhlelo zamafu zigcina inkinobho yokuvulwa kwe-EU noma i-Azimu (umz., i-Amazon RDS, Azure SQL I-data-SCIMP, i-Google Clacracle SQL), yenza ukuba kuhlale kusetshenziswa inkinobho ye-akhasimende noma i-akhasimende yamagama. Izinhlangano zase-Ireland ziqinisekise ukuthi i-onqandayo i-opensela i-openthi be-openthiwe-EUR noma i-GPR, ngaphansi kwe-45 ye-GDR.

Ukubhala okuyimfihlo kohlelo lokusebenza

Ngezisebenzi ezihlanganyelwayo zefayela nokugcinwa kwamafu (umz., ParapePoint, OneDrive, Google Cocrative), yenza ukuvulwa kombhalo ofingqiwe kuphumule futhi usebenzise izinqubo zokungena. Ukuvulwa kwemisuka yezinga eliphezulu kuvumela ukulawula okungenamthungo: ngokwesibonelo, ukubhala ngamafumu athile kwi-data e-alkhom enjengenombolo yepasi lokungena noma umlando wezokwelapha. Lendlela inciphisa ukuchayeka uma i-database engaphansi kwe-sethi ye-sethi ye-sethi ye-dhlikipt.

Ukuqamba Amanga Engxenyeni Yenguquko

Yonke i-memone yenethiwekhi equkethe imniningo yomuntu siqu kumelwe ibhalwe ngokuyimfihlo. Lokhu kuhlanganisa umgwaqo wangaphakathi phakathi kwabasebenzisi esikhungweni se-data sase-Ireland. Nakuba i-GDPR ingadingi ngokuqondile ukuvulwa kwe-openthiwekhi ye-data, isimiso sokulula i-data kanye nengozi yokusongela ngaphakathi kwayo kuphikisa ngayo. Sebenzisa ama-IPsecconds axhumene no-SSH ukuze uqondise ukuphatha okukude. Izinhlelo zolwembutho, i-HTTPS ngezihloko ze-HSTS futhi ithole izitifiketi kubaphathi besatifiketi esithenjwa (Njengokwangathi I-Let’s Fibry, Global, noma DigiCert.

Ukuvulwa kwe-imeyili kubaluleke kakhulu emabhizinisini ase-Ireland aphatha ulwazi oluzwelayo lukakhasimende. Sebenzisa i-S/MIME noma PGP ukuvulwa kwe-imeyili, futhi udinge i-TLS ku-smTLS (STRATLS). Izinkampani eziningi zobuchwepheshe base-Ireland (i-gal, i-accounting, i-contations) manje zisebenzisa amatheku alondekile ekushintsheni i-imeyili esikhundleni sokunamatheliselwe i-imeyili.

Imikhuba Engcono Kakhulu Yokuphatha

Ukubhala kunamandla njengenqubo yokuphatha isihluthulelo. I-DPC ilindele ukuba izinhlangano zibe nesimiso sokuphatha esinesihluthulelo esibhaliwe esihlanganisa isizukulwane esiyisihluthulelo, ukugcina, ukujikeleza, isisekelo, kanye nencithakalo. Imikhuba engcono kakhulu ihlanganisa:

  • Isihluthulelo sokugcina isihluthulelo: Tgcinela izihluthulelo zokukhowuda kwimodyuli yokusinda (HSM) noma umsebenzi wokuphatha izihluthulelo zefu (AWS KMS, Azure Isihluthulelo Vault, Google Clock KMS) ehlukanisiwe ngokomzimba nemniningo efihliwe. Ungalokothi ugcine izihluthulelo kwi-mtako-mthola-mthola-lwazi noma ecwecweni elifanayo njenge-cipheratext.
  • Isijikelezo esinesihluthulelo: Jikisa izihluthulelo okungenani minyaka yonke noma noma nini lapho kusola isihluthulelo sokuvumelana. Ukujikeleza okuzenzekelayo usebenzisa izinguquko ze-KMS ezihleliwe.
  • Ilungelo elisenkabeni lokufinyelela: ivimbela ukufinyelela kuhlu oluncane lwabaphathi abagunyaziwe. Sebenzisa ukulawula-okusekelwe kwindima futhi udinga isiqiniseko sengxenye enkulu emikhankasweni yokuphatha isihluthulelo.
  • Ukuhlenga nokululama kwenhlekelele: Beka emuva izinkinobho zokukhowuda ngokuqinisekisiwe (umzk., phakathi kombhalo ohlukile we HSM noma ofihliwe ngaphandle kokugcina). Ngaphandle kwe-offset, i-data efihliwe ilahleka unomphela. Isihluthulelo kumelwe sigcinwe ngesilinganiso esifanayo sokhuseleko njengenkinobho ephilayo.
  • Isihluthulelo sokubhujiswa: Uma kukhishwa izinqubo, susa ngokuqinisekisiwe izihluthulelo zokufihla ukuphimisela ukuze kubhalwe ukwaziswa okuhlobene nalokhu okungatholakali. Landela iziqondiso ze-NSP 800-57 zokubhujiswa kwesihluthulelo.

Ukubhala Okunembile Ngamacala Okusetshenziswa Kwawo Ngokuqondile

Izisetshenziswa Ezihambayo Nemisebenzi Ekude

Ngokukhula komsebenzi owenziwe buqamama nohuquzelayo e-Ireland, ukukopisha kwe-cell compry kubucayi. Ngasinye isikhala nesibhebhe esisetshenziselwa izinjongo zomsebenzi kumelwe sibe nentshenziso yesisetshenziswa. Kuwo wonke i-IOS, lokhu kugunyazwa ngokwephutha nge-codect. I-Forroid, ihlukahluka ngomshini kodwa izinguqulo zanamuhla zinyanzelwa ukuba kubhalwe nge-Mobile Scrol Depagement (MDM) ukuphoqa izinhlelo zokukhomba nokusula uma zilahlekile. I-DPC inezinhlangano ezicofeziwe zokufisha eziphethe imishini eziqukethe imishini yomuntu siqu, ikakhulukazi engxenyeni yempilo.

Izinkonzo Zamafu

Uma usebenzisa i-Infrapublicale-as-a-Service (IaS) noma i-Platform-as-Service (Paas) (PaaS), izinhlangano zase-Ireland kumelwe ziqonde isampula yazo yomthwalo wemfanelo ohlanganyelweyo. I-patry ichaza inqolobane engaphansi, kodwa amakhasimende anomthwalo wokufihla imininingwane yawo yezinhlelo. Sebenzisa ukufihlwa kwekhasimende lapho kungenzeka khona ngaphambi kokufaka imininingwane efwini. I-software-a-Service (SAS) njenge-Sasses force noma Office 366, hlola ukuthi umnikezeli usebenzisa ukuvulwa kokuvulwa kwemininingwane engaphandle, futhi anikeze izihluzo-mgemfakelwayo (MK) uma i-mlwazi oluzwelayo luhilelekile.

Isisekelo Nemininingwane Egciniwe

Izinqanyulo ngokuvamile zinemininingwane efanayo ezwelayo njengezimiso zokukhiqiza. Kumele zibhalwe ngokufihlekile kokubili ekudluliseni (phakathi kokudluliswa kwesisekelo) nalapho kuphumile (kwimithombo yenkxaso). Izisekelo zeTape kufanele zisebenzise ukuvulwa kwe-index (umz., LTO8 nge-copyripy). Izisekelo zamafu kumele zisebenzise ukuvulwa kokuvulwa nge-openthing nge-opy ephathwayo. Izinqubo zokuhlola njalo ukubuyiselwa kungafinyezelwa ngempumelelo.

Izilawuli zokungena noHlola

Ukubhala kulahlekelwa ukubaluleka kwayo uma abasebenzisi abangagunyaziwe bengathola inkinobho yokukhishwa kwemibhobho efundekayo noma ukufinyelela okubhalwe ngokufundeka ngemikhondo esemthethweni. Igcwalisa ulawulo olunamandla lokungena kuzo zonke izinqubo eziphatha imniningo yombhalo ocacile. Sebenzisa ukufinyelela-osekelwe kwindima, ukuqinisekiswa okuhlukahlukene, kanye nokudlula kwesikhathi sesiqephu. Ukuhlola ama-logi angenayo ngemikhondo engacacile: imizamo yokuphindwa ngokuphindwayo, isihluthulelo sokuthola izicelo ezingalindelekile, noma ukufinyelela ezindaweni ezingalindelekile. I-DPC ilindele ukuba izinhlangano ezifaka incazelo yemininingwane eyimfihlo futhi, ngesixwayiso somsebenzi osolekayo.

Ukusabela Nokubhala Ngokuphazima Kweso

Isu lokukopisha okusetshenziswa kahle lingase libe lula kakhulu ukuphendula ngesenzakalo. Uma izisetshenziswa ezifihliwe noma izinhlelo zokuxhumana zebiwe, izinhlangano kungadingekanga zazise i-DPC noma zithinte abantu uma ukuvulwa kwayo kuqinile futhi izihluthulelo zingafakwanga exeshini. Khulula lesi sizathu esihlelweni sakho sokusabela kwephutha. Nokho, uma kungenzeka ukuthi izinkinobho ze-openthiwe zadalulwa (umz., umdwebi ufinyeze isimiso sokuphatha isihluthulelo), phatha ukuphuka njengesenzakalo esiphelele sokuveza.

Ukuqamba Amanga Nokuqeqeshwa Kwamaholo

Yakha isimiso sokubhala okubanzi sokubhala okuhlanganisa zonke izici ezingenhla: ukuthi iziphi izinqubo okumelwe zibhalwe ngokuyimfihlo, iziphi izinqubo zokuqondisa isihluthulelo, ukusebenzisa okuvumelekile kokufihlwa kwamafu, kanye nokuphatha kwezenzakalo. Lenkambiso kufanele ivunyelwe abaphathi abaphezulu futhi ibukezwe minyaka yonke. Zonke izisebenzi eziphatha imininingwane yazo siqu kufanele zithole ukuqeqeshwa ngemisuka eyisisekelo: ukuthi zingazi kanjani izinombolo ezingafihliwe. Izingxoxo ezingafihliwe, indlela yokusebenzisa i-imeyili noma amathuluzi ahlukene ayimfihlo, nendlela yokubika ukuhluleka kokufinyeza. I-DPC i-S Codentioctives of Policesssssssssssss pravicectives idinga ubufakazi bokuqeqeshelwa kwezisebenzi zokuphepha.

Umkhakha Ophindwayo Nofakazelwa

Ukuhlola njalo kwemikhuba yakho yokubhala ngokukopishwa kubalulekile ekulandeleni i-GDPR. Imikhankaso ingaqinisekisa ukuthi zonke izinqubo eziqukethe ukwaziswa komuntu siqu zikhona ukukhomba okugunyaziwe, ukuthi amanani akhona kuze kube manje, futhi kulandelwa uhlelo oluyisihluthulelo lokushintshana, nokuthi ama-log ayaphindaphindwa. Ama-parediyu akha imibiko njengengxenye yezincwadi zakho zokulandisa ngaphansi kwe-Akhithi 5(2). I-DPC ingacela lobufakazi phakathi nophenyo. Cabangela ukusebenzisa amathuluzi asebenza nge-odwa ahlola izinqolobane zemininingwane ezingafihlwangwanga, izisuso ezibuthakathaka, noma izitifiketi ze-TLS eziphelelwe isikhathi.

Imikhuba Evundlile Yokukhomba Ezinhlanganoni Zase - Ireland

I-cryptography ye-Preat-quant isesigodini. Nakuba amacomputer e-quantam engakabi usongo ekubhalweni kwamanje, i-NCSC Ireland itusa ukuba izinhlangano ziqale ukuhlela ukufiphala. Inqubo yokuhlola i-NS yangemva kwe-quantantem futhi iqinisekise ukuthi izimiso zakho zokubhala nge-compy zingavuselelwa ezimisweni ezintsha uma sezikhona. Ngokufanayo, ukufihlwa kwe-mfihlwa kwe-ekhomphyisi kanye nokuphepha okunengxenye eziningi kuthola imvume yokugcina imininingwane eyimfihlo-pathratic, nakuba zingaka-ka-kasebenzi ekusebenziseni i-opentwaricio.

Imithombo Yengcebo Etuswayo

Izinhlangano zase - Ireland zingabheka imithombo elandelayo enegunya ukuze uthole isiqondiso esiningiliziwe:

Isiphetho

Ukugcwalisa inqubo yokukopisha ukwaziswa okungcono kakhulu e-Ireland inqubo ebekelwe indawo ebanzi edinga ukuhlela ngokucophelela, ukuphathwa kwezobuchwepheshe obuqinile, nokulawula okuqhubekayo. Ngokuhlukanisa imininingwane ezwelayo, usebenzisa izinqubo eziqinile zokukhomba, ukuphathwa ngokuqinisekisiwe, ukufingqa imininingwane lapho iphumile nalapho ihamba, nokuhlela, nokulandelana nezinhlelo ze-DPC, izinhlangano ezinganciphisa ngokuphawulekayo ingozi yokuphulwa kokwaziswa futhi zibonise ukuvumelana ngaphansi kwe-GDPR. Ukufihlwa akuwona umsebenzi owodwa wesikhathi kodwa umjikelezo oqhubekayo wokuhlola, ukuhlelwa, nokuthuthukiswa. Izinhlangano zase-Ireland eziphatha ukukhomba okuyisisekelo sokuvikela okuyisisekelo ngeke kuhlangane nezimfuneko ezilawulwayo kuphela kodwa futhi zakhe ukwethenjwa ngabathengi futhi nabantu abasebenza ndawonye emongweni ye-data eqhubekayo.