单轨制背景下电子签名的归档保存方案研究
|
摘要
电子签名既是电子文件的信息要素,也是其功能要素;这两个角色既相对独立,也相互支撑。文章以电子签名"信息-功能"模型为框架,分析了发达国家电子签名归档保存方案及其思路:归档时同时维护电子签名的信息作用和功能作用,随着保存时间的延长,电子签名的信息不断丰富,功能则不断弱化。有鉴于此,根据我国实际情况,构建了"职责分担、分类应对、动态调整"的电子签名归档保存综合方案。档案部门在统筹下,按照签名类电子文件的类别与认证机构合作开展归档电子签名维护工作,根据认证系统的支撑和电子文件风险情况动态调整保存策略,并在此过程中记录电子签名元数据。
Digital signature is both an informational element and a functional element of electronic records.These two roles are mutually independent as well as supportive.Based on the "information-function" model of digital signature,this paper analyzes the preservation scenario and the thinking of digital signature archiving in developed countries,i.e.starting with maintaining both the information role and the function role of digital signature,the information about digital signature getting rich while the function of digital signature gradually weakening with the extension of preservation time.In this connection,this paper builds a synthetic preservation scheme of archiving digital signature with features of responsibilities sharing,classified handling and dynamic adjusting according to our actual situation.Under the overall planning archival departments and institutions should carry out the maintenance of digital signature on the basis of the cooperation with certification authorities by the categories of electronic signed records,do dynamic adjustment according to the support of the certification system and the risk of electronic records,and document metadata during this course.
Digital signature is both an informational element and a functional element of electronic records.These two roles are mutually independent as well as supportive.Based on the "information-function" model of digital signature,this paper analyzes the preservation scenario and the thinking of digital signature archiving in developed countries,i.e.starting with maintaining both the information role and the function role of digital signature,the information about digital signature getting rich while the function of digital signature gradually weakening with the extension of preservation time.In this connection,this paper builds a synthetic preservation scheme of archiving digital signature with features of responsibilities sharing,classified handling and dynamic adjusting according to our actual situation.Under the overall planning archival departments and institutions should carry out the maintenance of digital signature on the basis of the cooperation with certification authorities by the categories of electronic signed records,do dynamic adjustment according to the support of the certification system and the risk of electronic records,and document metadata during this course.
引文
[1]吴丽娟,吴育生.保持电子签名文件迁移过程中可信任性的策略[J].档案与建设,2002(5):11-13.
[2]王萍,陈思,李俊蓉.实施数字签名技术的文件、档案安全性[J].档案学研究,2010(3):63-65.
[3]刘国华,韩宏庆,杨福军.《电子签名法》对电子文件管理的影响[J].档案学通讯,2005(6):57-60.
[4]姜志伟.谈数字签名技术在电子文件真实性保障中的应用[J].档案与建设,2010(5):10-12.
[5][16]BLANCHETTE J F.The Digital Signature Dilemma:To Preserve or Not to Preserve[J].Annales des Télécommunications,2006,61(7-8):908-923.
[6]邓杰.论电子签名的法律功能与法律效力[J].武汉大学学报(哲学社会科学版),2006(2):244-248.
[7]谢宗晓,甄杰.公钥基础设施(PKI)国家标准解析[J].中国质量与标准导报,2018(12):18-21.
[8]NARA.Records Management Guidance for Agencies Implementing Electronic Signature Technologies[EB/OL].(2000-10-18)[2019-01-13].https://www.archives.gov/files/records-mgmt/faqs/pdf/electronic-signiture-technology.pdf.
[9]NARA.Records Management Guidance for PKI-Unique Administrative Records.(2003-03-14)[2019-01-13].https://www.archives.gov/files/records-mgmt/pdf/final-pki-guidance.pdf.
[10]NARA.Records Management Guidance for Agencies Implementing Electronic Signature Technologies[EB/OL].(2005-03-11)[2019-01-13].https://www.archives.gov/records-mgmt/policy/pki.html.
[11]NARA.Guidance on Managing Digital Identity Authentication Records[EB/OL].(2015-08-11)[2019-01-13].https://www.archives.gov/records-mgmt/bulletins/2015/2015-03.html.
[12]NARA.GRS The General Records Schedules(Transmittal 29)[EB/OL].[2019-01-13].https://www.archives.gov/files/records-mgmt/grs/trs29-sch-only.pdf.
[13]NAA.Recordkeeping and Online Security Processes Guidelines for Managing Commonwealth Records Created or Received Using Authentication or Encryption[EB/OL].[2019-03-05].http://pandora.nla.gov.au/pan/53055/20050927-0000/www.naa.gov.au/recordkeeping/er/Security/recordkeeping_online_security.pdf.
[14]NAA.Digital Authorisations Framework[EB/OL].[2019-03-05].http://www.naa.gov.au/naaresources/documents/DigitalAuthorisationsFramework-August2018.docx.
[15]DTA.Gatekeeper Public Key Infrastructure(PKI)Framework[EB/OL].[2019-03-05].https://www.dta.gov.au/our-projects/digital-identity/join-identity-federation/accreditation-and-onboarding/gatekeeper-public-key-infrastructure-framework.
[16]LAC.Guidelines for Records Created Under a Public Key Infrastructure Using Encryption and Digital Signatures[EB/OL].[2013-09-22].http://www.collectionscanada.ca/06/0618_e.html.
[17]STANCIC H.Model for Preservation of Trustworthiness of the Digitally Signed,Timestamped and/or Sealed Digital Records(TRUSTER Preservation Model)[R/OL].(2018-05-02)[2018-07-14].https://interparestrust.org/docs/file/EU31_20180502_TRUSTERPreservationModel_FinalReport_v1-3.pdf.
[19]LYNCH C.Canonicalization:A Fundamental Tool to Facilitate Preservation and Management of Digital Information[EB/OL].[2019-01-19].http://www.dlib.org/dlib/september99/09lynch.html.
[20]NAA.The Australian Government Recordkeeping Metadata Standard(AGRkMS)Version 2.2[S/OL].[2019-01-18].http://naa.gov.au/Images/AGRkMS-Version-2.2-June-2015_tcm16-93990.pdf.
[21][26]BOUDREZ F.Digital signatures and electronic records[J].Archival Science,2007,7(2):179-193.
[22]申宝明,徐浩,辛海燕.医院信息化中的数字认证设计与实施[J].中国医疗设备,2015,30(5):83-85,32.
[23]国家市场管理总局.电子营业执照管理办法(试行)[EB/OL].[2019-01-18].http://samr.saic.gov.cn/gg/201812/P020181206307438664441.docx.
[24]京东.发票制度说明[EB/OL].[2019-01-19].http://help.jd.com/user/issue/313-974.html.
[25]林伟宏.时间戳技术在电子档案管理中的应用探析[J].浙江档案,2015(1):20-22.
[2]王萍,陈思,李俊蓉.实施数字签名技术的文件、档案安全性[J].档案学研究,2010(3):63-65.
[3]刘国华,韩宏庆,杨福军.《电子签名法》对电子文件管理的影响[J].档案学通讯,2005(6):57-60.
[4]姜志伟.谈数字签名技术在电子文件真实性保障中的应用[J].档案与建设,2010(5):10-12.
[5][16]BLANCHETTE J F.The Digital Signature Dilemma:To Preserve or Not to Preserve[J].Annales des Télécommunications,2006,61(7-8):908-923.
[6]邓杰.论电子签名的法律功能与法律效力[J].武汉大学学报(哲学社会科学版),2006(2):244-248.
[7]谢宗晓,甄杰.公钥基础设施(PKI)国家标准解析[J].中国质量与标准导报,2018(12):18-21.
[8]NARA.Records Management Guidance for Agencies Implementing Electronic Signature Technologies[EB/OL].(2000-10-18)[2019-01-13].https://www.archives.gov/files/records-mgmt/faqs/pdf/electronic-signiture-technology.pdf.
[9]NARA.Records Management Guidance for PKI-Unique Administrative Records.(2003-03-14)[2019-01-13].https://www.archives.gov/files/records-mgmt/pdf/final-pki-guidance.pdf.
[10]NARA.Records Management Guidance for Agencies Implementing Electronic Signature Technologies[EB/OL].(2005-03-11)[2019-01-13].https://www.archives.gov/records-mgmt/policy/pki.html.
[11]NARA.Guidance on Managing Digital Identity Authentication Records[EB/OL].(2015-08-11)[2019-01-13].https://www.archives.gov/records-mgmt/bulletins/2015/2015-03.html.
[12]NARA.GRS The General Records Schedules(Transmittal 29)[EB/OL].[2019-01-13].https://www.archives.gov/files/records-mgmt/grs/trs29-sch-only.pdf.
[13]NAA.Recordkeeping and Online Security Processes Guidelines for Managing Commonwealth Records Created or Received Using Authentication or Encryption[EB/OL].[2019-03-05].http://pandora.nla.gov.au/pan/53055/20050927-0000/www.naa.gov.au/recordkeeping/er/Security/recordkeeping_online_security.pdf.
[14]NAA.Digital Authorisations Framework[EB/OL].[2019-03-05].http://www.naa.gov.au/naaresources/documents/DigitalAuthorisationsFramework-August2018.docx.
[15]DTA.Gatekeeper Public Key Infrastructure(PKI)Framework[EB/OL].[2019-03-05].https://www.dta.gov.au/our-projects/digital-identity/join-identity-federation/accreditation-and-onboarding/gatekeeper-public-key-infrastructure-framework.
[16]LAC.Guidelines for Records Created Under a Public Key Infrastructure Using Encryption and Digital Signatures[EB/OL].[2013-09-22].http://www.collectionscanada.ca/06/0618_e.html.
[17]STANCIC H.Model for Preservation of Trustworthiness of the Digitally Signed,Timestamped and/or Sealed Digital Records(TRUSTER Preservation Model)[R/OL].(2018-05-02)[2018-07-14].https://interparestrust.org/docs/file/EU31_20180502_TRUSTERPreservationModel_FinalReport_v1-3.pdf.
[19]LYNCH C.Canonicalization:A Fundamental Tool to Facilitate Preservation and Management of Digital Information[EB/OL].[2019-01-19].http://www.dlib.org/dlib/september99/09lynch.html.
[20]NAA.The Australian Government Recordkeeping Metadata Standard(AGRkMS)Version 2.2[S/OL].[2019-01-18].http://naa.gov.au/Images/AGRkMS-Version-2.2-June-2015_tcm16-93990.pdf.
[21][26]BOUDREZ F.Digital signatures and electronic records[J].Archival Science,2007,7(2):179-193.
[22]申宝明,徐浩,辛海燕.医院信息化中的数字认证设计与实施[J].中国医疗设备,2015,30(5):83-85,32.
[23]国家市场管理总局.电子营业执照管理办法(试行)[EB/OL].[2019-01-18].http://samr.saic.gov.cn/gg/201812/P020181206307438664441.docx.
[24]京东.发票制度说明[EB/OL].[2019-01-19].http://help.jd.com/user/issue/313-974.html.
[25]林伟宏.时间戳技术在电子档案管理中的应用探析[J].浙江档案,2015(1):20-22.