- Ukubethela kwamafu kwesigaba sempi kusekelwe ku-AES-256 kanye nezindinganiso ezifana ne-FIPS 140-3, okuqinisekisa ukuvikelwa okuqinile ngisho nasekuhlaselweni okuthuthukile.
- Izinsizakalo ze-Zero-knowledge zibhala ngemfihlo idatha kudivayisi futhi azilokothi zigcine okhiye, ngakho ngisho nomhlinzeki akakwazi ukufinyelela okuqukethwe.
- Amapulani wamahhala avela kubahlinzeki abanjengo-MEGA, i-Proton Drive, i-NordLocker, noma i-pCloud akuvumela ukuthi uzame isitoreji esibethelwe, yize kunesikhala kanye nemikhawulo yezici.
- Ukuhlanganisa ifu elibethelwe, ama-backup endawo, namadivayisi e-hardware aphephile kudala isu eliphelele lokulwa nokwehluleka, ukwebiwa, i-ransomware, kanye nezinhlekelele ezibonakalayo.
Uma ugcina idatha yomuntu siqu, ulwazi lwentela, izithombe eziyimfihlo, noma ulwazi lwenkampani efwini , ukuthembela kuphela kuphasiwedi kufana nokudlala i-roulette yaseRussia ngobumfihlo bakho. Nsuku zonke, kuvela ukwephulwa okusha kokuphepha, ukuhlaselwa kwe-ransomware, kanye nokuvuza kwedatha, okubonisa ukuthi isitoreji esiku-inthanethi ngaphandle kokubethela okuqinile kubeka engcupheni enkulu.
Lokho okubizwa ngokuthi "ukubethela kwebanga lezempi" sekuyindlela ejwayelekile uma kukhulunywa ngokuvikela ulwazi olubucayi ngempela efwini . Kodwa ngemuva kwalelo lebula lokumaketha kukhona imithetho esemthethweni, ama-algorithms acacile kakhulu , izitifiketi ezifana ne-FIPS, kanye namamodeli okuphepha "angenalo ulwazi" enza umehluko omkhulu phakathi kwedrayivu yefu elula kanye nesisombululo esiphephile ngempela.
Kusho ukuthini ngempela ukubethela kwe-military-grade efwini?
Uma umthengisi ekhuluma "ngokubethela kwebanga lezempi," cishe njalo usho ukusebenzisa i-AES-256 njenge-algorithm eyinhloko yokubethela, indinganiso efanayo nevunywa yi-NSA ukuvikela ulwazi oluhlukaniswe njenge-TOP SECRET ngaphakathi kukahulumeni wase-U.S.
Empeleni, lokhu kusho ukuthi amafayela akho abethelwe ngokhiye abangu-256-bit , okudala isikhala esikhulu sokusesha kangangokuthi, ngisho nangamandla ekhompyutha amanje nawesikhathi esizayo, ukuhlasela ngamandla amakhulu bekungeke kwenzeke kunoma yisiphi isimo esingokoqobo.
Ngaphezu kosayizi wokhiye, imininingwane yobuchwepheshe efana nemodi yokubethela yokusebenza (isb., i-XTS noma i-CFB), ukusetshenziswa kwamavekhtha okuqalisa okungahleliwe , kanye nezindlela zobuqotho ezifana ne-HMAC-SHA-512, ezivumela ukutholwa okusheshayo kwanoma yiziphi izinguquko engxenyeni eyodwa yefayela elibethelwe, nazo ziyasetshenziswa.
Endaweni yokugcina ephephile, ukubethela kwebanga lezempi akukhawulelwe efwini: kusebenza futhi kumadrayivu e-USB abethelwe ngehadiwe , amadrayivu angaphandle avikelwe, kanye nezixazululo zesipele ze-hybrid ezihlanganisa amafu namadivayisi angokoqobo.
Izindinganiso ze-FIPS, amazinga, kanye nokuthi yini ehlukanisa amasosha ebhizinisini
Ngale kwe-algorithm, umehluko phakathi kokumaketha okungenalutho nokuphepha okungathi sína ubonakala ngezitifiketi ezifana ne -FIPS 197 kanye ne-FIPS 140-2/140-3 , ezikhishwe ngaphansi kwesambulela se-NIST (National Institute of Standards and Technology).
Isitifiketi se -FIPS 197 siqinisekisa ukuthi ukusetshenziswa kwe-AES (kufaka phakathi i-AES-256) kwenziwe kahle, isibonelo kwimodi ye-XTS ukuvikela idatha kumayunithi okugcina idatha, okubaluleke kakhulu ekuqinisekiseni ukuthi azikho iziphambeko ezincane ekubethelweni kwedatha.
Izindinganiso ze -FIPS 140-2 kanye ne-FIPS 140-3 Level 3 ziya phambili kakhulu: azidingi nje kuphela i-AES efanele, kodwa futhi zihlola imodyuli ye-cryptographic iyonke, okuhlanganisa ukuphathwa kokhiye, ukuqinisekiswa, ukumelana nokuphazanyiswa kwehadiwe ebonakalayo, kanye nezidingo zokusebenza eziqinile zeprosesa yokuphepha.
Abakhiqizi abanjengoKingston, abanezinhlobo zabo ze-IronKey kanye ne-VP50, badlula emijikelezweni yokuthuthukiswa nokuhlolwa yeminyaka eminingana ukuze bathole lezi zitifiketi, ngokuhlolwa kwekhodi, ukuhlolwa emalabhorethri aqinisekiswe yi-NIST, kanye nokuhlolwa kokuphathwa ngokomzimba kuma-casing kanye ne-epoxy encapsulations.
Okwamanje, ukuphepha "kwezinga lebhizinisi" kuvame ukuhilela ukubethela okuhle kanye nokuhlolwa kokungena okuzimele (njengalokho okwenziwa yi-SySS kuma-drive athile e-USB), kodwa akuhlali kufinyelela amazinga okuvikela ngokomzimba kanye nesitifiketi esidingwa uhulumeni oqinile noma indawo yezempi.
Ulwazi olungenalo ulwazi kanye nokubethela kusukela ekuqaleni kuze kube sekupheleni: ukuqhubekela phambili kwangempela kwezokuphepha
Uma kukhulunywa ngefu, ukukhuluma ngokubethela kwebanga lezempi ngaphandle kokukhuluma ngemodeli yolwazi olungenalo akuphelele. I-algorithm ingase ingabi naphutha, kodwa uma umhlinzeki elawula okhiye bakho, bangafunda idatha yakho.
Isevisi yokungabi nalwazi isebenza njengesisefo esisegumbini lokugcina idatha: umhlinzeki unikeza i-vault, kodwa wena uphethe ukhiye okuwukuphela kwawo . Amafayela abethelwa kudivayisi yakho ngaphambi kokuhamba, futhi okhiye abakaze badluliselwe noma bagcinwe kumaseva.
Kuhlelo olujwayelekile lokubethela amafu kusukela ekuqaleni kuya ekugcineni, ifayela ngalinye libethelwa endaweni nge- AES-256 , lisayinwe noma ubuqotho balo buvikelwe nge-HMAC, futhi lithunyelwe ngokuxhumeka okuphephile kwe-TLS, okuholela ohlotsheni lokubethela "okuphindwe kabili": okukodwa kokuqukethwe kanye nokunye kwesiteshi.
Uma wabelana ngamafayela, ukubethela okungalingani kuyasetshenziswa: ukhiye olinganayo wefayela uvikelwe nge -RSA-2048 noma i-RSA-4096 , noma ngama-curve e-elliptic yesimanje, kusetshenziswa izinhlelo zokubopha ezivikelekile njenge-OAEP, ukuze umamukeli kuphela, onokhiye wakhe wangasese, akwazi ukuvula lowo khiye wefayela.
Le ndlela inomphumela obalulekile kumsebenzisi: uma ukhohlwa iphasiwedi yakho eyinhloko futhi ungenayo ikhophi yokhiye wakho wokutakula, akekho ongabuyisa idatha yakho , ngisho nomhlinzeki, ngoba abanawo umnyango wangemuva wobuchwepheshe.
Izinsizakalo zesitoreji samafu ezibethelwe: ukubuka konke kwamanje
Imakethe yabahlinzeki abanikeza isitoreji samafu esifihliwe ngamamodeli angenalo ulwazi iye yanda kakhulu eminyakeni yamuva nje, ngezinketho zamahhala nezikhokhelwayo kanye nezindlela eziningi zobuchwepheshe.
Kuhlelo lwezinsizakalo ezinezinhlelo zamahhala, sithola izixazululo ezisukela ezinkethweni ezigxile kakhulu, njengezinkundla ezithile ezisatshalaliswayo, kuya kumasevisi ajwayelekile njenge -MEGA, i-Proton Drive, i-NordLocker, i-Sync.com noma i-Internxt , konke okune-denominator efanayo: ukubethela ohlangothini lweklayenti kanye nokugcizelela ubumfihlo.
Izinhlelo zamahhala ngokuvamile zisukela ku -1 kuya ku-20 GB , ezanele amadokhumenti abalulekile, izithombe ezibalulekile, namafayela omsebenzi , kodwa azikwaneli ukusetshenziswa kobungcweti noma imitapo yolwazi emikhulu yemidiya, lapho isidingo sokuthuthukela ezinhlelweni ezikhokhelwayo siqala khona.
Ngaphezu kwalokhu, kunezixazululo ezibekwe ngqo njengezinketho eziphephile esikhundleni seziqhwaga ezinkulu njengeDropbox noma i-OneDrive, kanye nezinye, njengeTresorit, ezine -encryption yezinga lezempi eqinisekisiwe, ukwakheka okuqinile kolwazi olungenalo ulwazi, kanye nokuhlolwa kwangaphandle okuqinisekisa ukuthi azikwazi ukufinyelela okuqukethwe komsebenzisi.
Izinsizakalo ezinolwazi oluqinile lokubethela kanye nolwazi olungenalo: izibonelo ezivelele
Phakathi kwabahlinzeki besitoreji samafu esibethelwe, amanye amagama ayaphindwa uma kukhulunywa ngokuphepha okuthuthukisiwe kanye nobumfihlo bangempela , kokubili eSpain nakwamanye amazwe.
I-MEGA inikeza enye yezindawo zokugcina zamahhala eziningi kakhulu (20 GB) ezinombhalo wokubethela kusukela ekuqaleni kuya ekugcineni kanye nezinkinobho ezilawulwa ngumsebenzisi, izingxoxo ezibethelwe kanye nezingcingo zevidiyo, izixhumanisi ezivikelwe ngephasiwedi, kanye nokuqinisekiswa kwezinto ezimbili ukuvimbela ukufinyelela okungagunyaziwe.
I-Proton Drive , eseSwitzerland, yelula ukubethela hhayi kuphela kokuqukethwe kwamafayela kodwa futhi nakumagama awo kanye ne-metadata eyisihluthulelo , ihlangana ne-Proton Mail kanye nayo yonke indawo ye-Proton ukuze inikeze indawo ephelele yobumfihlo bedijithali ngaphansi kwemithetho yaseSwitzerland evikela kakhulu.
I-NordLocker iziveza njengesevisi yokubethela kunokuba yifu elilula: isebenzisa inhlanganisela ye-AES-256, i-XChaCha20-Poly1305 kanye ne-Ed25519 ukuze isayine, kanye nesitoreji samafu esingakhethwa kanye nemodeli lapho abasebenzisi be-NordLocker kuphela abangabelana ngokuqukethwe komunye nomunye.
I-Sync.com , ese-Canada, izibophezele ekuqinisekiseni ukuthi akukho ulwazi olunikezwa ngokuzenzakalelayo nangokuhambisana nemithetho efana ne -GDPR kanye ne-PIPEDA , ingeza izici zokusekela, ukwabelana okuphephile kanye nokuvumelanisa ngaphandle kwesidingo sokulungiselela izinketho ezithuthukisiwe.
I-Internxt , yona, idlala ikhadi le-cryptography le-post-quantum ngokufaka ama-algorithms afana ne-Kyber-512, aklanyelwe ukumelana nokuhlaselwa okuvela kumakhompyutha e-quantum esikhathi esizayo, idela ukusebenza okuthile ngenxa yokuphepha okulungiselelwe amashumi eminyaka ezayo.
Ukubethela kwebanga lezempi ezixazululweni ezifana neTresorit
Esinye sezimo ezithakazelisa kakhulu lapho kuhlaziywa igama elithi "ukubethela kwebanga lezempi" yi- Tresorit , isevisi eye yahlolwa ngobuchwepheshe kanye nokuhlolwa futhi isekela ukwakheka kwayo ngqo ezindinganisweni ezisetshenziswa ohulumeni nezinhlangano ezisezingeni eliphezulu.
Ku-Tresorit, amafayela abethelwa endaweni nge -AES-256 kumodi ye-CFB , ngama-IV angu-128-bit angahleliwe ngenguqulo yefayela kanye nesendlalelo esengeziwe se-HMAC-SHA-512 ukuqinisekisa ukuthi ubuqotho bedatha abukwazi ukuguqulwa ngaphandle kokutholwa.
Ukushintshana kwezihluthulelo phakathi kwabasebenzisi ukuze babelane ngokuqukethwe kuphathwa yi -RSA-4096 nge-OAEP , kuyilapho amaphasiwedi eqiniswa nge-Scrypt (enezipharamitha ezilungisiwe ukuze zibe yi-CPU nememori ebiza kakhulu), kulandelwe yi-HMAC ene-SHA-256 ukuthola izihluthulelo eziyinhloko.
Ukuxhumana phakathi kweklayenti namaseva kuvikelwe yi -TLS 1.2 noma ngaphezulu , ukuze noma ngabe ithrafikhi ivinjiwe, kuzobonakala ama-data blobs kuphela avele abethelwe ngaphambi kokungena emhubheni we-TLS, okuqinisa ubumfihlo ngokwengeziwe.
Lo mklamo ongenalo ulwazi ubuyekezwe yizinkampani zangaphandle ezifana ne-Ernst & Young futhi waphonselwa inselelo esidlangalaleni ngenselelo yokugenca ekhokhelwayo , engaxazululwanga yinoma yimuphi umhlanganyeli isikhathi esingaphezu konyaka, naphezu kokubamba iqhaza kochwepheshe abavela emanyuvesi aphezulu.
i-pCloud, i-NordLocker kanye ne-MEGA: abaholi abathathu ekubethelweni kwamafu
Kulabo abafuna ukubethela okuqinile ngaphandle kokwenza izinto zibe nzima kakhulu, amagama amathathu avame ukuhola ekuqhathanisweni: i-pCloud, i-NordLocker, kanye ne-MEGA , ngalinye linezinzuzo zalo.
I-pCloud iyipulatifomu eguquguqukayo kakhulu, enezinhlelo ezisukela ku-500 GB kuya ku-10 TB kanye nesici esiyingqayizivele sokuhlinzeka ngokubethela okungenalo ulwazi njengesengezo esikhokhelwayo (i-pCloud Crypto), engeza "ifolda evikelekile" ngaphakathi kwe-akhawunti ejwayelekile.
Lesi sici esengeziwe sivumela amafayela athile ukuthi avikelwe ngokubethela kwebanga lezempi, kuyilapho kugcinwa indawo yamafu yakudala enokusakaza okuhlanganisiwe kwe-multimedia, isidlali sevidiyo nomsindo, ukuphathwa kohlu lwadlalwayo, kanye nezinguqulo zamafayela.
I-NordLocker , eyadalwa yithimba le-NordVPN, isebenza njengebhokisi lokubethela lapho ungavikela khona amafayela endaweni futhi uwavumelanise nefu lawo, ngohlelo lwamahhala lwe-3GB kanye nezinketho ezikhokhelwayo ezifinyelela ku-2TB ngamanani afanele.
Amandla ayo asebulula bayo: ukuhudula bese uyilahla ukuze uyibhale, isikhombikubona esihlanzekile, ukubethela kwesimanje, kanye nenqubomgomo yokungabhalisi idatha evela ePanama, okwenza kube kuhle kakhulu kunoma ubani ofuna ukuvikela amadokhumenti omsebenzi, izinkontileka, noma idatha yamakhasimende.
I-MEGA iqeda i-trio ngokunikeza isikhala samahhala kakhulu, indlela eyimfihlo kakhulu (umsebenzisi ulawula okhiye bakhe abayinhloko kanye nokubuyisa) kanye nezici ezengeziwe ezifana nengxoxo evikelekile, umlando weseshini kanye nokuqinisekiswa kwezinto ezimbili ukuze kumiswe ukufinyelela okusolisayo.
Ihadiwe yezinga lezempi: amadrayivu e-USB namadivayisi angokoqobo
Ukubethela kwe-military-grade akukhawulelwe efwini: ama-USB drive athile kanye nama-hard drive angaphandle ahlanganisa ama-cryptographic chips nama-casing aklanyelwe ukumelana nokuhlaselwa ngokomzimba kanye nokuphazanyiswa.
Amamodeli afana ne-IronKey D500S noma uchungechunge lwe-S1000 afaka ama-cryptochip ahlukene ukugcina amapharamitha okuphepha abalulekile (i-CSP) , kanye nokuvikelwa kwezinga le-silicon okukwazi ukuzibhubhisa ukhiye uma ethola imizamo eminingi yokuhlasela.
Kwezinye izimo, iyunithi ngokwayo ingalungiselelwa ukukhiya unomphela uma ithola ukuhlaselwa okunamandla okwesikhathi eside, iphendule idivayisi ibe yizitini kunokuba ivumele umhlaseli asondele kudatha yangaphakathi.
Umehluko ngedrayivu ye-USB eyisisekelo ebethelwe ngesofthiwe mkhulu kakhulu: ngaphezu kokubethela kwehadiwe ye-AES-256, iphinde ibe nezimbobo ezivaliwe, ama-resin epoxy angaphazamiseki , izindlela zokulwa nokungena, kanye nezitifiketi ze-FIPS ezisezingeni eliphezulu.
Lokhu kwenza la mayunithi avame kakhulu ezinhlanganweni zikahulumeni, ezempi, nasezinkampanini ezisingatha impahla yobuhlakani ebucayi kakhulu , lapho ukulahlekelwa yidivayisi kungenakuphumela ekuvuvukeni kwedatha.
Isitoreji samafu esibethelwe samahhala: izinzuzo kanye nemikhawulo
Izinhlelo zokugcina amafu ezibethelwe mahhala zivule ukufinyelela kwentando yeningi kubuchwepheshe bokuphepha obebugcinelwe izinkampani ezinkulu ngaphambilini , okuvumela noma ubani ukuthi avikele amadokhumenti abalulekile ngaphandle kokukhokha ngisho nesenti.
Ama-akhawunti wamahhala ngokuvamile anikeza isitoreji esiphakathi kuka-1 no-20 GB , esinokubethela kusukela ekuqaleni kuya ekugcineni, ukuqinisekiswa kwezinto ezimbili, kanye nezinketho eziyisisekelo zokwabelana ngokuphephile kusetshenziswa izixhumanisi ezivikelwe ngephasiwedi kanye nezinsuku zokuphelelwa yisikhathi.
Kodwa-ke, le nsizakalo yamahhala iza nokubanjwa: isikhala sokugcina sinqunyelwe, ezinye izici ezifana nokuguqulwa kwamafayela, amathuluzi okubambisana athuthukisiwe, kanye nokusekelwa okubalulekile kugcinelwe izinhlelo ezikhokhelwayo, futhi ngezinye izikhathi kusetshenziswa imikhawulo yesivinini noma ye-bandwidth.
Imikhawulo ithinta nosayizi wamafayela ngamanye , inani lamadivayisi angavumelaniswa, noma ubuciko bokwenza isipele ngokuzenzakalelayo kanye nezinketho zokubuyisela ezihlanganisiwe.
Ngokusetshenziswa komuntu siqu noma okulula kochwepheshe, izinhlelo zamahhala zanele, kodwa ngokushesha nje lapho amaqembu omsebenzi, inani elikhulu ledatha, noma izidingo zokuthobela imithetho eqinile ziqala ukusebenza , ukuthuthukela ohlelweni olukhokhelwayo kuba cishe yimpoqo.
Ukusekela, ukuphindaphinda, kanye nokululama enhlekeleleni
Isizathu esiyinhloko sokusebenzisa isitoreji samafu esibethelwe akusibo nje ubumfihlo, kodwa ukusinda kwedatha yakho lapho konke okunye kwehluleka : ukwehluleka kwamadiski, ukweba, imililo, i-ransomware, noma iphutha lomuntu.
Nakuba i-hard drive yangaphandle ingahluleka, ishe, igcwale amanzi, noma ikhohlakale edroweni, ikhophi yefu ebethelwe ephindaphindwayo ezikhungweni eziningi zedatha inikeza ungqimba lokuqina okungokomzimba nokunengqondo okungenakwenzeka ukufanisa nedivayisi eyodwa.
Abahlinzeki abangcono kakhulu bagcina amakhophi amaningi edatha yakho ezindaweni ezahlukene ezibonakalayo, basebenzisa izinhlelo zesithombe-skrini kanye nokuguqulwa kwamafayela, futhi banikeza ukubuyiselwa okugcwele noma okukhethiwe ukuze kulungiswe izinguquko ezingafuneki noma ukuhlaselwa kwe-ransomware.
Izixazululo ezifana ne-Acronis True Image zithatha lo mqondo ngesinyathelo esengeziwe, zihlanganisa ama-backups endawo (ama-drive angaphandle, i-NAS, i-USB) nesitoreji samafu esibethelwe kanye nokuvikelwa kwe-ransomware esebenzayo esekelwe ku-AI .
Ngale ndlela yokuhlanganisa izinto ezimbili, umgomo ukuthi kuzohlala kukhona okungenani ikhophi eyodwa ephelele nebethelwe yedatha yakho ndawana thize, noma ngabe ikhompyutha yakho eyinhloko kanye ne-hard drive yangaphandle kuzobhujiswa ngokuphelele.
Ama-hard drive angaphandle vs ifu elibethelwe: yikuphi okuphephile kakhulu
Ama-hard drive angaphandle asathandwa kakhulu njengendlela yokusekelayo ngoba ashibhile , ayashesha, futhi kulula ukuwasebenzisa , ikakhulukazi uma exhunywe nge-USB futhi eqashelwa ngokushesha yinoma yiluphi uhlelo lokusebenza.
Kodwa-ke, zonke zinesithende se-Achilles: zonke ziyahluleka ngokushesha noma kamuva, kungaba ngenxa yokuguga kwemishini, ukushayisana, ugesi omningi noma ukuphelelwa yisikhathi nje, futhi ngokuvamile ngaphandle kokunikeza isixwayiso esanele sokubuyisa idatha.
Okungeziwe kulokhu yizingozi zomzimba ezifana nemililo, izikhukhula noma ukwebiwa , izimo lapho ukuba nekhophi ekhaya lakho noma ehhovisi kungabi yinzuzo futhi kube yiphuzu elilodwa lokwehluleka.
Ngokuphathelene nokuphepha, ngaphandle kokuthi zibethelwe ngamathuluzi afana ne -BitLocker noma i-VeraCrypt , ama-drive amaningi angaphandle ayaxhuma futhi abonise okuqukethwe kwawo ngaphandle kokuvikelwa kwangempela, okuyinkinga enkulu uma othile ebamba idivayisi.
Ngakolunye uhlangothi, ifu elibethelwe ligwema eziningi zalezi zinkinga ngokunikeza ukufinyeleleka kusuka noma kuphi nge-inthanethi, ukuphindaphinda kwendawo, kanye nokubethela okunamandla kokubili ekuthuthweni nasekuphumuleni , uma nje umhlinzeki esebenzisa imodeli yolwazi olungenalo ulwazi.
Ukuphepha kwamafu okunezingqimba eziningi: akukhona konke mayelana ne-algorithm
Umhlinzeki oqotho wesitoreji samafu esifihliwe akasebenzisi nje i-AES-256 futhi ayibize ngosuku; baklama isu lokuphepha elinezingqimba eziningi elizungeze i-cryptography.
Isendlalelo sokuqala ukuvikelwa kwe-akhawunti: inqubomgomo yephasiwedi enhle (ende, ehlukile, ephethwe ngumphathi), kuhlanganiswe nokuqinisekiswa kwezinto ezimbili (2FA) kusetshenziswa izinhlelo zokusebenza ze-TOTP, okhiye behadiwe, noma i-biometrics.
Ngezansi kwalokho sinokubethela ohlangothini lweklayenti, okunezihluthulelo ezikhiqizwe futhi zigcinwe endaweni, ezithathwe kuphasiwedi kusetshenziswa ama-algorithms afana ne -Scrypt noma i-Argon2 , aklanyelwe ukuvimba ukuhlaselwa kwe-brute-force ngisho nangehadiwe ekhethekile.
Okulandelayo kuza ungqimba lwezokuthutha, oluvikelwe nge -TLS yesimanje, ama-suite e-cryptographic aqinile, kanye nezinqubomgomo zokuphepha eziqinile kumaseva, okugwema amaphrothokholi aphelelwe yisikhathi noma ukucushwa okubuthakathaka.
Ekugcineni, ungqimba lokuthobela imithetho kanye nokuhlolwa: izitifiketi ze -ISO 27001 , ukubuyekezwa kwekhodi, ukuhlolwa kokungena njalo kanye nokuhambisana nemithetho efana ne-GDPR, i-Swiss FADP, i-HIPAA noma eminye, kuye ngomkhakha abawuqondisile.
Ubumfihlo, izindawo kanye nokuthobela imithetho
Indawo yomhlinzeki engokomthetho nengokoqobo ithonya kakhulu izinga lokuvikelwa okungokomthetho kwedatha yakho , ikakhulukazi uma sikhuluma ngedatha yomuntu siqu noma ulwazi olulawulwayo.
Izinsizakalo ezise-European Union noma eSwitzerland kumele zihambisane nezinhlaka ezifana ne -GDPR noma i-Federal Data Protection Act (FADP) , ezibeka izibopho ezicacile mayelana nemvume, ukucutshungulwa kwedatha, isaziso sokwephulwa komthetho, kanye namalungelo abasebenzisi.
Endabeni yeSwitzerland, i-EU iyayibona njengezwe elinezinga elanele lokuvikelwa kokudluliselwa kwedatha , futhi umthetho wayo ubhekwa njengolingana noma ophakeme kwezinye izici zomthetho waseYurophu.
Kodwa-ke, yize imithetho isiza, okwenza umehluko ngempela kwinsizakalo yokubethela engenalo ulwazi, yezinga lezempi ukuthi, ngisho nangemiyalo yenkantolo, umhlinzeki akakwazi ukususa ukubethela amafayela akho ngoba awanazo izihluthulelo.
Lo mklamo wenza izimpikiswano eziningi zomthetho zilahlekelwe isisindo sobuchwepheshe: uma umhlinzeki ebona idatha engahleliwe ebethelwe kuphela , akukho okuqukethwe okuwusizo angakunikeza abantu besithathu, ngaphandle kwama-blobs angacacile ngokwawo.
Ukwabelana nokusebenzisana ngaphandle kokuphula imodeli yokuphepha
Omunye wemibuzo emikhulu ngefu elibethelwe ukuthi ungabelana kanjani ngamafayela noma usebenze njengeqembu ngaphandle kokulahla imodeli yolwazi olungenalo noma ukwenza buthaka ukubethela kwebanga lezempi okusetshenziswa kudatha.
Izinsizakalo ezithuthuke kakhulu zixazulula lokhu ngezixhumanisi zokulanda ezibethelwe , ezivikelwe ngamaphasiwedi, izinsuku zokuphelelwa yisikhathi, imikhawulo yokulanda, kanye nekhono lokuhoxisa ukufinyelela nganoma yisiphi isikhathi kusuka ku-web interface noma izinhlelo zokusebenza.
Ezinhlelweni eziyinkimbinkimbi kakhulu, umhlinzeki usebenzisa okhiye besikhathi esithile kumuntu ngamunye osebenzisana naye , ukuze ukufinyelela kunikezwe amafayela noma amafolda athile ngaphandle kokwembula ukhiye oyinhloko noma ukuvumela ukufinyelela komhlaba wonke ku-akhawunti.
Ezinye izinhlelo zinikeza ngisho namalogi emisebenzi anemininingwane ukuze kubonwe ukuthi ubani ofinyelele kuliphi ifayela futhi nini, okuyisici esiwusizo kakhulu ezimweni zebhizinisi kanye nokuhambisana nomthetho.
Into ebalulekile ukuthi ukubethela kusukela ekuqaleni kuze kube sekupheleni kugcinwa ngaso sonke isikhathi nokuthi umhlinzeki akakaze adinge ukubethela okuqukethwe kumaseva akhe ukuze kube lula ukubambisana, into ezohlukanisa ikhambi eliyimfihlo ngempela nelifu elivikelekile elilula.
Nini ukuthuthukisa kusuka kunguqulo yamahhala kuya ohlelweni olukhokhelwayo
Nakuba kuheha kakhulu ukuhlala ohlelweni lwamahhala unomphela, kufika isikhathi lapho izidingo zangempela zesitoreji, ukusebenza, kanye nezici ezithuthukisiwe zivumela ukukhokha.
Uma idatha yakho iqala ukudlula u -10-20 GB noma usebenza ngamafayela amakhulu (ividiyo, umklamo, izindawo zokugcina ezinkulu), isabelo sesitoreji sohlelo lwamahhala siphela ngokushesha bese ugcina usuzama ukukhulula isikhala.
Ezindaweni zobungcweti noma zebhizinisi, ngokuvamile kubalulekile ukuba namafolda eqembu abelwe, izilawuli zemvume ezinemininingwane, ukuhlanganiswa namathuluzi ehhovisi , kanye nokusekelwa kobuchwepheshe ngezikhathi zokuphendula ezifanele.
Kuvamile futhi ukuthi izinhlelo ezikhokhelwayo zinikeze isivinini sokulayisha nokulanda esisheshayo, imikhawulo embalwa ye-bandwidth, kanye namakhono okusekela ngokuzenzakalelayo , okwenza umehluko omkhulu ekusetshenzisweni kwansuku zonke.
Kubasebenzisi abaningi ngabanye, ukutshalwa kwezimali okulinganiselwe kwanyanga zonke kwisevisi yokugcina ebethelwe yezinga lezempi kungaphezu kokukhokha izindleko (zezezimali kanye nedumela) zokulahlekelwa noma ukuvuza kwedatha ebucayi.
Ezweni lapho yonke idokhumenti, isithombe, noma ingxoxo igcina idlula kuseva ekude, ukuthembela kusitoreji esibethelwe ngama -algorithms ebanga lezempi, ukwakheka kolwazi olungenalo ulwazi, kanye nemikhuba emihle yokusekela isipele sekuyinto edingekayo. Ukuqonda ukuthi yini ekhona ngemuva kwamalebula afana ne-AES-256, i-FIPS 140-3, noma ukubethela kusukela ekuqaleni kuya ekugcineni kukuvumela ukuthi wenze izinqumo ezinolwazi phakathi kwezinsizakalo zamafu zamahhala nezikhokhelwayo, ama-hard drive angaphandle, ama-USB drive avikelwe, kanye namapulatifomu akhethekile njenge-Tresorit, i-pCloud, i-NordLocker, i-MEGA, noma i-Proton Drive. Lokhu kukuvumela ukuthi wakhe isu lokuvikela idatha lapho, noma ngabe konke okunye kwehluleka, amafayela akho ahlala engawakho futhi awakho wedwa.
