Ukubethela kwebanga lezempi kwisitoreji samafu

Informatec Digital » Izinsiza » Ukubethela kwebanga lezempi kwisitoreji samafu

Uma ulondoloza ku ifu idatha yomuntu siqu, ulwazi lwentela, izithombe eziyimfihlo, noma ulwazi mayelana nenkampani yakhoUkuthembela kuphela kuphasiwedi kufana nokudlala i-roulette yaseRussia ngobumfihlo bakho. Nsuku zonke, kuvela ukwephulwa okusha kwezokuphepha, ukuhlaselwa kwe-ransomware, kanye nokuvuza kwedatha, okubonisa ukuthi isitoreji esiku-inthanethi ngaphandle kokubethela okuqinile kubeka engcupheni enkulu.

Lokho okubizwa ngokuthi "ukubethela kwebanga lezempi" sekuyindlela ejwayelekile uma sikhuluma ngakho vikela ulwazi olubucayi ngempela efwiniKodwa ngemuva kwalelo lebula lokumaketha kunemithetho esemthethweni. ama-algorithms acacile kakhuluIzitifiketi ezifana namamodeli okuphepha e-FIPS kanye "nolwazi olungenalo ulwazi" zenza umehluko phakathi kwedrayivu yefu elula kanye nesisombululo esiphephile ngempela.

Kusho ukuthini ngempela ukubethela kwe-military-grade efwini?

Uma umthengisi ekhuluma "ngokubethela kwebanga lezempi," cishe njalo usho ukusetshenziswa AES-256 njenge-algorithm eyinhloko yokubethela, indinganiso efanayo nevunywa yi-NSA ukuvikela ulwazi oluhlukaniswe njenge-TOP SECRET ngaphakathi kukahulumeni wase-United States.

Empeleni, lokhu kusho ukuthi amafayela akho abethelwe nge- 256-bit okhiyeLokhu kudala isikhala esikhulu sokusesha kangangokuthi, ngisho nangamandla ekhompyutha amanje nawesikhathi esizayo, ukuhlasela okunamandla angenakwenziwa kunoma yisiphi isimo esingokoqobo.

Ngaphezu kosayizi wokhiye, imininingwane yobuchwepheshe efana nendlela yokusebenza yokubethela (isb., i-XTS noma i-CFB), ukusetshenziswa kwe amavekhtha okuqalisa okungahleliwe kanye nezindlela zobuqotho ezifana ne-HMAC-SHA-512, ezikuvumela ukuthi ubone ngokushesha ukuthi othile ushintshe ingxenye eyodwa yefayela elibethelwe.

Endaweni yokugcina ephephile, ukubethela kwebanga lezempi akukhawulelwe efwini: kusebenza futhi amadrayivu e-USB abethelwe ngehadiwe, amadrayivu angaphandle avikelwe kanye nezixazululo zesipele ze-hybrid ezihlanganisa amafu namadivayisi angokoqobo.

Izindinganiso ze-FIPS, amazinga, kanye nokuthi yini ehlukanisa amasosha ebhizinisini

Ngale kwe-algorithm, umehluko phakathi kokumaketha okungenalutho nokuphepha okungathi sína uphawulwa yizitifiketi ezifana nokuthi I-FIPS 197 kanye ne-FIPS 140‑2/140‑3, ekhishwe ngaphansi kwesambulela se-NIST (National Institute of Standards and Technology).

I-homologation FIPS 197 Qinisekisa ukuthi ukusetshenziswa kwe-AES (kufaka phakathi i-AES-256) kwenziwe kahle, isibonelo kwimodi ye-XTS ukuvikela idatha kumayunithi okugcina idatha, okubaluleke kakhulu ukuqinisekisa ukuthi azikho iziphambeko ezincane ekubethelweni kwedatha.

Imithetho I-FIPS 140-2 kanye ne-FIPS 140-3 Izinga 3 Bahamba ibanga elide kakhulu: abadingi nje kuphela i-AES efanele, kodwa futhi bahlola imojuli ye-cryptographic iyonke, okuhlanganisa ukuphathwa kokhiye, ukuqinisekiswa, ukumelana nokuphathwa kwehadiwe ebonakalayo, kanye nezidingo zokusebenza eziqinile zeprosesa yokuphepha.

Abakhiqizi abanjengoKingston, ngezinhlobo zabo ze-IronKey kanye ne-VP50, badlula emijikelezweni ye ukuthuthukiswa nokuhlolwa eminyakeni eminingana Ukuze kutholakale lokhu kuvunyelwa, kwenziwa ukuhlolwa kwekhodi, ukuhlolwa ezindaweni zokucwaninga ezigunyazwe yi-NIST, kanye nokuhlolwa kokuphathwa ngokomzimba kwama-epoxy casings kanye nama-encapsulations.

Ngesikhathi esifanayo, ukuphepha "kwezinga lebhizinisi" kuvame ukuhilela ukubethela okunamandla nokuhlolwa kokungena okuzimele (njengalezo ezenziwa yi-SySS kuma-USB drive athile), kodwa akuhlali kufinyelela amazinga okuvikela ngokomzimba kanye nesitifiketi esidingwa uhulumeni oqinile noma indawo yezempi.

Ulwazi olungenalo ulwazi kanye nokubethela kusukela ekuqaleni kuze kube sekupheleni: ukuqhubekela phambili kwangempela kwezokuphepha

Kumongo wefu, ukukhuluma ngokubethela kwebanga lezempi ngaphandle kokukhuluma ngemodeli ulwazi olungenalutho Kuyisisombululo esibhakiwe kancane. I-algorithm ingase ingabi naphutha, kodwa uma umhlinzeki elawula okhiye bakho, angafunda idatha yakho.

Isevisi yokungabi nolwazi isebenza njengesisefo esisegumbini lokugcina impahla: Umhlinzeki unikeza indawo yokugcina impahla, kodwa wena unokhiye owodwa kuphela.Amafayela Zibethela kudivayisi yakho ngaphambi kokuhamba, futhi okhiye abalokothi bahambe noma bagcinwe kumaseva.

Kuhlelo olujwayelekile lokubethela amafu kusukela ekuqaleni kuya ekugcineni, ifayela ngalinye libethelwa endaweni yakini nge AES-256Ubuqotho bayo busayinwe noma buvikelwe yi-HMAC futhi buthunyelwa ngoxhumano oluphephile lwe-TLS, olukhiqiza uhlobo lokubethela "okuphindwe kabili": lokho kokuqukethwe kanye nokwesiteshi.

Uma wabelana ngamafayela, ukubethela okungalingani kuyaqala ukusebenza: ukhiye olinganayo wefayela uvikelwe nge I-RSA-2048 noma i-RSA-4096noma ngama-curve e-elliptic yesimanje, kusetshenziswa izinhlelo zokunamathisela ezivikelekile njenge-OAEP, ukuze umamukeli kuphela, onokhiye wakhe wangasese, akwazi ukuvula lowo khiye wefayela.

Le ndlela inomphumela obalulekile kumsebenzisi: uma ukhohlwa iphasiwedi yakho eyinhloko futhi ungenayo ikhophi yokhiye wakho wokutakula, akekho ongathola idatha yakhoNgisho nomhlinzeki, ngoba ayinayo i-backdoor yobuchwepheshe.

Izinsizakalo zesitoreji samafu ezibethelwe: ukubuka konke kwamanje

Imakethe yabahlinzeki abanikezayo isitoreji samafu esibethelwe ngamamodeli angenalo ulwazi Kuye kwanda kakhulu eminyakeni yamuva nje, ngezinketho zamahhala nezikhokhelwayo kanye nezindlela zobuchwepheshe ezahlukahlukene kakhulu.

Ngaphakathi kwezinsizakalo ezinezinhlelo zamahhala, sithola izixazululo ezisukela ezinketho ezihlukanisiwe, njengezinkundla ezithile ezisatshalaliswayo, kuya ezinsizeni zendabuko ezifana I-MEGA, i-Proton Drive, i-NordLocker, i-Sync.com noma i-Internxt, konke kunesici esifanayo: ukubethela ohlangothini lweklayenti kanye nokugcizelela ubumfihlo.

Izinhlelo zamahhala zivame ukuba phakathi 1 no-20 GB, kwanele amadokhumenti abalulekile, izithombe ezibalulekile, namafayela omsebenziKodwa ngokushesha ayisebenzi kahle kakhulu uma kusetshenziswa ubuchwepheshe noma imitapo yolwazi emikhulu yemidiya, lapho kudingeka khona ukushintshela ezinhlelweni ezikhokhelwayo.

Ngaphezu kwalokhu, kunezixazululo ezibekwe ngqo njengezinketho eziphephile esikhundleni sezinkunzi ezinkulu njengeDropbox noma i-OneDrive, kanye nezinye, njengeTresorit, eziziqhenya ngazo. ukubethela okuqinisekisiwe kwebanga lezempi, ukwakheka okuqinile kolwazi olungenalo ulwazi, kanye nokuhlolwa kwangaphandle okuqinisekisa ukuthi abakwazi ukufinyelela okuqukethwe komsebenzisi.

Izinsizakalo ezinolwazi oluqinile lokubethela kanye nolwazi olungenalo: izibonelo ezivelele

Phakathi kwabahlinzeki besitoreji samafu esibethelwe, amanye amagama ahlala evelela lapho kukhulunywa ngakho Ukuphepha okuthuthukisiwe kanye nobumfihlo bangempelakokubili eSpain nakwamanye amazwe.

MEGA Inikeza enye yezindawo zokugcina zamahhala eziningi kakhulu (20 GB) enokubhala okubhaliwe kusukela ekuqaleni kuya ekugcineni kanye nezinkinobho ezilawulwa ngumsebenzisi, izingxoxo ezibethelwe kanye nezingcingo zevidiyo, izixhumanisi ezivikelwe ngephasiwedi, kanye nokuqinisekiswa kwezinto ezimbili ukuvimbela ukufinyelela okungagunyaziwe.

I-Proton Drive, eseSwitzerland, yandisa ukubethela hhayi kuphela kokuqukethwe kwamafayela kodwa futhi naku- amagama abo kanye nemethadatha yokhiyeukuhlanganiswa ne-Proton Mail kanye nayo yonke indawo ye-Proton ukuze kunikezwe indawo ephelele yobumfihlo bedijithali ngaphansi kwemithetho yaseSwitzerland evikela kakhulu.

I-NordLocker Iziveza njengesevisi yokubethela kunokuba yifu elilula: isebenzisa inhlanganisela ye-AES-256, i-XChaCha20-Poly1305 kanye ne-Ed25519 ukuze isayine, kanye nesitoreji samafu esingakhethwa kanye nemodeli lapho abasebenzisi be-NordLocker kuphela abangabelana ngokuqukethwe komunye nomunye.

Vumelanisa.comIsekelwe eCanada, izibophezele ekutholeni ulwazi oluphelele oluvunyelwe ngokuzenzakalelayo kanye nokuhambisana nemithetho efana nokuthi I-GDPR kanye ne-PIPEDA, engeza izici zokusekelayo, ukwabelana okuphephile kanye nokuvumelanisa ngaphandle kwesidingo sokulungiselela izinketho ezithuthukisiwe.

OkungaphakathiNgakolunye uhlangothi, idlala ikhadi le-cryptography le-post-quantum ngokufaka ama-algorithms afana ne-Kyber-512, aklanyelwe ukumelana nokuhlaselwa okuvela kumakhompyutha e-quantum esikhathi esizayo, idela ukusebenza okuthile ngenxa ye- ukuphepha okulungiselelwe amashumi eminyaka ezayo.

Ukubethela kwebanga lezempi ezixazululweni ezifana neTresorit

Esinye sezimo ezithakazelisa kakhulu lapho kuhlaziywa igama elithi "ukubethela kwebanga lezempi" yilesi Tresorit, isevisi eye yahlolwa ngobuchwepheshe kanye nokuhlolwa futhi isakhiwo sayo sisekelwe ngqo ezindinganisweni ezisetshenziswa ohulumeni nezinhlangano ezisezingeni eliphezulu.

Ku-Tresorit, amafayela abethelwa endaweni nge- I-AES-256 kumodi ye-CFB, ngama-IV angahleliwe angu-128-bit ngenguqulo yefayela kanye nesendlalelo esengeziwe se-HMAC-SHA-512 ukuqinisekisa ukuthi ubuqotho bedatha abukwazi ukuguqulwa ngaphandle kokutholwa.

Ukushintshana kwezihluthulelo phakathi kwabasebenzisi ukuze babelane ngokuqukethwe kuphathwa ngokusebenzisa I-RSA-4096 ene-OAEP, kuyilapho amaphasiwedi eqiniswa nge-Scrypt (enezipharamitha ezilungisiwe ukuze zibe yi-CPU kanye nememori ebiza kakhulu), kulandelwe yi-HMAC ene-SHA-256 ukuthola okhiye abakhulu.

Ukuxhumana phakathi kweklayenti namaseva kuvikelwe yi- I-TLS 1.2 noma ngaphezuluukuze noma ngabe ithrafikhi ivinjiwe, kuzobonakala ama-blobs edatha avele abethelwe ngaphambi kokungena emhubheni we-TLS, okuqinisa ubumfihlo ngokwengeziwe.

Lo mklamo wokungabi nolwazi oluphelele ubuyekezwe yizinkampani zangaphandle ezifana ne-Ernst & Young futhi waphikiswa esidlangalaleni nge- inselele yokugenca okukhokhelwayo, okungaxazululwanga yinoma yimuphi umhlanganyeli isikhathi esingaphezu konyaka, naphezu kokubamba iqhaza kochwepheshe abavela emanyuvesi aphezulu.

i-pCloud, i-NordLocker kanye ne-MEGA: abaholi abathathu ekubethelweni kwamafu

Kulabo abafuna ukubethela okuqinile ngaphandle kokwenza izinto zibe nzima kakhulu, kunamagama amathathu avame ukuba phezulu ekuqhathaniseni: i-pCloud, i-NordLocker kanye ne-MEGAngayinye inezinzuzo zayo kanye nezici zayo.

pCloud Kuyipulatifomu eguquguqukayo kakhulu, enezinhlelo ezisukela ku-500 GB kuya ku-10 TB kanye nesici esiyingqayizivele sokunikeza ukubethela okungenalo ulwazi njengesengezo esikhokhelwayo (pCloud Crypto), engeza "ifolda evikelekile" ngaphakathi kwe-akhawunti ejwayelekile.

Lesi sici esengeziwe sivumela amafayela athile ukuthi avikelwe ngokubethela kwebanga lezempi, kuyilapho kugcinwa indawo yamafu yakudala enokusakaza okuhlanganisiwe kwe-multimedia, isidlali sevidiyo nomsindo, ukuphathwa kohlu lwadlalwayo, kanye nezinguqulo zamafayela.

I-NordLockerIdalwe yithimba le-NordVPN, isebenza njengebhokisi "lokubethela" lapho ungavikela khona amafayela endaweni futhi uwavumelanise nefu lawo, ngohlelo lwamahhala lwe-3GB kanye nezinketho ezikhokhelwayo ezifinyelela ku-2TB. Amanani anengqondo impela..

Amandla ayo asebulula bayo: donsa bese uphonsa ukuze ubhale ngemfihlo, isikhombikubona esihlanzekile, ukubethela kwesimanje, kanye nenqubomgomo yokungabhalisi kusuka ePanama, okwenza kube kuhle kakhulu kunoma ubani ofuna. vikela amadokhumenti okusebenza, izinkontileka noma idatha yamakhasimende.

MEGA Iqeda i-trio ngokunikeza isikhala samahhala kakhulu, indlela eyimfihlo kakhulu (umsebenzisi ulawula okhiye bakhe abayinhloko kanye nokubuyisa) kanye nezici ezengeziwe ezifana nengxoxo evikelekile, umlando weseshini kanye nokuqinisekiswa kwezinto ezimbili ukuze kumiswe ukufinyelela okusolisayo.

Ihadiwe yezinga lezempi: amadrayivu e-USB namadivayisi angokoqobo

Ukubethela kwe-military-grade akukhawulelwe efwini: amanye ama-USB drive nama-hard drive angaphandle nawo ayawahlanganisa. ama-crypto chip azinikele kanye nezimbobo ezenzelwe ukumelana nokuhlaselwa ngokomzimba kanye nokuphazanyiswa.

Amamodeli afana nochungechunge lwe-IronKey D500S noma lwe-S1000 afaka ama-cryptochip ahlukene okugcina amapharamitha okuphepha abalulekile (i-CSP), enezivikelo ezingeni le-silicone ezikwazi ukuzibhubhisa ukhiye uma zibona imizamo eminingi yokuhlasela.

Kwezinye izimo, iyunithi ngokwayo ingalungiselelwa zivinjwe unomphela Uma ithola ukuhlasela okunamandla okwesikhathi eside, izoyibhidliza idivayisi kunokuba ivumele umhlaseli asondele kudatha yangaphakathi.

Umehluko uma uqhathaniswa nedrayivu ye-USB eyisisekelo ebethelwe ngesofthiwe mkhulu kakhulu: ngaphezu kokubethela kwe-hardware ye-AES-256, kuhlanganisa futhi ama-casing avaliwe, ama-resin epoxy abonakala sengathi awasebenzi kahle, izindlela zokulwa nokungena kanye nezitifiketi ze-FIPS ezisezingeni eliphezulu.

Lokhu kwenza la mayunithi avame kakhulu izinhlangano zikahulumeni, amabutho, kanye nezinkampani ezisingatha impahla yobuhlakani ebucayi kakhululapho ukulahlekelwa yidivayisi kungeke kuholele ekuvuthweni kwedatha.

Isitoreji samafu esibethelwe samahhala: izinzuzo kanye nemikhawulo

Izinhlelo zesitoreji samafu ezibethelwe zamahhala zinokufinyelela kwentando yeningi ku- ubuchwepheshe bokuphepha obabugcinelwe izinkampani ezinkulu ngaphambiliniukuvumela noma ubani ukuthi avikele amadokhumenti abalulekile ngaphandle kokukhokha ngisho ne-euro eyodwa.

Ama-akhawunti wamahhala avame ukunikeza phakathi kuka-1 no-20 GB kwesikhala, ngokubethela kusukela ekuqaleni kuya ekugcineni, ukuqinisekiswa kwezinto ezimbili, kanye nezinketho eziyisisekelo zokwabelana ngokuphephile kusetshenziswa izixhumanisi ezivikelwe ngephasiwedi kanye nezinsuku zokuphelelwa yisikhathi.

Kodwa-ke, le nsizakalo yamahhala iza nokubanjwa: isikhala sokugcina sinqunyelwe, kanye nezinye izici, njenge ukuguqulelwa kwamafayela, amathuluzi okubambisana athuthukisiwe, noma ukwesekwa okubalulekile Lezi zici zigcinelwe izinhlelo ezikhokhelwayo, futhi imikhawulo yesivinini noma ye-bandwidth ingasebenza.

Imingcele nayo iyathinta usayizi wamafayela ngamanye, kuya enanini lamadivayisi angavumelaniswa noma kuya ekuthuthukisweni kwezinketho zokusekela ngokuzenzakalelayo kanye nokubuyisela okuhlanganisiwe.

Ngokusetshenziswa komuntu siqu noma okulula kochwepheshe, izinhlelo zamahhala zanele, kodwa ngokushesha nje lapho sezisebenza amaqembu omsebenzi, inani elikhulu ledatha, noma izidingo zokuthobela imithetho eqinileUkuthuthukela ohlelweni olukhokhelwayo kuba cishe yimpoqo.

Ukusekela, ukuphindaphinda, kanye nokululama enhlekeleleni

Isizathu esiyisisekelo sokusebenzisa isitoreji samafu esibethelwe akusibo nje ubumfihlo, kodwa futhi ukusinda kwedatha lapho konke okunye kwehluleka: ukwehluleka kwediski, ukweba, imililo, i-ransomware noma amaphutha alula abantu.

Nakuba i-hard drive yangaphandle ingahluleka, ishe, igcwale amanzi, noma ikhohlakale edroweni, i- ikhophi yefu ebethelwe ephindaphindwayo kuzo zonke izikhungo zedatha eziningi Ihlinzeka ngesendlalelo se ukuqina ngokomzimba nangokwengqondo akunakwenzeka ukufanisa ngedivayisi eyodwa.

Abahlinzeki abangcono kakhulu bagcina amakhophi amaningi edatha yakho ezindaweni ezahlukene ezibonakalayo, basebenzise izinhlelo zokuthwebula izithombe kanye nokuguqula amafayela, futhi banikeza ukulungiswa okuphelele noma okukhethiwe ukuhlehlisa izinguquko ezingafuneki noma ukuhlaselwa kwe-ransomware.

Izixazululo ezifana ne-Acronis True Image zithatha lo mqondo igxathu eliya phambili, zihlanganisa ama-backups endawo (ama-drive angaphandle, i-NAS, i-USB) nesitoreji samafu esibethelwe kanye isivikelo esisebenzayo ngokumelene ne-ransomware ngokusekelwe kubuhlakani bokwenziwa.

Ngalolu hlobo lwendlela ekabili, umgomo ukuthi njalo ube nekhophi eyodwa ephelele nebethelwe okungenani yedatha yakho ndawana thize, noma ngabe ikhompyutha yakho eyinhloko kanye ne-hard drive yangaphandle kugcine kubhujisiwe.

Ama-hard drive angaphandle vs ifu elibethelwe: yikuphi okuphephile kakhulu

Ama-hard drive angaphandle asathandwa kakhulu njengendlela yokusekelayo ngoba anjalo eshibhile, esheshayo futhi elula ukuyisebenzisaikakhulukazi uma zixhunywe nge-USB futhi ziqashelwa ngokushesha yinoma yiluphi uhlelo lokusebenza.

Kodwa-ke, zonke zine-Achilles' heel: zonke ziyahluleka ngokushesha noma kamuva, kungaba ngenxa yokuguga kwemishini, ukushayisana, ugesi omningi ngokweqile, noma ukuphelelwa yisikhathi nje, futhi ngokuvamile ngaphandle kwesixwayiso ngesaziso esanele kusenesikhathi sokuthola idatha.

Ngaphezu kwalokhu kunezingozi zomzimba ezifana imililo, izikhukhula noma ukuphangaizimo lapho ukuba nekhophi ekhaya lakho noma ehhovisi kungabi yinzuzo futhi kube yinto eyodwa yokwehluleka.

Ngokuphathelene nokuphepha, ngaphandle kokuthi zibethelwe ngamathuluzi afana nalawa I-BitLocker noma i-VeraCryptAma-drive amaningi angaphandle ayaxhuma futhi abonise okuqukethwe kwawo ngaphandle kwesivikelo sangempela, okuyinkinga enkulu uma othile ebamba idivayisi.

Ifu elibethelwe, ngakolunye uhlangothi, ligwema eziningi zalezi zinkinga ngokunikeza ukufinyeleleka kusuka noma kuphi lapho kunokufinyelela kwe-inthanethi, ukuphindaphindeka kwendawo, kanye ukubethela okunamandla kokubili ekuthuthweni nasekuphumuleniuma nje umhlinzeki esebenzisa imodeli engenalo ulwazi.

Ukuphepha kwamafu okunezingqimba eziningi: akukhona konke mayelana ne-algorithm

Umhlinzeki oqotho wesitoreji samafu esibethelwe akagcini nje ngokuvula i-AES-256 futhi ayibize ngosuku; baklama i- isu lokuphepha elinezigaba eziningi mayelana ne-cryptography.

Isendlalelo sokuqala ukuvikelwa kwe-akhawunti: inqubomgomo yephasiwedi enhle (ende, ehlukile, ephethwe ngumphathi wephasiwedi), ihlanganiswe ne ukuqinisekiswa kwezinto ezimbili (2FA) usebenzisa izinhlelo zokusebenza ze-TOTP, okhiye behadiwe, noma i-biometrics.

Ngezansi kwalokho sinokubethela ohlangothini lweklayenti, okunezihluthulelo ezikhiqizwe futhi zigcinwe endaweni, ezithathwe kuphasiwedi kusetshenziswa ama-algorithms afana nalawa I-Scrypt noma i-Argon2yakhelwe ukuvimba ukuhlaselwa ngamandla amakhulu ngisho nangehadiwe ekhethekile.

Okulandelayo kuza ungqimba lokuthuthwa, oluvikelwe nge I-TLS yesimanje, amasudi e-cryptographic aqinile, kanye nezinqubomgomo zokuphepha eziqinile kumaseva, ukugwema amaphrothokholi aphelelwe yisikhathi noma ukucushwa okubuthakathaka.

Futhi ekugcineni, ungqimba lokuthobela imithetho kanye nokuhlolwa: izitifiketi ISO 27001Ukubuyekezwa kwekhodi, ukuhlolwa kokungena njalo, kanye nokuhambisana nemithetho efana ne-GDPR, i-Swiss FADP, i-HIPAA, noma eminye, kuye ngomkhakha abawuqondisile.

Ubumfihlo, izindawo kanye nokuthobela imithetho

Indawo esemthethweni nengokoqobo yomhlinzeki ithonya kakhulu izinga isivikelo esingokomthetho esitholwa idatha yakhoikakhulukazi uma sikhuluma ngemininingwane yomuntu siqu noma ulwazi olulawulwayo.

Izinsizakalo ezise-European Union noma eSwitzerland kumele zihambisane nezinhlaka ezifana nokuthi I-GDPR noma i-Federal Data Protection Act (FADP)ezibeka izibopho ezicacile mayelana nemvume, ukucutshungulwa kwedatha, isaziso sokwephulwa komthetho kanye namalungelo abasebenzisi.

Endabeni yaseSwitzerland, I-EU iyakuqaphela njengezwe elinezinga elanele lokuvikelwa kokudluliselwa kwedatha, futhi umthetho wayo ubhekwa njengolingana noma ophakeme kwezinye izici zomthetho waseYurophu.

Kodwa-ke, nakuba imithetho isiza, okwenza umehluko ngempela enkonzweni yokubethela engenalo ulwazi, yezinga lezempi ukuthi, Ngisho noma kunemiyalelo yenkantolo, umhlinzeki angase angakwazi ukususa ukubethela amafayela akho ngoba akanazo izihluthulelo.

Lo mklamo wenza izimpikiswano eziningi zomthetho zilahlekelwe isisindo sobuchwepheshe: uma umhlinzeki ebona kuphela idatha engahleliwe ebethelweAkukho okuqukethwe okuwusizo ongakunikeza abantu besithathu, ngaphandle kwama-blobs angacacile ngokwawo.

Ukwabelana nokusebenzisana ngaphandle kokuphula imodeli yokuphepha

Omunye wemibuzo emikhulu mayelana ne-encrypted cloud computing ukuthi kanjani yabelana ngamafayela noma sebenzani njengeqembu ngaphandle kokulahla imodeli yolwazi olungenalo ulwazi noma ukwenza buthaka ukubethela kwebanga lezempi okusetshenziswa kudatha.

Izinsizakalo ezithuthuke kakhulu zixazulula lokhu ngokuthi izixhumanisi zokulanda ezibethelwe, ivikelwe ngamaphasiwedi, izinsuku zokuphelelwa yisikhathi, imikhawulo yokulanda kanye nekhono lokuhoxisa ukufinyelela nganoma yisiphi isikhathi kusuka ku-interface yewebhu noma izinhlelo zokusebenza.

Ezinhlelweni eziyinkimbinkimbi kakhulu, umhlinzeki usebenzisa okhiye beseshini ethile yomhlanganyeli ngamunyeLokhu kuvumela ukufinyelela kumafayela noma amafolda athile ngaphandle kokwembula ukhiye oyinhloko noma ukuvumela ukufinyelela kwe-akhawunti yomhlaba wonke.

Ezinye izinhlelo zinikeza ngisho amalogi emisebenzi anemininingwane ukubona ukuthi ubani ofinyelele kuliphi ifayela futhi nini, umsebenzi owusizo kakhulu ezimweni zebhizinisi kanye nokuhambisana nemithetho.

Into ebalulekile ukuthi ukubethela kusukela ekuqaleni kuze kube sekupheleni kugcinwa ngaso sonke isikhathi nokuthi umhlinzeki akakaze adinge ukubethela okuqukethwe kumaseva akhe ukuze kube lula ukubambisana, into ezohlukanisa ikhambi eliyimfihlo ngempela nelifu elivikelekile elilula.

Nini ukuthuthukisa kusuka kunguqulo yamahhala kuya ohlelweni olukhokhelwayo

Nakuba kuheha kakhulu ukuhlala ohlelweni lwamahhala unomphela, kufika isikhathi lapho izidingo zangempela zesitoreji, ukusebenza, kanye nezici ezithuthukisiwe Bazithethelela ngokuya ekhefini.

Uma idatha yakho iqala ukudlula I-10-20 GB Uma usebenza ngamafayela asindayo (ividiyo, umklamo, izindawo zokugcina ezinkulu), isabelo sesitoreji sohlelo lwamahhala siphela ngokushesha bese ugcina usuzama ukukhulula isikhala.

Ezindaweni zobungcweti noma zebhizinisi, ngokuvamile kubalulekile ukuba amafolda eqembu abelwe, izilawuli zemvume ezihlanganisiwe, ukuhlanganiswa namathuluzi ehhovisi kanye nokusekelwa kobuchwepheshe ngezikhathi zokuphendula ezifanele.

Kuvamile futhi ukuthi izinhlelo zokukhokha zinikeze isivinini sokulayisha nokulanda esisheshayo, imikhawulo embalwa ye-bandwidth, kanye namakhono okusekela ngokuzenzakalelayookwenza umehluko omkhulu empilweni yansuku zonke.

Kubasebenzisi abaningi ngabanye, ukutshalwa kwezimali okulinganiselwe kwanyanga zonke kwisevisi yokugcina ebethelwe yezinga lezempi kungaphezu kokukhokha izindleko (zezezimali kanye nedumela) zokulahlekelwa noma ukuvuza kwedatha ebucayi.

Ezweni lapho yonke idokhumenti, isithombe, noma ingxoxo igcina idlula kuseva ekude, ithembele kusitoreji esibethelwe nge- ama-algorithms ebanga lezempi, ukwakheka kolwazi olungenalo ulwazi, kanye nemikhuba emihle yokusekelayo Ukuqonda ukuthi yini engemuva kwamalebula afana ne-AES-256, i-FIPS 140-3, noma ukubethela kusukela ekuqaleni kuze kube sekupheleni sekuyinto ebaluleke kakhulu; kukuvumela ukuthi ukhethe ngokuhlakanipha phakathi kwezinsizakalo zamafu zamahhala nezikhokhelwayo, ama-hard drive angaphandle, ama-USB drive avikelwe, kanye namapulatifomu akhethekile afana ne-Tresorit, i-pCloud, i-NordLocker, i-MEGA, noma i-Proton Drive, ngaleyo ndlela wakhe isu lokuvikela idatha lapho, noma ngabe konke okunye kwehluleka, amafayela akho ahlala engawakho nawedwa.