云环境下商用密码应用研究

Research on the Application of Commercial Cryptography in Cloud Environments

摘要

密码是保障网络与信息安全的核心技术和基础支撑，也是维护网络与信息安全最有效、最可靠、最经济的核心技术手段。 因此，针对云环境（简称：云上）的场景应用特点，如何正确有效应用商用密码技术解决网络和信息安全问题，是本文的 研究关键所在。鉴于此，本文详细剖析了商用密码在云上的应用特点与面临问题，明确了云上场景商用密码应用的普适性 需求，构建了云上密码应用服务支撑体系，并结合应用实践体现其示范价值。本研究成果可为铁路行业体系化推进商用密 码落地应用提供理论指导与实践参考。

Abstract

Cryptography is the core technology and fundamental support for safeguarding network and information security, as well as the most effective, reliable, and economical core technical means to maintain network and information security. Therefore, aiming at the characteristics of scenario applications in cloud environments (abbreviated as: on the cloud), how to correctly and effectively apply commercial cryptography technology to solve network and information security problems is the key focus of this research. In view of this, this paper elaborates on the application characteristics and facing problems of commercial cryptography on the cloud, clarifies the universal needs of commercial cryptography application in on-cloud scenarios, constructs a commercial cryptography application service support system on the cloud, and demonstrates its exemplary value combined with application practices. The research results can provide theoretical guidance and practical reference for the systematic promotion of the implementation and application of commercial cryptography in the railway industry.

关键词

云上 / 云密码 / 商用密码 / 密码资源池 / 应用服务支撑平台

Key words

Cloud-based / Cloud Password / Commercial Cryptography / Password Resource Pool / Application Service Support Platform

参考文献

[1] 《中国信息安全》杂志2023年第7期.

[2] 吴善杰, 国产商用密码在信息系统数据安全防护领域的应用[J]. 信息安全与通信保密, 2025(8):62-72.

[3] 网御星云,云计算环境商用密码应用安全建设体系框架研究与思考.

[4] 霍炜, 郭启全, 马原. 《商用密码应用与安全性评估》. 北京: 电子工业出版社, 2020.

[5] 黄昌熙, 郑志永, 孙雪冬, 等. 云环境下基于国密算法的密码服务平台建设思路探讨[J]中国新通信. 2022, 24(8).DOI:10.3969/j.issn.1673-4866.2022.08.039.

[6] GM. 信息系统密码应用测评要求: GM/T 0115-2021[S]. 2021.

[7] 李玮, 花小齐. 试析云计算环境下网络信息安全技术发展[J]. 网络安全技术与应用. 2024,(5).DOI:10.3969/ j.issn.1009-6833.2024.05.026.

基金资助

“铁路商用密码体系架构及应用研究”

子课题2“铁路商用密码技术体系及关键技术研究”(WJZG-CKY-2024041(2024P02))