Ukukhomba kanye ukuqinisekiswa: imiqondo eyisisekelo

Ukukhomba kanye ukuqinisekiswa ziyisisekelo software kanye hardware zokuphepha yesimanje, njengoba nanoma yimaphi amanye amasevisi ngokuyinhloko senzelwe isevisi leto tifundvo. Lezi imiqondo ukumela uhlobo zokuqala zokuzivikela, ukuqinisekisa ukuphepha kolwazi isikhala inhlangano.

Kuyini lokhu?

Ukukhomba kanye ukuqinisekiswa zinemisebenzi eyahlukene zibuye. Eyokuqala ihlinzeka kuncike (umsebenzisi noma inqubo osithathayo isinyathelo egameni) ithuba ukutshela igama labo siqu. Esebenzisa ubuqiniso ehlangothini lwesibili uyaqiniseka ngokuphelele ukuthi ngempela le ndaba kulowo uthi kube. Ngokuvamile, njengoba ukuhlonza emagama lafanako ukuqinisekiswa esikhundleni inkulumo ethi "igama Thumela" futhi "ukuqinisekiswa".

Bona zihlukaniswe izinhlobo eziningana. Ngokulandelayo, sicabanga ukuthi ukuhlonza kanye ukuqinisekiswa nokuthi ziyini lezo zinto.

ukuqinisekiswa

Lo mqondo uhlinzekela izinhlobo ezimbili: esebenza ngendlela eyodwa, iklayenti kufanele uqale ukufakazela kwiseva ukufakazela ubuqiniso, futhi zamazwe amabili, okungukuthi, lapho isiqinisekiso mutual selenziwe. Isibonelo esingokoqobo ukuqhuba ukuhlonza ejwayelekile futhi ukuqinisekiswa abasebenzisi - iwukuba ungene ku-uhlelo oluthile. Ngakho, kungaba izinhlobo ezahlukene lisetshenziswe izinto ezihlukahlukene.

Encwadini isimo senhlalo, lapho ukuhlonza kanye ukuqinisekiswa abasebenzisi senziwa amaqembu abahlakazekile bengaba ngokwendawo, ukuhlola isevisi is zihlukaniswa izici ezimbili eziyinhloko:

• osithathayo isinyathelo umqinisekisi;
• kanjani kwakuhlelwa exchange of idatha ubuqiniso kanye ukuhlonza futhi indlela yokuzivikela.

Ukuze uqinisekise ubuqiniso bayo, kuncike kumele wethulwe omunye izinhlangano ezilandelayo:

• ulwazi oluthile lapho uyazi (inombolo siqu, iphasiwedi, ukhiye ekhethekile cryptographic, njll ...);
• into ethile ungumnikazi (ikhadi siqu noma ezinye idivayisi kokuba injongo efanayo);
• into ethile, okuyinto ingxenye ke (zeminwe, izwi noma ezinye ukuhlonza yebhayomethrikhi futhi ukuqinisekiswa abasebenzisi).

izici uhlelo

Esikhathini evulekile inethiwekhi imvelo, amaqembu ungenalo endleleni Bathembela, futhi kuthiwa ngokuvamile, ulwazi wadluliselwa isihloko angagcina lingafani Imininingwane wathola futhi usetshenziselwa ukufakazela ubuqiniso. ukuphepha Edingekayo yekwentiwa inethiwekhi sniffer, okungukuthi, isivikelo izilungiso, ukucabhela noma ukudlala idatha ezahlukene. ukudluliselwa Iphasiwedi inketho ecacile akuyona egculisayo, futhi nje akakwazi ukuzisindisa! ngosuku, namaphasiwedi ebethelwe, ngoba enikeziwe, Ukuvikelwa ukudlala. Yingakho namuhla isetshenziswa eziyinkimbinkimbi ukuqinisekiswa yezifiso.

ukuhlonza Esinokwethenjelwa kunzima hhayi kuphela ngenxa ezihlukahlukene inethiwekhi izinsongo, kodwa futhi ngoba ezihlukahlukene ezinye izizathu. Eyokuqala cishe iyiphi inhlangano ubuqiniso ingase wathunjwa, noma amanga noma Ukuthola. a ukungezwani phakathi ukuthembeka asetshenziswayo ukhona, ngakolunye uhlangothi, kanye nomqondisi wesistimu noma umsebenzisi izindawo - ngakolunye. Ngakho, ngenxa yezizathu zokuphepha ezidingwa nabanye imvamisa cela umsebenzisi kabusha ukwethulwa kolwazi yayo ukuqinisekiswa (njengoba esikhundleni kungase kudingeke ahlale abanye abantu), futhi hhayi kuphela kudala izinkinga ezengeziwe, kodwa futhi kakhulu kwandisa amathuba ukuthi umuntu angakwazi ungamumbi Imininingwane input. Ngaphezu kwalokho, ukuthembeka Ukuvikelwa kusho nomthelela obalulekile ukubaluleka kwayo.

Modern ukuhlonza kanye ukuqinisekiswa izinhlelo ukusekela nomqondo ngemvume, ku-olulodwa kunethiwekhi, okuyinto ngokuyinhloko elikhuthaza izidingo ngokuya kalula. Uma izinga inethiwekhi yenkampani has a lot of zolwazi, ukuhlinzeka ukuthi kungenzeka i ukusakazwa ezimele ke ekuphathweni amaningi kwedatha yomuntu siqu kuba osindayo. Okwamanje kusenzima akukwazeki ukuthi ukusetshenziswa ukungena ngemvume ku-olulodwa kunethiwekhi kuyinto evamile, njengoba izixazululo evelele azikakabi kwakhiwa.

Ngakho, abaningi uzama ukuthola ukusilela phakathi ukuyikhokhela, lula futhi lithembekile izimali, esinikela ukuhlonza / ukuqinisekiswa. ukugunyazwa Umsebenzisi kulokhu wenziwa ngokuvumelana nezimiso ngabanye.

ngokukhethekile kufanele ikhokhwe yokuthi isevisi isetshenziswa kungenziwa kukhethwe njengoba into ukuhlaselwa ekutholakaleni. Uma ukucushwa kwesistimu senziwa ngendlela yokuthi ngemva inamba yokuzama yehlulekile ukungena kungenzeka ikhiyiwe, ke umhlaseli ungayeka operation abasebenzisi esisemthethweni by okhiye ambalwa nje.

ukuqinisekiswa kwegama lokungena

Inzuzo main kwalesi simiso ukuthi ilula kakhulu futhi ezijwayele iningi. Amaphasiwedi Sekuyisikhathi eside esetshenziswa izinhlelo zokusebenza kanye namanye amasevisi, kanye nokusetshenziswa okufanele yokuphepha enikezwe, okuyinto ngempela eyamukelekayo yezinhlangano kakhulu. Ngakolunye uhlangothi, nge isethi ezivamile izici izinhlelo zinjalo izindlela umpofu ngawo kungenzeka ukuhlonza / ukuqinisekiswa awenziwanga. Ukugunyaza kulokhu kuba lula, ngoba amaphasiwedi kumele kube esimnandi, kodwa akunzima ukuqagela inhlanganisela elula, ikakhulukazi uma lowo muntu uyazi okuthandwa umsebenzisi othile.

Ngezinye izikhathi kuyenzeka ukuthi amaphasiwedi, isimiso, hhayi avalelwe, njengoba amanani kuhle ejwayelekile eshiwo kumadokhumenti ethize, futhi ngaso sonke isikhathi emva uhlelo ifakiwe, ukuzishintsha.

Uma ufaka iphasiwedi yakho ungabona, kwezinye izimo, abantu ngisho ukusebenzisa amathuluzi ezikhethekile optical.

Abasebenzisi, izihloko eyinhloko ukuhlonza kanye ubuqiniso, amaphasiwedi ngokuvamile wazise nozakwethu kulabo ngezinye izikhathi ziye zashintsha umnikazi. Okwazekayo, ezimweni ezinjalo kuyoba lesifanele xaxa ukusebenzisa ekhethekile ukufinyelela izilawuli, kodwa umkhuba akusiyo iyasebenza. Futhi uma iphasiwedi ukwazi abantu ababili, it is kakhulu kwandisa kakhulu amathuba ukuthi ukuphela kwayo futhi ufunde kabanzi.

Kanjani ukukulungisa?

Kukhona amathuluzi amaningana ezifana ukuhlonza kanye ukuqinisekiswa ingavikelwa. I-information processing ingxenye kungase ukuthathelwa umshuwalense elandelayo:

• Ukunqunywa ukulinganiselwa ezihlukahlukene yezobuchwepheshe. Ngokuvamile bebeka imithetho ku iphasiwedi ubude okuqukethwe ezinye izinhlamvu.
• Ihhovisi iphasiwedi lokuphelelwa isikhathi, okusho ukuthi kudingeka ukushintshwa ngezikhathi ezithile.
• ukufinyelela Kunqunyelwe ifayela iphasiwedi eziyisisekelo.
• Umkhawukho wesikhathi inani eliphelele imizamo kuhlulekile ukuthi ayatholakala uma ungena ngemvume. Ngenxa yalokhu abahlaseli kumele kwenziwe kuphela izenzo ukwenza ukuhlonza kanye ubuqiniso kanye indlela ukuhlunga ayikwazi ukusetshenziswa.
• ukuqeqeshwa owandulelayo abasebenzisi.
• Ukusebenzisa ezikhethekile iphasiwedi isofthiwe generator ukuthi ungakha inhlanganisela enjalo okuyizinto ngokwanele omnandi futhi ongasoze.

Konke lokhu izinyathelo ingasetshenziswa noma kunjalo, ngisho noma kanye amaphasiwedi uyophinde asebenzise nezinye izindlela ubuqiniso.

amaphasiwedi kwesikhathi esisodwa

I embodiments kokungaphezulu esebenza, futhi nivule inhlanganisela umhlaseli uyakwazi ukwenza imisebenzi ethile egameni yomsebenzisi. Yingakho njengendlela yokuthola namandla amelana ukuthi kungenzeka azithele ngabandayo inethiwekhi sniffer, ukusebenzisa amaphasiwedi yesikhathi esisodwa ngazo ukuhlonza futhi uhlelo ukuqinisekiswa ivikeleke kakhulu, kodwa lithi akufanele ibe elula.

Okwamanje, omunye ethandwa kakhulu software yesikhathi esisodwa iphasiwedi generator kuyinto uhlelo okuthiwa S / KEY, ezikhishwe Bellcore. Umqondo oyisisekelo zalesi simiso ukuthi kukhona umsebenzi ezithile F, okuyinto kokubili umsebenzisi kanye iseva ubuqiniso ezaziwayo. Okulandelayo K ngokhiye oyimfihlo, eyaziwa kuphela umsebenzisi ethize.

Ngezinye kokuqala ukuphatha umsebenzisi, lo msebenzi isetshenziswa ukubhala izikhathi eziningana, bese umphumela igcinwa kwi-server. Ngemva kwalokho, le nqubo ubuqiniso simiswe ngalendlela lelandzelako:

1. On the uxhumano lomsebenzisi wohlelo lwangaphakathi kusukela kuseva kuziwa inomboro 1 ngaphansi kwenani izikhathi usebenzisa umsebenzi ukuze ukhiye.
2. umsebenzi Umsebenzisi isetshenziswa okhiye imfihlo kunombolo yezikhathi imisiwe iphuzu lokuqala, ngalokho yi uthunyelwa nge inethiwekhi ngqo iseva ubuqiniso.
3. Iseva isebenzisa lo msebenzi nenani etholwe, bese umphumela uqhathaniswa ukubaluleka ngaphambilini egcinwe. Uma imiphumela ukufanisa ke ungubani yomsebenzisi Kumiswa, futhi iseva ilondoloza inani elisha, bese incipha counter ngomunye.

Ekusebenteni, ukusebenza kwalesi ubuchwepheshe has a isakhiwo kancane more xaka, kodwa okwamanje akunandaba. Njengoba umsebenzi awushintsheki, ngisho noma ukucabhela iphasiwedi noma ukuthola ukufinyelela okungagunyaziwe kwiseva ubuqiniso ayinikeze kungenzeka ukuthola ukhiye wangasese kanye nganoma iyiphi indlela ukuqagela ukuthi kuyoba kahle ibukeke iphasiwedi elandelayo yesikhathi esisodwa.

ERussia njengoba inkonzo enobunye, a ekhethekile isimo portal - "uhlelo Eyingqayizivele ukuhlonza / ukuqinisekiswa" ( "Esia").

Enye indlela ohlelweni oluqinile ukuqinisekiswa itholakala lokuthi ukuthi iphasiwedi entsha ekhiqizwa ngilokhu, okuyilona elisebenzayo futhi waqaphela ngokusebenzisa izinhlelo ezikhethekile noma amakhadi smart ezihlukahlukene. Kulokhu, iseva ubuqiniso Kufanele wamukele elihambisana iphasiwedi Generating algorithm kanye nemingcele ethile ehambisana nayo, futhi ngaphezu kwalokho, kufanele sibe khona njengoba iwashi ukuvumelanisa iseva kanye iklayenti.

Kerberos

Kerberos ukuqinisekiswa iseva okokuqala uvele maphakathi nawo-90s kwekhulu elidlule, kodwa kusukela ngaleso sikhathi wayeseboshwe wathola eziningi izinguquko ezinqala. Okwamanje, yezingxenye ngazinye ohlelweni zikhona cishe kuyo yonke yesistimu yokusebenza yesimanje.

Injongo eyinhloko le sevisi ukuxazulula inkinga elandelayo: kukhona athile enethiwekhi engavikelekile futhi ISIZINDA njengoba injalo kanzulu e ezihlukahlukene izifundo abasebenzisi, futhi iseva kanye ne-software iklayenti izinhlelo. Ibhizinisi ngalinye ezifana likhona ngabanye ukhiye eyimfihlo, futhi izifundo nge ithuba lokubonisa ukuthi ubuqiniso balo nendaba S, ngaphandle okuyinto uyomane sokuyokhonza ke, kuzomele hhayi kuphela azibiza, kodwa futhi ukuze ubonise ukuthi uyazi ezinye ukhiye eyimfihlo. Ngesikhathi esifanayo Nge ayikho indlela nje uthumele bebheke S wakho ngokhiye oyimfihlo njengoba okokuqala inethiwekhi evulekile, futhi ngaphezu kwalokho, S akazi, futhi, ngomqondo obanzi, akufanele limazi. Kulesi simo, sebenzisa kancane kuqondile ubuchwepheshe ngesibonakaliso ulwazi lolo lwazi.

Electronic ukuhlonza / ukuqinisekiswa nge-Kerberos uhlelo inikeza ukusetshenziswa kwaso njengoba ephathini othembekile wasithathu, umhla inokwaziswa mayelana okhiye Imfihlo iziza futhi bayawasiza enifeza ukuqinisekiswa pairwise uma kunesidingo.

Ngakho, iklayenti lokuqala elithunyelwe nombuzo equkethe ulwazi olufanele mayelana ke, kanye isevisi eceliwe. Ngemva kwalokhu, i-Kerberos umnikeza uhlobo ithikithi ukuthi lubhalwe ngekhodi nge ukhiye eyimfihlo leseva, kanye ikhophi enye idatha kuwo, okuyinto ukhiye secret amaklayenti. Endabeni ukuthi esunguliwe ulwazi iklayenti ukuthi ziqala ayehlose, okungukuthi, wakwazi ukubonisa ukuthi Ukhiye oyimfihlo bangamvezi ngempela. Lokhu kubonisa ukuthi iklayenti ungumuntu ngoba kuyo.

ngokukhethekile kufanele lapha zithathwe ukuqinisekisa ukuthi ukudluliselwa izikhiye imfihlo kungukuthi eyenziwa kunethiwekhi, futhi isetshenziswa kuphela ukubethela.

ukuqinisekiswa usebenzisa ibhayomethrikhi

Ibhayomethrikhi kuhilela ezenzakalelayo ukuhlonza / ukuqinisekiswa labantu ngokusekelwe izici zokuziphatha noma bokuphila. izindlela Physical yomazisi kanye ukuqinisekiswa unikeze i-retina scan iso cornea, iminwe, ubuso futhi isandla geometry, kanye eminye imininingwane yakho. I izici zokuziphatha futhi zihlanganisa isitayela umsebenzi nge ikhibhodi Dynamics isignesha. izindlela Kuhlanganiswe kukhona ukuhlaziywa izici ezihlukahlukene izwi lomuntu, kanye ukuqashelwa yokukhuluma kwakhe.

Okunjalo ukuhlonza / ukuqinisekiswa kanye ukubethela izinhlelo asetshenziswa kabanzi emazweni amaningi emhlabeni wonke, kodwa isikhathi eside, zingabantu zibiza kakhulu nokuba yinkimbinkimbi ukusetshenziswa. Muva nje, isidingo imikhiqizo yebhayomethrikhi ikhuphuke kakhulu ngenxa ukuthuthukiswa e-commerce, ngoba, kusukela iphuzu Ngenxa umsebenzisi, kulula kakhulu ukwethula uqobo, kuka ukukhumbula ulwazi oluthile. Ngakho, funa kudala ukuthengisela, ngakho emakethe yaqala ukubonakala imikhiqizo iphansana-ontengo yakhe yayinqunyiwe, okuyinto ngokuyinhloko igxile ukuqashelwa zeminwe.

Ngo iningi labantu izimo, ibhayomethrikhi isetshenziswa lihambisana namanye Kokokuqinisekisa ezifana amakhadi smart. Ngokuvamile ukuqinisekiswa yebhayomethrikhi kuphela zokuqala zokuzivikela futhi izenzo njengendlela yokuthola ekuthuthukiseni le smartcard, kuhlanganise izimfihlo ahlukahlukene cryptographic. Uma usebenzisa lokhu ubuchwepheshe, isifanekiso yebhayomethrikhi kugcinwa ekhadini efanayo.

Umsebenzi emkhakheni ibhayomethrikhi ngokwanele okusezingeni eliphezulu. Consortium ahambisanayo ekhona, kanye msebenzi uyaqhubeka elifanele ezicini ezihlukahlukene ubuchwepheshe. Namuhla sibona eziningi ukukhangisa izihloko ubuchwepheshe yebhayomethrikhi ethulwa njengoba iyindlela enhle yokunikeza ukuphepha anda futhi ngesikhathi esifanayo ezingabizi uquqaba.

Esia

uhlelo ukuhlonza kanye ukuqinisekiswa ( "Esia") iyisevisi ekhethekile eziklanyelwe ukuqinisekisa ukuqaliswa imisebenzi ehlukahlukene ehlobene ukuqinisekiswa ubuqiniso izicelo futhi amalungu interagency nokubambisana uma kwenzeka nanoma yimiphi imisebenzi kamasipala noma umphakathi ngesimo ngogesi.

Ukuze uthole ukufinyelela ku "I-portal Single yezakhiwo zikahulumeni", kanye nakwezinye izinhlelo zezokwaziswa zengqalasizinda ye-e-uhulumeni wamanje, uzodinga kuqala ukubhalisa i-akhawunti yakho futhi, ngenxa yalokho, wamukele i-PEP.

Amazinga

I-portal ye-identification ehlanganisiwe kanye nesistimu yokugunyaza inikeza amazinga amathathu ayisisekelo ama-akhawunti kubantu ngabanye:

• Kulula. Ukuze ubhalise, kwanele nje ukukhombisa igama lakho nesibongo, kanye nesiteshi esithile sokuxhumana ngesimo se-e-mail noma ikheli leselula. Leli yizinga eliyinhloko umuntu angathola ngalo kuphela uhlu olulinganiselwe lwezinsizakalo zomphakathi ezihlukahlukene, kanye namakhono ezinhlelo zezokwaziswa ezikhona.
• Standard. Ukwamukela, kufanele uqale ukukhipha i-akhawunti eyenziwe lula, bese unikeza imininingwane eyengeziwe, kufaka phakathi ulwazi kusuka kuphasiwedi yakho kanye nenombolo yomshuwalense ngamunye. Ulwazi olucacisiwe luhlolwe ngokuzenzakalelayo ngokusebenzisa izinhlelo zokwaziswa zesiKhwama sePensheni, kanye neSistimu Yokufuduka kweSifundazwe, futhi uma isheke liphumelele, i-akhawunti idluliselwa ezingeni elijwayelekile, elivula umsebenzisi uhlu olwandisiwe lwezinsizakalo zomphakathi.
• Kuqinisekisiwe. Ukuze uthole i-akhawunti enjalo, i-identification ehlanganisiwe kanye nesistimu yokugunyaza idinga ukuthi abasebenzisi babe ne-akhawunti ejwayelekile, kanye nokuqinisekiswa kobunikazi, okwenziwa ngokuvakashelwa komuntu siqu egatsheni lezinsizakalo ezigunyaziwe noma ngokuthola ikhodi yokusebenza ngeposi elibhalisiwe. Uma kwenzeka ukuthi ukuqinisekiswa kobunikazi kuphumelele, i-akhawunti izodlulela ezingeni elisha, futhi umsebenzisi uzokwazi ukuthola uhlu olugcwele lwezinsizakalo zomphakathi ezidingekayo.

Naphezu kokuthi izinqubo zingabonakala zilukhuni, empeleni, ungabona uhlu olugcwele lwemininingwane edingekayo ngqo kwiwebhusayithi esemthethweni, ukubhaliswa okugcwele kubonakala kunokwenzeka izinsuku ezimbalwa.