摘要
电信运营商作为国内基础通信网络的提供者,核心业务系统流转着海量用户的重要数据信息,做好个人信息保护体系化建设刻不容缓.其中,将商用密码作为核心技术和重要手段,引入个人信息保护全流程,成为安全技术措施的基线要求.基于电信行业数据防护的实战化与新合规需求,秉承"以数据为中心"的安全防护理念,打造"密码安全一体化"的个人信息保护方案,将个人信息保护理念融入到企业运营管理的全流程,促使个人信息保护合规要求内化为企业机构的主动行为,构建了一道有效的个人信息与重要数据的纵深防御战线.
As the provider of the domestic basic communication network,Telecom has a core business system that circulates a large number of users’important data and information,and it is imperative to implement a systematic construction of personal information protection.Among them,the use of commercial cryptography as the core technology and important means to introduce the entire process of personal information protection has become the baseline requirement for security technical measures.Based on the actual combat and new compliance requirements of data protection in the telecommunication industry,this article adheres to the"data-centric"security protection concept,creates a"cryptography security integration"personal information protection plan,and integrates the personal information protection concept into enterprise operation management.The entire process of personal information protection has promoted the internalization of personal information protection compliance requirements into the proactive actions of enterprises and organizations,and an effective defense-in-depth front of personal information and important data can be constructed.
作者
金潇
陈兴
董胜亚
Jin Xiao;Chen Xing;Dong Shengya(China National Telecom Group Co.,Ltd.,Beijing 100033)
出处
《网络空间安全》
2021年第4期43-53,共11页
Cyberspace Security
关键词
个人信息保护
商用密码
以数据为中心
密码安全一体化
personal information protection
commercialcryptography
data-centric
cryptography security integration
作者简介
金潇(1988-),女,满族,北京人,北京邮电大学,硕士,主要研究方向和关注领域:网络和信息安全;陈兴(1988-),男,汉族,江苏扬州人,南京邮电大学,硕士,主要研究方向和关注领域:数据安全;董胜亚(1987-),男,汉族,河南项城人,北京邮电大学,硕士,主要研究方向和关注领域:网信安全。
