Tencent cloud commercial password compliance solution appears at the 2021 high-end Seminar on commercial password application innovation

With global big data 、 Cloud computing 、 Internet 、 The development of information technology such as the Internet of things , Commercial password products are becoming more and more popular , Password application is also deepening and expanding . However , Ensure the security of encryption policy , Detailed strategic planning for data encryption is required .

12 month 18 Japan ,2021 The high-end Seminar on commercial password application innovation was held , With the code “ Integrate into the new era 、 Enabling new developments ” The theme of , Focus on the presentation of China's commercial cryptography theory 、 technology 、 product 、 service 、 Application and other latest achievements , Jointly explore the future development of password industry . Xie can, senior researcher of Tencent security Yunding laboratory, attended the sub forum of the high-end Seminar on commercial password application innovation of the conference , And made 《 Tencent cloud business secret technology research and industry integration practice 》 Share the theme of .

Around the contradiction between data security compliance requirements and performance , Xie can analyzed the three core challenges faced by the current enterprise data security management , And Tencent cloud's best practices in dealing with data protection security compliance issues .

The present , Data has become a core factor of production , Industry 、 The digitization of government affairs has accelerated , Let the traditional industry find a new development engine , But at the same time , Data security is also on the agenda . Especially in some important information systems involving the national economy and the people's livelihood and basic information resources 、 Important industrial control systems 、 Social service oriented government information system and other fields , Data security is particularly important .

Under the traditional commercial password encryption scheme , Enterprises and institutions usually face several major pain points , One is the high development threshold 、 The implementation cycle is long ; Second, it is difficult to balance the relationship between data security and business performance ; Third, there is a lack of professional password talents , Lead to development 、 Management and operation and maintenance are stretched .

According to the needs and pain points in the process of practical application , Tencent Yunding laboratory has accumulated many years of data security management practice and technical capacity , Launch a one-stop commercial password compliance solution , Help finance and other key industries to reduce costs 、 Efficiently achieve application system password compliance .

In the specific scheme design , From the bottom 、 Middle level 、 The upper layer has a clear hierarchy , The underlying hardware is highly available 、 High performance hardware password resource pool service , The middle driver provides authentication and password services 、 Terminal password service 、 Network and communication security services 、 Data storage security services 、 Manage and configure security services 、 Compliance password scheme consulting service , The upper application interface is supported by an efficient and intensive cipher middle platform , Provide complete cloud product ecological integration and data security services and encryption on demand API/SDK service . Open up the upstream and downstream links of the business secret password service industrial chain , Build a model that can be applied to finance 、 Application of wisdom 、 Integrated security service capability support platform for city code and other scenes .

Compared with the traditional commercial cipher scheme , The scheme has several major features ：

One 、 Password as a service . Provide encryption free database , High performance scenario support , Minimal impact on database performance ; Unified access API/SDK, Reduce development costs ;

Two 、 Fusion architecture . Build a native compliance application architecture based on the compliance password service platform , brace “ Internet + industry ” Business

3、 ... and 、 Authors efficiency . Programme , Unified control , Dynamic extension , Improve the utilization of password infrastructure resources , Reduce maintenance costs ; Compliance , Combined with password ecology 、 Business Ecology , Minimize business transformation and compliance costs .

Four 、 Ecological protection . Cover secret assessment agencies 、 Password rectification organization 、 Innovative password products 、 Tencent application ecology 、 Software 、 Security integration developer ecosystem ;

In particular, it is worth mentioning that Tencent's proprietary cloud has passed the security assessment of commercial password applications with high scores by virtue of Tencent's secure one-stop commercial password compliance solution . In the face of high compliance costs 、 Inadequate security capabilities 、 The industry lacks mature transformation experience and various compatibility requirements , Tencent's proprietary cloud platform only 3 The transformation will be completed in three months , And the highest score in the cloud platform industry 85.84 Pass the secret evaluation .

at present , Tencent's commercial password compliance solution has been applied to the proprietary cloud TCE、 TenPay 、、 Enterprise WeChat 、 Health code 、WeCity、 Collaborative office and other industries ,“ Password as a service ” The way , It has been recognized by many industry customers and authoritative institutions .