Recently, e Cloud's public cloud management platform has been successfulPassed the security assessment of commercial password applications(hereinafter referred to as the secret evaluation), marking that the password security capability of e Cloud public cloud management platform has reached the leading level in the industry.
In the information age, network security has become an important part of the world, and commercial cryptography, as the core technology and basic support to ensure network and information security, is the first line of defense for network security. In recent years, China has attached great importance to confidential evaluation, and has issued a number of top-level strategic plans and laws and regulations, requiring confidential evaluation to be carried out in key areas and key links, providing a compliance driving force for confidential evaluation.
Laws and regulations such as the Cryptography Law and the Regulations on the Management of Commercial Cryptography clearly require that operators of networks and information systems such as non-classified critical information infrastructure, networks with classified network security protection of ** or above, and national government affairs information systems shall use commercial cryptography for protection, formulate commercial cryptography application plans, allocate necessary funds and professionals, simultaneously plan, build, and operate commercial cryptography security systems, and carry out security assessments of commercial cryptography applications on their own or by entrusting commercial cryptography testing bodies.
e Cloud adheres to the mission and responsibility of building a cyber power, a digital China and maintaining national cyber information security, always adheres to the overall national network security concept, and the security guarantee capability of the public cloud management platform meets the level of classified network security protection. In accordance with the requirements of GB T 39786-2021 "Basic Requirements for Cryptographic Application of Information Security Technology Information Systems", e Cloud is driven by compliance to promote construction, reform and use by evaluation, consolidate the password base capability of the public cloud management platform, and improve the security level of the public cloud management platform.
Relying on the self-developed cloud base, e Cloud public cloud management platform carries out cryptographic transformation of components such as public cloud management system, virtualization system, distributed storage and computing, takes the self-developed key management system as the core, uses compliant password security products, builds a cloud-native password base, provides confidentiality and integrity protection of network communication link transmission, confidentiality and integrity protection of key important data storage, and user identity authentication based on digital certificates. The unified key management service realizes hierarchical and hierarchical password protection and strengthens the platform's password security capability.
The successful passage of the public cloud management platform through the secret evaluation is an important affirmation of e Cloud's password security capabilities. In the future, e Cloud will continue to strengthen the ability of the cryptographic base, integrate the application scenarios of the platform side and the user side, create an integrated and one-stop cryptographic application service, continue to provide high-quality cryptographic application services, improve security assurance capabilities, and escort users to the cloud.