Teburin Abubuwan Ciki
1. Gabatarwa
Tsaron tsarin bayanai (IS) yana samun ƙarfafawa ta hanyar ɗimbin fasahohin tsaro na zamani, gami da bangon wuta, hanyoyin ɓoye bayanai, da sa hannu na lantarki. Wani muhimmin sashi shine tantancewa, wanda ke tabbatar da ingantaccen tabbaci na asalin mai amfani. Ana iya yin tantancewa ta hanyoyi uku na asali: na tushen ilimi (misali, kalmomin sirri), halayen biometric (misali, sawun yatsa), da mallakar abubuwan ganowa (misali, katunan wayo). Tantancewa mai ƙarfi yana haɗa waɗannan hanyoyin, kamar yadda ake gani a dangantakar abokin ciniki-banki ko cibiyoyin sadarwar wayar hannu ta amfani da katunan SIM da PIN.
2. Bayyani na Abubuwan Gano Lantarki
2.1 Tantancewa ta hanyar Ilimi
Kalmomin sirri na tsaye sune mafi tsohuwar kuma mafi yawan fasaha, ana haɗa su kai tsaye a cikin tsarin aiki. Duk da haka, su ne mafi ƙarancin tsaro saboda haɗarin hasashen, tsangwama, da nauyin sarrafa kalmomin sirri da yawa. Kalmomin sirri masu canzawa, waɗanda ake samarwa don zama guda ɗaya, suna ba da ingantaccen tsaro. Dabarar shiga guda ɗaya (SSO) tana fitowa a matsayin mafita mai ban sha'awa don kawar da rashin aiki na takaddun shaida da yawa a kasuwancin lantarki, yana amfanar duka masu amfani da masu gudanarwa.
2.2 Tantancewa ta hanyar Biometric
Hanyoyin Biometric sun haɗa da duban sawun yatsa (ta amfani da na'urori masu auna wutar lantarki, haske, ultrasonic, zafi, ko matsi), duban ido na retinal da iris, tantance fuska, tantance murya, da motsin maɓalli. Duban sawun yatsa ya dogara ne akan keɓantacce amma ana iya yaudararsa. Duban iris ya fi dacewa fiye da duban retinal. Tantance fuska tana amfani da hanyoyin sadarwa na jijiyoyi da AI. Tantance murya yana da tsada amma ƙarancin dogaro. Motsin maɓalli yana nazarin salon bugawa don hana shiga mara izini ko da an sace kalmar sirri.
2.3 Tantancewa ta hanyar Mallaka
Wannan rukunin ya haɗa da katuna daban-daban (misali, katunan wayo, katunan SIM) da na'urorin lissafin tantancewa (alamu). Waɗannan abubuwa suna ba da wani mataki na tsaro na zahiri, galibi ana haɗa su da PIN don tantancewa mai ƙarfi.
3. Sa hannu na Lantarki: Ma'ana da Ayyuka
Sa hannu na lantarki wata hanya ce ta dijital da ke tabbatar da sahihanci da amincin takardun lantarki. Ayyukansa na asali sun haɗa da gano mai sa hannu, tabbatar da amincin takarda, da rashin musantawa.
3.1 Rabe-raben Takaddun Shaida
Takaddun shaida na dijital, waɗanda Hukumomin Ba da Shaida (CAs) suka bayar, suna ɗaure maɓalli na jama'a zuwa asali. Rabe-raben sun haɗa da takaddun shaida masu cancanta (mafi girman ingancin doka) da takaddun shaida na ci gaba (don sadarwa mai aminci).
3.2 Amfani a Aiki
Amfani a aiki ya haɗa da samun sa hannu na lantarki, sanya hannu kan saƙonnin imel masu fita, karɓar saƙonni da aka sanya hannu, da tabbatar da sa hannu. Amfani da sa hannu na lantarki yana ƙaruwa akai-akai, saboda ci gaban dokoki, kuma yanzu ana amfani da shi a sassa daban-daban.
4. Fasahohin Tsaro a Tsarin Bayanai
Bayan tantancewa, tsaron IS ya dogara da bangon wuta, ɓoye bayanai (mai daidaitawa da mara daidaitawa), tsarin gano kutse, da manufofin tsaro. Haɗin waɗannan fasahohin yana haifar da tsaro mai yadudduka, mai mahimmanci don kare bayanai masu mahimmanci a kasuwancin lantarki, banki, da ayyukan gwamnati.
5. Mahimmin Fahimta: Binciken Masana
Mahimmin Fahimta: PDF ɗin yana ba da bayyani na asali na fasahohin tantancewa da sa hannu na lantarki, amma ba shi da zurfin mahimmanci kan barazanar zamani da ka'idojin ɓoye bayanai. Ƙimar gaske tana cikin rarrabuwar hanyoyin tantancewa a sarari, wanda har yanzu yana da amfani don tsara tsarin abubuwa da yawa.
Tsarin Tunani: Takardar ta tashi daga ra'ayoyin tsaro na gaba ɗaya zuwa takamaiman abubuwan ganowa, sannan zuwa sa hannu na lantarki. Wannan tsari yana da ma'ana amma yana da bayani da yawa, ya rasa kimantawa mai mahimmanci na musayar ciniki tsakanin tsaro da sauƙin amfani.
Ƙarfi da Rashi: Ƙarfin ya haɗa da cikakken rarrabuwar hanyoyin biometric da kuma jaddada tantancewa mai ƙarfi. Rashi: tattaunawar kalmomin sirri masu canzawa ba ta da zurfi, tana watsi da kalmomin sirri na lokaci guda (TOTP) da lambobin tabbatarwa na saƙo na tushen hash (HMAC). Sashen kan sa hannu na lantarki bai magance algorithms masu jurewa jimla ba ko ƙalubalen aiki na soke takardar shaida.
Fahimtar Aiki: Ƙungiyoyi yakamata su wuce kalmomin sirri na tsaye zuwa tantancewa da abubuwa da yawa (MFA) wanda ya haɗa biometric da alamomi. Don sa hannu na lantarki, ɗauki matsayin ka'idoji kamar PAdES (Sa hannu na Lantarki na Ci gaba na PDF) kuma shirya don ɓoye bayanai bayan jimla. Rarrabuwar takardar na iya jagorantar duba tsaro, amma masu aiki dole ne su ƙara shi da mafi kyawun ayyuka na yanzu daga NIST SP 800-63 da jagororin ENISA.
6. Cikakkun Bayanai na Fasaha da Tsarin Lissafi
Ana iya ƙididdige ƙarfin tantancewa ta amfani da entropy. Ga kalmar sirri ta tsaye mai tsayi $L$ daga haruffa masu girman $N$, entropy shine $H = L \cdot \log_2(N)$ bits. Ga tsarin biometric, ƙimar karɓar ƙarya (FAR) da ƙimar ƙin ƙarya (FRR) sune ma'auni masu mahimmanci. Matsakaicin kuskuren daidai (EER) shine inda FAR = FRR. Ga sa hannu na dijital ta amfani da RSA, samar da sa hannu shine $s = m^d \mod n$, kuma tabbatarwa yana duba $m = s^e \mod n$, inda $(e, n)$ shine maɓalli na jama'a kuma $d$ shine maɓalli na sirri.
7. Sakamakon Gwaji da Bayanin Zane
Zane na 1: Kwatanta Hanyar Tantancewa
Ginshiƙi mai kwatanta kalmomin sirri na tsaye, kalmomin sirri masu canzawa, biometric (sawun yatsa, iris, murya), da katunan wayo a matakin tsaro, farashi, da sauƙin amfani. Biometrics yana nuna babban tsaro amma matsakaicin farashi; kalmomin sirri na tsaye suna da ƙarancin farashi amma ƙarancin tsaro.
Zane na 2: Tsarin Aiki na Sa hannu na Lantarki
Tsarin zane mai kwatanta tsari: mai amfani ya ƙirƙiri takarda → lissafin hash ($h = H(m)$) → samar da sa hannu ($s = h^d \mod n$) → watsawa → mai karɓa ya tabbatar ($h' = s^e \mod n$) → kwatanta $h'$ da $H(m)$. Wannan yana tabbatar da aminci da sahihanci.
8. Nazarin Shari'a: Tantancewa da Abubuwa Da yawa a Bankin Lantarki
Yanayi: Banki yana aiwatar da tantancewa mai ƙarfi don ma'amaloli na kan layi. Mai amfani ya shiga da kalmar sirri ta tsaye (abu na ilimi) sannan ya karɓi kalmar sirri ta lokaci guda ta SMS (abu na mallaka). Don ma'amaloli masu ƙima, ana buƙatar duban sawun yatsa na biometric (abu na asali). Wannan tsarin abubuwa uku yana rage zamba da kashi 99.7% idan aka kwatanta da tsarin kalmar sirri kaɗai (bisa ga bayanan masana'antu daga 2022). Tsarin yana amfani da TOTP (RFC 6238) don kalmomin sirri masu canzawa, tare da matakin lokaci na daƙiƙa 30 da lamba mai lambobi 6.
9. Aikace-aikace da Hanyoyi na gaba
Hanyoyi na gaba sun haɗa da tantancewa ba tare da kalmar sirri ba ta amfani da ka'idojin FIDO2/WebAuthn, biometric na ɗabi'a (tantancewa mai ci gaba dangane da motsin linzamin kwamfuta da salon bugawa), da sa hannu na dijital masu jurewa jimla (misali, CRYSTALS-Dilithium). Sa hannu na lantarki zai haɗa tare da blockchain don hanyoyin duba marasa canzawa. Dokar eIDAS 2.0 ta EU za ta haifar da ɗaukar sa hannu na lantarki masu cancanta a cikin ƙasashe membobi. Ganewar rashin daidaituwa ta tushen AI za ta haɓaka tsarin biometric ta hanyar daidaitawa da halayen mai amfani akan lokaci.
10. Manazarta
- Horovčák, P. (2002). Elektronická identifikácia, elektronický podpis a bezpečnosť informačných systémov. Acta Montanistica Slovaca, 7(4), 239-242.
- NIST. (2020). Digital Identity Guidelines. NIST Special Publication 800-63-3.
- ENISA. (2021). Recommendations for Multi-factor Authentication.
- RFC 6238. (2011). TOTP: Time-Based One-Time Password Algorithm.
- Menezes, A., van Oorschot, P., & Vanstone, S. (1996). Handbook of Applied Cryptography. CRC Press.
- European Commission. (2021). eIDAS Regulation (EU) No 910/2014.