PKI/CA guarantee the security of financial funds system

1. Security Requirements

In order to strengthen the centralized control of internal funds, group Enterprises will set up their own financial capital system to carry out the internal fund Management and fund circulation of the group. However, because of the wide and openness of the network, so that the flow of capital information in the network in the process of a lot of security risks, such as: Can not confirm the user's true and effective identity, illegal users can steal money through the network information, can impersonate legitimate users to send false information, In-house financial staff can also deny statements made and approved, and so on. These, will give the enterprise financial capital Information security and management has a great impact, the collection up, financial capital system security requirements are as follows:

1) Authenticity of user identity

2) Transfer of data confidentiality

3) Data Tamper resistance

4) Legal compliance requirements of electronic data

5) Strengthen the Enterprise internal certificate management

2. Programme overview

Depending on the security requirements of the system, the overall framework of the solution consists of the following basic ideas:

(a) to the group headquarters financial personnel, molecular company financial personnel issued Usbkey (digital certificate), users use Usbkey login financial capital System, improve login security, prevent "user name + password" stolen risk;

(b) In the key operation of the financial personnel, the use of Usbkey for electronic signature, and two times identity authentication, to ensure the authenticity of business operation behavior;

(iii) Electronic signature of key data and documents to prevent the operation of anti-repudiation and to provide effective electronic evidence for post-electronic forensics.

650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M00/77/27/wKiom1ZkRDXTMYxxAAFM3G_f28c044.png "title=" Anquanguankong01.png "alt=" Wkiom1zkrdxtmyxxaafm3g_f28c044.png "/>

PKI/CA guarantee the security of financial funds system