{"id":9272,"date":"2024-08-02T11:18:03","date_gmt":"2024-08-02T09:18:03","guid":{"rendered":"https:\/\/www.idstory.com\/?p=9272"},"modified":"2024-08-02T11:46:41","modified_gmt":"2024-08-02T09:46:41","slug":"asymetricka-kryptografie-a-jeji-role-v-identity-managementu","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/asymetricka-kryptografie-a-jeji-role-v-identity-managementu\/","title":{"rendered":"Asymetrick\u00e1 kryptografie a jej\u00ed role v Identity Managementu"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"9272\" class=\"elementor elementor-9272\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-48905b62 e-flex e-con-boxed e-con e-parent\" data-id=\"48905b62\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6feae680 elementor-widget elementor-widget-text-editor\" data-id=\"6feae680\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<span style=\"font-weight: 400;\">V dne\u0161n\u00edm digit\u00e1ln\u00edm sv\u011bt\u011b je bezpe\u010dnost dat kl\u00ed\u010dov\u00fdm faktorem pro ka\u017edou IT spole\u010dnost. Identity management (IDM) se stal nezbytn\u00fdm n\u00e1strojem pro ochranu citliv\u00fdch informac\u00ed a zaji\u0161t\u011bn\u00ed bezpe\u010dn\u00e9 komunikace. Jedn\u00edm z nejd\u016fle\u017eit\u011bj\u0161\u00edch prvk\u016f IDM je asymetrick\u00e1 kryptografie, kter\u00e1 je z\u00e1kladn\u00edm kamenem pro pou\u017e\u00edv\u00e1n\u00ed certifik\u00e1t\u016f.<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bf21a24 e-flex e-con-boxed e-con e-parent\" data-id=\"bf21a24\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7632687 elementor-widget elementor-widget-text-editor\" data-id=\"7632687\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h4><b>Co je asymetrick\u00e1 kryptografie?<\/b><\/h4><p><span style=\"font-weight: 400;\">Asymetrick\u00e1 kryptografie, je typ kryptografie, kter\u00e1 vyu\u017e\u00edv\u00e1 dva kl\u00ed\u010de: ve\u0159ejn\u00fd a soukrom\u00fd. Kdy\u017e n\u011bco za\u0161ifrujete ve\u0159ejn\u00fdm kl\u00ed\u010dem, m\u016f\u017ee b\u00fdt de\u0161ifrov\u00e1no pouze odpov\u00eddaj\u00edc\u00edm soukrom\u00fdm kl\u00ed\u010dem, a naopak. Tento syst\u00e9m umo\u017e\u0148uje bezpe\u010dnou komunikaci a ov\u011b\u0159ov\u00e1n\u00ed dat v digit\u00e1ln\u00edm sv\u011bt\u011b.<\/span><\/p><h4><b>Jak to funguje?<\/b><\/h4><p><span style=\"font-weight: 400;\">Ka\u017ed\u00fd u\u017eivatel m\u00e1 p\u00e1r kl\u00ed\u010d\u016f: soukrom\u00fd kl\u00ed\u010d, kter\u00fd je tajn\u00fd a uchov\u00e1v\u00e1ny bezpe\u010dn\u011b, a ve\u0159ejn\u00fd kl\u00ed\u010d, kter\u00fd je dostupn\u00fd v\u0161em. Zde jsou dva hlavn\u00ed zp\u016fsoby vyu\u017eit\u00ed asymetrick\u00e9 kryptografie:<\/span><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><b>\u0160ifrov\u00e1n\u00ed<\/b><span style=\"font-weight: 400;\">:<\/span><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Kdy\u017e chcete poslat \u0161ifrovanou zpr\u00e1vu, pou\u017eijete ve\u0159ejn\u00fd kl\u00ed\u010d p\u0159\u00edjemce.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">P\u0159\u00edjemce m\u016f\u017ee de\u0161ifrovat zpr\u00e1vu pouze sv\u00fdm soukrom\u00fdm kl\u00ed\u010dem.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">T\u00edmto zp\u016fsobem je zaru\u010deno, \u017ee zpr\u00e1vu m\u016f\u017ee \u010d\u00edst pouze zam\u00fd\u0161len\u00fd p\u0159\u00edjemce.<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Digit\u00e1ln\u00ed podpis<\/b><span style=\"font-weight: 400;\">:<\/span><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Odes\u00edlatel vytvo\u0159\u00ed hash zpr\u00e1vy a tento hash za\u0161ifruje sv\u00fdm soukrom\u00fdm kl\u00ed\u010dem, \u010d\u00edm\u017e vytvo\u0159\u00ed digit\u00e1ln\u00ed podpis.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">P\u0159\u00edjemce m\u016f\u017ee pomoc\u00ed ve\u0159ejn\u00e9ho kl\u00ed\u010de odes\u00edlatele ov\u011b\u0159it, \u017ee podpis odpov\u00edd\u00e1 hash zpr\u00e1vy a t\u00edm potvrdit, \u017ee zpr\u00e1va nebyla zm\u011bn\u011bna.<\/span><\/li><\/ul><\/li><\/ol><h4><b>Role certifik\u00e1t\u016f<\/b><\/h4><p><span style=\"font-weight: 400;\">Certifik\u00e1ty ov\u011b\u0159uj\u00ed vlastnictv\u00ed ve\u0159ejn\u00e9ho kl\u00ed\u010de a zaji\u0161\u0165uj\u00ed, \u017ee kl\u00ed\u010d pat\u0159\u00ed konkr\u00e9tn\u00edmu vlastn\u00edkovi. Certifik\u00e1t obsahuje informace jako jm\u00e9no vlastn\u00edka, platnost a autoritu, kter\u00e1 certifik\u00e1t vydala. Certifik\u00e1ty jsou z\u00e1sadn\u00ed pro zabezpe\u010den\u00ed webov\u00e9 komunikace p\u0159es protokol HTTPS, kter\u00fd zaji\u0161\u0165uje \u0161ifrovan\u00e9 spojen\u00ed mezi prohl\u00ed\u017ee\u010dem a serverem.<\/span><\/p><p><span style=\"font-weight: 400;\">Bez certifik\u00e1t\u016f bychom nebyli schopni ov\u011b\u0159it integritu webov\u00fdch str\u00e1nek, se kter\u00fdmi komunikujeme. Pokud certifik\u00e1t neodpov\u00edd\u00e1, znamen\u00e1 to, \u017ee str\u00e1nce nem\u016f\u017eeme d\u016fv\u011b\u0159ovat, co\u017e m\u016f\u017ee znamenat, \u017ee str\u00e1nka byla zm\u011bn\u011bna nebo je podvr\u017een\u00e1.<\/span><\/p><h4><b>Certifika\u010dn\u00ed autority<\/b><\/h4><p><span style=\"font-weight: 400;\">Abychom nemuseli ov\u011b\u0159ovat ka\u017ed\u00fd certifik\u00e1t zvl\u00e1\u0161\u0165, existuj\u00ed certifika\u010dn\u00ed autority (CA), kter\u00e9 podepisuj\u00ed a vyd\u00e1vaj\u00ed certifik\u00e1ty. Certifika\u010dn\u00ed autority jsou d\u016fv\u011bryhodn\u00e9 organizace, kter\u00e9 ov\u011b\u0159uj\u00ed identitu subjekt\u016f a vyd\u00e1vaj\u00ed jim certifik\u00e1ty. Ka\u017ed\u00fd u\u017eivatel m\u00e1 ve sv\u00e9m syst\u00e9mu seznam d\u016fv\u011bryhodn\u00fdch certifika\u010dn\u00edch autorit, kter\u00e9 byly schv\u00e1leny nap\u0159\u00edklad v\u00fdrobcem opera\u010dn\u00edho syst\u00e9mu nebo syst\u00e9mov\u00fdmi administratorem organizace.<\/span><\/p><h4><b>Proces z\u00edsk\u00e1n\u00ed certifik\u00e1tu<\/b><\/h4><p><span style=\"font-weight: 400;\">Z\u00edsk\u00e1n\u00ed certifik\u00e1tu obvykle zahrnuje vytvo\u0159en\u00ed \u017e\u00e1dosti o podpis certifik\u00e1tu (CSR), kterou \u017eadatel pos\u00edl\u00e1 certifika\u010dn\u00ed autorit\u011b. CA ov\u011b\u0159\u00ed identitu \u017eadatele a podep\u00ed\u0161e certifik\u00e1t sv\u00fdm soukrom\u00fdm kl\u00ed\u010dem, \u010d\u00edm\u017e zaru\u010d\u00ed jeho pravost a platnost.<\/span><\/p><h4><b>V\u00fdznam certifik\u00e1t\u016f pro IDM<\/b><\/h4><p><span style=\"font-weight: 400;\">Pou\u017e\u00edv\u00e1n\u00ed certifik\u00e1t\u016f v IDM zaji\u0161\u0165uje bezpe\u010dnou a ov\u011b\u0159enou komunikaci mezi syst\u00e9my a u\u017eivateli. Certifik\u00e1ty chr\u00e1n\u00ed p\u0159ed \u00fatoky typu man-in-the-middle, kde \u00fato\u010dn\u00edk m\u016f\u017ee zachytit a zm\u011bnit komunikaci mezi dv\u011bma stranami. Pokud m\u00e1 IdM napojenou CA pro vyd\u00e1v\u00e1n\u00ed u\u017eivatelsk\u00fdch certifik\u00e1tu, tak v p\u0159\u00edpad\u011b kompromitace, lze jednodu\u0161e certifik\u00e1t revokovat a t\u00edm omezit jeho zneu\u017eit\u00ed.<\/span><\/p><p><span style=\"font-weight: 400;\">IdStory m\u016f\u017ee vyu\u017e\u00edt bu\u010f certifik\u00e1t z extern\u00ed certifika\u010dn\u00ed autority (nap\u0159. PostSignum, MS certifika\u010dn\u00ed autoritu) nebo m\u00e1 p\u0159\u00edmo v platform\u011b zabudovanou svoji vlastn\u00ed.\u00a0<\/span><\/p><h3><b>\u017divotn\u00ed cyklus certifik\u00e1tu s IdM<\/b><\/h3><p><span style=\"font-weight: 400;\">\u017divotn\u00ed cyklus certifik\u00e1tu s IdM zahrnuje n\u011bkolik f\u00e1z\u00ed, kter\u00e9 mohou b\u00fdt efektivn\u011b automatizovany:<\/span><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Vytvo\u0159en\u00ed a \u017e\u00e1dost o certifik\u00e1t:<\/b><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">U\u017eivatel vytvo\u0159\u00ed \u017e\u00e1dost o certifik\u00e1t (CSR), kter\u00e1 je zasl\u00e1na do CA prost\u0159ednictv\u00edm IdM syst\u00e9mu.<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Vyd\u00e1n\u00ed certifik\u00e1tu:<\/b><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">CA ov\u011b\u0159\u00ed \u017e\u00e1dost a vyd\u00e1 certifik\u00e1t, kter\u00fd je pot\u00e9 importov\u00e1n zp\u011bt do IdM syst\u00e9mu.<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Distribuce a pou\u017eit\u00ed:<\/b><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">IdM syst\u00e9m distribuuje certifik\u00e1t u\u017eivateli nebo syst\u00e9mu, kde je pot\u0159eba.<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Obnoven\u00ed:<\/b><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">P\u0159ed vypr\u0161en\u00edm platnosti certifik\u00e1tu IdM syst\u00e9m automaticky upozorn\u00ed u\u017eivatele na pot\u0159ebu obnovy a zah\u00e1j\u00ed proces vytvo\u0159en\u00ed nov\u00e9 \u017e\u00e1dosti o certifik\u00e1t.<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Revokace:<\/b><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">V p\u0159\u00edpad\u011b kompromitace nebo zm\u011bny p\u0159\u00edstupu lze certifik\u00e1t jednodu\u0161e revokovat p\u0159\u00edmo z IdM syst\u00e9mu.<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Vypr\u0161en\u00ed a odstran\u011bn\u00ed:<\/b><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Po vypr\u0161en\u00ed platnosti je certifik\u00e1t automaticky odstran\u011bn z IdM syst\u00e9mu.<\/span><\/li><\/ul><\/li><\/ol><h3><b>V\u00fdhody automatizace s IdM<\/b><\/h3><p><span style=\"font-weight: 400;\">Automatizace \u017eivotn\u00edho cyklu certifik\u00e1tu pomoc\u00ed IdM p\u0159in\u00e1\u0161\u00ed n\u011bkolik v\u00fdhod:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Efektivita:<\/b><span style=\"font-weight: 400;\"> Sni\u017euje manu\u00e1ln\u00ed pr\u00e1ci spojenou s vyd\u00e1v\u00e1n\u00edm, obnovov\u00e1n\u00edm a revokac\u00ed certifik\u00e1t\u016f.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Bezpe\u010dnost:<\/b><span style=\"font-weight: 400;\"> Rychl\u00e1 reakce na bezpe\u010dnostn\u00ed incidenty d\u00edky schopnosti okam\u017eit\u00e9 revokace certifik\u00e1t\u016f.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Spolehlivost:<\/b><span style=\"font-weight: 400;\"> Minimalizuje riziko chyb zp\u016fsoben\u00fdch lidsk\u00fdm faktorem.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Konzistence:<\/b><span style=\"font-weight: 400;\"> Zaji\u0161\u0165uje, \u017ee v\u0161echny certifik\u00e1ty jsou vyd\u00e1v\u00e1ny, obnovov\u00e1ny a revokov\u00e1ny podle jednotn\u00fdch pravidel a politik.<\/span><\/li><\/ul><h3><b>Z\u00e1v\u011br<\/b><\/h3><p><span style=\"font-weight: 400;\">Asymetrick\u00e1 kryptografie a certifik\u00e1ty jsou kl\u00ed\u010dov\u00fdmi komponenty pro bezpe\u010dn\u00fd identity management. Poskytuj\u00ed bezpe\u010dnou a ov\u011b\u0159enou komunikaci, co\u017e je nezbytn\u00e9 pro ochranu citliv\u00fdch informac\u00ed v digit\u00e1ln\u00edm sv\u011bt\u011b. Certifika\u010dn\u00ed autority a jejich d\u016fv\u011bryhodnost hraj\u00ed z\u00e1sadn\u00ed roli v zaji\u0161t\u011bn\u00ed integrity a bezpe\u010dnosti datov\u00fdch p\u0159enos\u016f. V IT spole\u010dnosti zam\u011b\u0159en\u00e9 na identity management je d\u016fle\u017eit\u00e9 tyto technologie spr\u00e1vn\u011b implementovat a udr\u017eovat, aby byla zaji\u0161t\u011bna maxim\u00e1ln\u00ed bezpe\u010dnost a d\u016fv\u011bryhodnost syst\u00e9m\u016f a slu\u017eeb.<\/span><span style=\"font-weight: 400;\"> Automatizace \u017eivotn\u00edho cyklu certifik\u00e1t\u016f prost\u0159ednictv\u00edm IdM p\u0159in\u00e1\u0161\u00ed zna\u010dn\u00e9 v\u00fdhody, kter\u00e9 p\u0159isp\u00edvaj\u00ed k vy\u0161\u0161\u00ed efektivit\u011b, bezpe\u010dnosti a spolehlivosti cel\u00e9ho syst\u00e9mu.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-171e7e8 elementor-align-left custom-button  elementor-widget elementor-widget-button\" data-id=\"171e7e8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/demo.idstory.com\/\" target=\"_blank\" rel=\"noopener\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"27\" height=\"27\" viewBox=\"0 0 27 27\"><g id=\"Group_23\" data-name=\"Group 23\" transform=\"translate(-653 -835.648)\"><g id=\"Ellipse_4\" data-name=\"Ellipse 4\" transform=\"translate(653 835.648)\" fill=\"none\" stroke=\"#fff\" stroke-width=\"1\"><circle cx=\"13.5\" cy=\"13.5\" r=\"13.5\" stroke=\"none\"><\/circle><circle cx=\"13.5\" cy=\"13.5\" r=\"13\" fill=\"none\"><\/circle><\/g><path id=\"arrow-right\" d=\"M10.866,7.163a.557.557,0,1,0-.788.788l1.278,1.278h-9.8a.557.557,0,0,0,0,1.114h9.8l-1.278,1.278a.557.557,0,0,0,.788.788L13.1,10.18a.557.557,0,0,0,0-.788Z\" transform=\"translate(658.929 839.659)\" fill=\"#fff\"><\/path><\/g><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Vyzkou\u0161et DEMO<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-06d31a2 e-flex e-con-boxed e-con e-parent\" data-id=\"06d31a2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-43a3549 e-flex e-con-boxed e-con e-parent\" data-id=\"43a3549\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>V dne\u0161n\u00edm digit\u00e1ln\u00edm sv\u011bt\u011b je bezpe\u010dnost dat kl\u00ed\u010dov\u00fdm faktorem pro ka\u017edou IT spole\u010dnost. Identity management (IDM) se stal nezbytn\u00fdm n\u00e1strojem pro ochranu citliv\u00fdch informac\u00ed a zaji\u0161t\u011bn\u00ed bezpe\u010dn\u00e9 komunikace. Jedn\u00edm z nejd\u016fle\u017eit\u011bj\u0161\u00edch prvk\u016f IDM je asymetrick\u00e1 kryptografie, kter\u00e1 je z\u00e1kladn\u00edm kamenem pro pou\u017e\u00edv\u00e1n\u00ed certifik\u00e1t\u016f. Co je asymetrick\u00e1 kryptografie? Asymetrick\u00e1 kryptografie, je typ kryptografie, kter\u00e1 vyu\u017e\u00edv\u00e1 dva [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":9277,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_theme","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[32],"tags":[],"class_list":["post-9272","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-manager"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=9272"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9272\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/9277"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=9272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=9272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=9272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}