Ukuchongwa uqinisekiso: nezimaphambili ezingundoqo

Ukuchongwa ungqinisiso asisiseko software and hardware yokhuseleko mihla, njengoko naziphi na ezinye iinkonzo ikakhulu eyenzelwe nenkonzo kwezi zifundo. La magama bamele uhlobo umgca wokuqala sokuzithethelela, ukuqinisekisa ukhuseleko yendawo ulwazi mbutho.

Yintoni na?

Ukuchongwa ungqinisiso abe imisebenzi eyahlukileyo. Okokuqala inika kwisifundo (umsebenzisi okanye inkqubo esebenza egameni) ithuba ukuxelela igama labo. Esebenzisa ububhali Ezecala lesibini uqinisekile ngokupheleleyo ukuba ngokwenene lo mbandela lowo lowo ubanga ukuba. Amaxesha amaninzi, abe ukuchongwa ntonye kunye zobubhali indawo ibinzana elithi "Post igama" yaye "ububhali".

Bona ngokwabo yahlulwe iintlobo eziliqela. Okulandelayo, sicinga ukuba ukuchongwa kunye ungqinisiso nokuba enza ntoni na.

ungqinisiso lwendawo

Lo mbono ubonelela iintlobo ezimbini: indlela enye, izigulana ezo kufuneka kuqala ube kumncedisi ukuqinisekisa, yaye amabini, oko kukuthi, xa isiqinisekiso efanayo lwenziwa. Umzekelo wendlela indlela yokuqhuba ukuchongwa umgangatho kunye uqinisekiso kwabasebenzisi - ukuba ukungena kwinkqubo ethile. Ngoko ke, iintlobo ezahlukeneyo ungasetyenziswa izinto ezahlukahlukeneyo.

Kwindawo yomsebenzi womnatha, apho ukuchongwa uqinisekiso lwabasebenzisi ezenziwa kwiindawo amaqela abasasazekileyo, hlola le nkonzo zizakubalulwa iinkalo ezimbini eziphambili:

• elisebenza umqinisekisi;
• indlela yayiququzelelwe ngokutshintshiselana ungqinisiso data kunye nokuchongwa kunye nezokhukhusela ngayo.

Ukuqinisekisa ubunyani bayo, isihloko kufuneka inikezelwe kwenye yezi maziko alandelayo:

• ulwazi oluthile yena uyazi (inombolo, igama, isitshixo ekhethekileyo lokufihla, etc ...);
• into ethile enakho (ikhadi lobuqu okanye elinye icebo ukuba injongo efanayo);
• into ethile, leyo yeyona nto kuyo (pamwe, ilizwi okanye enye lokuzazisa esingu kunye uqinisekiso yabasebenzisi).

features system

Kwimeko-bume womnatha evulekileyo, amaqela musa ukuba indlela omthembileyo, yaye kuthiwa ngokubanzi, iinkcukacha ezosulela yi esifundo ekugqibeleni kwahluka ulwazi ezifunyenweyo esetyenziselwa ububhali. Kufuneka ukhuseleko sniffer esebenzayo passive network, oko kukuthi, ukhuseleko ngokuchasene zilungiso, iimbalelwano okanye ukudlalwa data ezahlukeneyo. transfer Password ukhetho kwi esicocekileyo eyanelisayo, kwaye nje ayikwazi ukugcina mini, passwords yoguqulelo, kuba azinikezelwanga, ukhuseleko ukudlala. Kungenxa yoko le nto namhlanje isetyenziswa iprotocol ungqinisiso ezimbaxa ngakumbi.

lokuzazisa ezinokuthenjwa kunzima nje kuphela ngenxa ezahlukeneyo izisongelo womnatha, kodwa ngenxa yezizathu ezininzi ezahlukeneyo nezinye izizathu. Eyokuqala phantse naluphi ungqinisiso iqumrhu kufuneka afike, okanye amanga okanye ubuchule. ukungaqondani phakathi ukuthembeka kwenkqubo esetyenziswayo kwakhona langoku, kwelinye icala, kunye nomphathi wendlela okanye umsebenzisi amaziko - kwelinye icala. Ngenxa yoko, ngenxa yezizathu zokhuseleko efunekayo ethile rhoqo cela umsebenzisi ukuphinda-ukuqaliswa ungqinisiso ingcaciso yaso (njengoko kunokuba abe nako ukuhlala nabanye abantu), kwaye idala ingxaki ezongezelelweyo nje kuphela, kodwa kwandisa kakhulu ithuba ukuba umntu unako ukubancina ulwazi igalelo. Ukongeza, ukuthembeka ukhuseleko kuthetha igalelo elibonakalayo ixabiso layo.

iinkqubo ukuchonga uqinisekiso lwale mihla luxhasa ingqikelelo umqondiso-on eyodwa kwinethiwekhi, leyo kakhulu tiendlekela iimfuno ngokwemiqathango ngumsebenzisi-hlobo. Ukuba umgangatho womnatha loshishino unalo ezininzi neenkonzo zolwazi, obonelela nokwenzeka ejikeleza ozimeleyo, ngoko ke ulawulo ezininzi lwe data yobuqu kuba luxanduva kakhulu. Okwangoku akunakwenzeka noko bathi ukusetyenziswa kophawu-on enye ukuya kumsebenzi womnatha eziqhelekileyo, njengoko izisombululo lubalaseleyo ukuba angekayazi eyona nto.

Ngenxa yoko, abaninzi bazama ukufumana kwizibhambathiso phakathi ukufikeleleka, lula kunye nokuthembeka-mali, nto leyo enika yesazisi / ububhali. ugunyaziso lomsebenzisi kule meko yenziwa ngokwe imithetho ngamnye.

ingqalelo eyodwa kufuneka ihlawulwe yokuba inkonzo isetyenziswa kungenziwa elikhethwe njenge into zokuhlaselwa nokufumaneka. Ukuba inkqubo uqwalaselo senziwe ngendlela yokuba emva inani zokulinga bengangenanga ithuba ibitshixiwe, ngoko umhlaseli enokuthintela umsebenzi abasebenzisi ezisemthethweni ngu amaqhosha nje ezimbalwa.

ungqinisiso lwephaswedi

Inzuzo ephambili yale nkqubo kukuba ilula kakhulu yaye iqhelekile kakhulu. Password kudala isetyenziswa yi iinkqubo zokusebenza kunye nezinye iinkonzo, kunye nokusetyenziswa ngokufanelekileyo zokhuseleko enikiweyo, owamkelekileyo kakhulu kwimibutho ezininzi. Kwelinye icala, xa iseti eqhelekileyo iimpawu yeenkqubo ezinjalo indlela olubuthathaka kakhulu apho yesazisi / ungqinisiso ukuze iphunyezwe. Ugunyaziso kule imeko silubona ilula, ngenxa yokuba passwords kufuneka esimnandi, kodwa kunzima ukuthelekelela indibanisela ezilula, ingakumbi xa loo mntu uyazi obonelela ngumsebenzisi othile.

Maxa wambi kuyenzeka ukuba passwords zenziwa, isimiso, imfihlo, njengoko amaxabiso amahle asezantsi elikhankanyiweyo namaxwebhu athile, kwaye ayisoloko emva kokuba inkqubo ifakiwe, uyitshintshe.

Xa ufaka igama lakho ungabona, kwezinye iimeko, abantu bade basebenzise izixhobo ezikhethekileyo zokukhanyisa.

Abasebenzisi, kwizifundo eziphambili yokuchonga kunye ungqinisiso, passwords badla wazise oogxa kwabo ngamaxesha athile zitshintshile umnikazi. Ngethiyori, kwiimeko ezinjalo bekuya kuba echanekileyo ngakumbi ukuba usebenzise ulawulo ukufikelela ezikhethekileyo, kodwa kusenziwa ayikho ukusetyenziswa. Ukuba igama bayazi abantu ababini, oko kwandisa kakhulu kakhulu amathuba ukuba ekupheleni kwayo uze ufunde ngakumbi.

Indlela yokulungisa ngayo?

Kukho izixhobo ezininzi ezifana ukuchonga ungqinisiso zikhuselwe. Icandelo Ulwazi nokulungiswa inshorensi hlobo lulandelayo:

• Ukuwiswa ukulinganiselwa ezahlukeneyo zobugcisa. Amaninzi imithetho kubude password kunye nomxholo abalinganiswa abathile.
• Office ukuphelelwa, okt ukuba kufuneka kufakwe ngamathuba athile.
• ukufikelela Limited ukuba ifayile basic password.
• Imida yenani lilonke imizamo ukuba ziyafumaneka xa ungena. Ngenxa yale bahlaseli kufuneka wenziwe kuphela iintshukumo ukwenza ukuchonga ungqinisiso kwakunye indlela yokuhlela ayinakusetyenziswa.
• Uqeqesho lokuqala abasebenzisi.
• Ukusebenzisa eyodwa software igama generator anokudala loo ukuhlanganiswa kuzo ngokwaneleyo emnandi nekulula.

Zonke ezi manyathelo ingasetyenziswa kuyo nayiphi na imeko, nokuba kunye passwords liya kusebenzisa ezinye iindlela ububhali.

password time-One

Ezi embodiments angentla ngebhegi, yaye kwimeko lokuvula ezihamba umhlaseli unako ukwenza imisebenzi ethile egameni lomsebenzisi. Kungenxa yoko le nto njengendlela ngamandla ukumelana ukuba ngowona sniffer womnatha zezenzi, sebenzisa amagama agqithisiweyo ngexesha elinye-ngawo ukuchongwa kunye nenkqubo ungqinisiso ukholosile kakhulu ngakumbi, nangona nje elula.

Okwangoku, elinye software kakhulu ethandwa ngexesha elinye-password wenkunkuma yinkqubo ebizwa S / endleke, eyakhutshwa yi Bellcore. Le ngcamango yale nkqubo kukuba kukho umsebenzi othile F, nto leyo eyaziwa kokubini umsebenzisi kunye ungqinisiso umncedisi. Le K imfihlelo isitshixo, eyaziwa kuphela umsebenzisi ethile.

Initial umsebenzisi administration, lo msebenzi lisetyenziswa ukuhlolwa izihlandlo eziliqela, ngoko ke umphumo igcinwe kwi umncedisi. Kamva, inkqubo ububhali ngolu hlobo lulandelayo:

1. Kwi inkqubo umsebenzisi i ukusuka kwiseva uza inani 1 ngaphantsi kwe inani lamaxesha esebenzisa umsebenzi kwiqhosha.
2. umsebenzi Umsebenzisi isetyenziselwa izitshixo lwasekhusini inani lamaxesha eyayisekwe kwi kwindawo yokuqala, ebezikuyo umphumo ithunyelwa nge womnatha ngqo ububhali umncedisi.
3. Umncedisi usebenzisa lo msebenzi ukuba ixabiso bakufumana, bathi ke umphumo nezithelekiswa ixabiso egcinwe ngaphambili. Ukuba iziphumo akufani, ngoko yesazisi lomsebenzisi lusekiwe, kwaye umncedisi igcina ixabiso elitsha, uze emva koko kunciphisa the counter ngamnye.

Ukuziqhelisa, ukuphunyezwa kwale mishini isakhiwo ngake xaka ngakumbi, kodwa kwavele ayinamsebenzi. Ekubeni umsebenzi ayibuyiseki umva, kwanokuba iimbalelwano iphasiwedi okanye ukufumana imvume yokungena kwi ububhali umncedisi ayiboneleli ukuba kungenzeka ukufumana isitshixo labucala kunye nayiphi na indlela ukuqikelela ukuba ncam iza kukhangeleka ngathi lokugqitha ngexesha elinye ilandelayo.

In naseRussia njengohlobo inkonzo emanyeneyo, isinyuko karhulumente ezizodwa - "inkqubo Ekhethekileyo yokuchonga / ungqinisiso" ( "Esia").

Enye indlela inkqubo uqinisekiso amanga neqiniso yokuba password entsha eveliswa ngamathuba elifutshane, nto leyo nayo ndaqonda ngokusebenzisa iinkqubo ezizodwa okanye amakhadi ezahlukeneyo smart. Kulo mzekelo, ububhali umncedisi kufuneka amkele ehambelana igama okuvelisa algorithm kunye ezithile iparameters ezinxulumene nayo, yaye ukongezelela, kufuneka abekho server clock ungqamaniso kunye client.

Kerberos

Kerberos ungqinisiso iseva okokuqala ukuvela phakathi kwiminyaka yoo-90 kwinkulungwane yokugqibela, kodwa ukususela ngoko wayesele wafumana ezininzi iinguqu ezibalulekileyo. Okwangoku, amacandelo ngamnye kwenkqubo akhoyo phantse kuzo zonke mihla inkqubo yokusebenza.

Eyona njongo iphambili yale nkonzo ukusombulula le ngxaki zilandelayo: kukho ethile yenethiwekhi non-ekhuselekileyo kunye nodes ifomu yayo kanzulu ezahlukeneyo abasebenzisi izifundo, yaye iseva kunye software client neenkqubo. iziko ngalinye elinjalo ekhoyo ngamnye isitshixo ngasese, kunye nezifundo ithuba lokubonisa ubunyani lwabo lwezifundo S, ngaphandle nje yena akayi ulungiselelo oko, kuya kufuneka ukuba ungabizi nje yena, kodwa ukubonisa ukuba uyayazi ezinye key secret. Ngelo xesha With akukho ndlela ukuthumela nje bejonge ngasese S zakho eziphambili njengokuba kuqala olu thungelwano evulekileyo, yaye ukongezelela, S akazi, yaye, e-siseko, ukuba bangamazi. Kule meko, sebenzisa iteknoloji umboniso ngaphantsi ezizicaceleyo ulwazi loo lwazi.

Electronic yesazisi / uqinisekiso ngokusebenzisa inkqubo Kerberos olunika ukusetyenziswa kwayo njenge elithenjiweyo wesithathu, nto leyo eye ulwazi malunga izitshixo ezifihlakeleyo iziza iinkonzo kwaye kubanceda ekwenzeni ungqinisiso pairwise xa kuyimfuneko.

Ngenxa yoko, iklayenti kuqala abanokuthunyelwa umbuzo equlethe ulwazi oluyimfuneko ngayo, kwakunye inkonzo eceliweyo. Emva koku, Kerberos isinika uhlobo itikiti into ubufihliwe isitshixo ofihlakeleyo kumncedisi, kwakunye nekopi ezinye i data evela kuyo, nto leyo isitshixo ofihlakeleyo client. Kwimeko ukuba kufunyaniswe ulwazi umxhasi lowo ziqala besilungiselelwe, oko kukuthi, waba nako ukubonisa ukuba iqhosha labucala yaziwa nguye ngokwenene. Oku kubonisa ukuba umxhasi lowo mntu ngalo.

ingqalelo eyodwa kufuneka apha kuthatyathwa ukuqinisekisa ukuba ukudluliselwa izitshixo emfihlekweni zenziwa kwi-network, kwaye zisetyenziswa kuphela encryption.

uqinisekiso ngokusebenzisa iibhayometrikh

Iibhayometrikh kubandakanya indibanisela automated yesazisi / uqinisekiso abantu zadweliswa ngokobunjani zokuziphatha okanye nokomzimba. iindlela Physical zokuzazisa kunye ungqinisiso zinika retina scan kunye iliso inwebu, lweminwe, ubuso nejiyometri ngesandla, kwakunye nolunye ulwazi lobuqu. Ezona mpawu zokuziphatha iquka indlela yomsebenzi kunye yezitshixo kunye Dynamics utyikityo. zokufundisa ezi kucalulo lweempawu ezahlukeneyo ilizwi lomntu, kwakunye njengosuku lokuqaphela ukubaluleka intetho yakhe.

Iinkqubo yesazisi / uqinisekiso kunye Encryption olunjalo zisetyenziswa kakhulu kumazwe amaninzi ehlabathini jikelele, kodwa ixesha elide, ukuba iindleko eziphezulu kakhulu nokuntsonkotha ukusetyenziswa. Kutshanje, imfuno iimveliso sebhayometriki liye landa kakhulu ngenxa kuphuhliso lwe-e-commerce, ngenxa yokuba, ukususela kwinqanaba umbono lomsebenzisi, kulula kakhulu ukuba niyinikele ngokwayo, kunokuba ukukhumbula ulwazi. Ngako oko, imfuno kudala unikezelo, ngoko kwimarike yaqala ukubonakala iimveliso ephantsi amaxabiso kakhulu, apho ubukhulu becala ijolise ingqalelo weminwe.

Xa uninzi amatyala, iibhayometrikh isetyenziswa idityaniswe nezinye Ama ezifana amakhadi smart. Amaxesha amaninzi ungqinisiso esingu kuphela umgca wokuqala zokhuselo kwaye isebenza njengendlela yokuphucula i-smartcard, kuqukwa neemfihlo ezahlukeneyo lokufihla. Xa usebenzisa iteknoloji, itemplate esingu egcinwe kwikhadi efanayo.

Umsebenzi entsimini iibhayometrikh liphezulu ngokwaneleyo. inkampani ezifanelekileyo ezikhoyo, kwakunye umsebenzi esebenzayo kakhulu sisendleleni emgangathweni iinkalo ezahlukeneyo ubuchwepheshe. Namhlanje sibona ezininzi amanqaku yentengiso ubugcisa sebhayometriki zithiwe thaca njengendlela efanelekileyo yokunikezela ukwanda ukhuseleko kwaye ngaxeshanye ezifikelelekayo kwinginginya.

Esia

inkqubo yokuchonga kunye ungqinisiso ( "Esia") yinkonzo ekhethekileyo zenzelwe ukuqinisekisa ukuphunyezwa kwimisebenzi eyahlukeneyo enxulumene ukuqinisekiswa ukuchana sicelo kunye namalungu ezinjengentsebenziswano intsebenziswano xa kuthe kwakho naziphi na iinkonzo zikamasipala okanye zoluntu nge-elektroniki.

Ukuze ukufikelela "portal olunye izakhiwo zikarhulumente", kwakunye naziphi na ezinye iziseko ezingundoqo iinkqubo zolwazi lwe-e-government ezikhoyo, kufuneka kuqala ubhalise le akhawunti yaye ngenxa yoko, ukufumana AEDs.

amazinga

Portal kwenkqubo ohlangeneyo ukuchonga ungqinisiso ibonelela ngamanqanaba amathathu ezisisiseko akhawunti ngabanye:

• Lula. Kuba ukubhaliswa kwalo ziquka nje igama ezokuqala nezokugqibela zakho, ngokunjalo ezinye ijelo ethile lonxibelelwano ngohlobo idilesi ye email okanye ngeselula. Lo kwinqanaba lokuqala, apho umntu onika ufikelelo kuphela uluhlu eliqingqiweyo lweenkonzo ezahlukeneyo zikarhulumente, kwakunye izakhono iinkqubo zengcaciso ezikhoyo.
• Standard. Ukuze ufumane ekuqaleni kuyimfuneko ukukhupha i-akhawunti lula, yaye ke kwakhona ukunika ulwazi olongezelelweyo, kuquka iinkcukacha evela kwinani ipasipoti-akhawunti ngamnye inshorensi. Olu lwazi ngokuzenzekelayo lukhangelwe ngenkqubo yolwazi ye Pension Fund, kwakunye Federal Imfuduko Service, kwaye, ukuba vavanyo yimpumelelo, le ngxelo aguqulwa ukuya kwinqanaba eqhelekileyo, kuvula umsebenzisi ukuba uluhlu eyandisiweyo yeenkonzo zikarhulumente.
• Kuqinisekisiwe. Ukuze ufumane le level-akhawunti, inkqubo ohlangeneyo ukuchonga ungqinisiso ifuna abasebenzisi kwi-akhawunti yesiseko, kwakunye nobungqina bokuzazisa igama lakhe, nto leyo yenzelwa ngokusebenzisa ukutyelelwa lisebe inkonzo eligunyazisiweyo okanye ngokuthi ifumane i ikhodi kusebenze nge ileta ebhalisiweyo. Kwimeko ukuba isiqinisekiso ngamnye yimpumelelo, le ngxelo iya aye kwinqanaba entsha, kwaye umsebenzisi kuya ukufikelela uluhlu olupheleleyo lweenkonzo zoluntu ezifunekayo.

Ngaphandle kwento yokuba iinkqubo zisenokubonakala entsonkothileyo ngokwaneleyo ukuze ubone uluhlu olupheleleyo lwe data efunekayo kunokuba ngqo kwi website esemthethweni, ngoko kunokwenzeka ukugqiba ubhaliso iintsuku ezimbalwa.