TECHNOLOGICAL SOLUTION FOR FORMING A TRUST INFRASTRUCTURE IN THE DIGITAL RUBLE SECURITY SYSTEM
Abstract
The relevance of the article is due to the digital transformation of the Russian economy, the most important direction of which is the development and implementation of digital ruble instruments in the credit and financial sector. In this regard, the national system should be based on the information technology infrastructure of trust in the digital ruble security system. The main functional properties of such a trust infrastructure include identification and authentication mechanisms, secure financial transactions based on protecting the integrity and confidentiality of data of participants and users of the digital ruble platform. In addition to the technological readiness of the trust infrastructure, it is necessary to build public trust in the digital ruble. The above circumstances determined the importance and necessity of developing a technological solution for the formation of a trust infrastructure in the digital ruble security system. In the course of the study, the following tasks were solved: a theoretical interpretation and empirical operationalization of the basic concepts of the digital ruble trust infrastructure were carried out; its organizational and technological prerequisites were investigated; the structural elements of the basic and role models of the digital ruble infrastructure were clarified; the analysis of encryption and tokenization methods of API was carried out, and a technological solution was formulated to ensure the security of the digital ruble trust infrastructure. Based on the results of the study, a set of measures aimed at the security of access to the digital ruble platform for participants and users via secure channels is proposed; the security of access for credit institutions based on two-factor authentication, as well as the security of the privacy of individuals and legal entities on the trust infrastructure in the digital ruble security system. Of practical importance is the list of works related to the deployment of Certification Authorities, information security tools and cryptographic information protection tools, integration with a unified information identification and authentication system and a fast payment system and their implementation in the general digital ruble system.
References
1. Available at: https://blog.eldorado.ru/publications/chto-takoe-tsifrovoy-rubl-prostymi-slovami-komu-i-zachem-on-neobkhodim-36739.
2. Available at: https://media.halvacard.ru/financial-literacy/chto-takoe-cifrovoi-rubl-i-dlya-chego-on-nuzhen.
3. Osipova V.S. Bezopasnost' tsifrovogo rublya [Security of the digital ruble], Ekonomicheskie nauki [Eco-nomic sciences], 2024, No. 7 (236).
4. Saadulaeva T.A., Shlyakhtina I.A. Tsifrovoy rubl' kak mekhanizm obespecheniya finansovoy bezopas-nosti gosudarstva [Digital ruble as a mechanism for ensuring the financial security of the state], Ekonomika i biznes: teoriya i praktika [Economy and business: theory and practice], 2022,
No. 13, pp. 111-116.
5. Korolev V.I. Arkhitekturnoe postroenie infrastruktury otkrytykh klyuchey integrirovannogo infor-matsionnogo prostranstva [Architectural construction of the public key infrastructure of the integrated in-formation space], Bezopasnost' informatsionnykh tekhnologiy [Security of Information], 2015, Vol. 22, No. 3.
6. Mel'nikov D.A. Metody i sredstva postroeniya sistemy upravleniya kriptograficheskoy zashchitoy na osnove infrastruktury otkrytykh klyuchey dlya shirokomasshtabnykh informatsionno-telekommunikatsionnykh sistem: avtoref. diss. … d-ra tekhn. nauk [Methods and means of constructing a cryptographic protection management system based on the public key infrastructure for large-scale in-formation and telecommunication systems: abstract of dr. of eng. sc. diss.]. Moscow, 2022.
7. Grachkov I.A., Malyuk A.A. Problemy razrabotki doverennogo programmnogo obespecheniya, primenyaemogo na ob"ektakh kriticheskoy informatsionnoy infrastruktury (organizatsionnye i metodicheskie aspekty) [Problems of developing trusted software used at critical information infrastruc-ture facilities (organizational and methodological aspects)], Bezopasnost' informatsionnykh tekhnologiy [Information Technology Security], 2019, pp. 56-63.
8. Mel'nikov D.A. i dr. Rekomendatsii po sozdaniyu infrastruktury doveriya sistemy tsifrovogo rublya [Recommendations for creating a trust infrastructure for the digital ruble system], Bezopasnost' infor-matsionnykh tekhnologiy [Information Technology Security], 2024, Vol. 31, No. 3, pp. 43-63.
9. Kontseptsiya tsifrovogo rublya. Bank Rossii [The concept of the digital ruble. Bank of Russia], 2021, pp. 9-10. Available at: https://cbr.ru/Content/Document/File/120075/concept_08042021.pdf.
10. Shashurina Irina. Available at: https://in4security.com/news/tpost/jpmmfiab51-chto-nuzhno-znat-o-novih-standartah-bezo?ysclid=m7c1y7gk5404288694.
11. Polozhenie TSentral'nogo Banka Rossiyskoy Federatsii ot 3 avgusta 2023 goda № 820-P «O platforme tsifrovogo rublya» [Regulation of the Central Bank of the Russian Federation dated August 3, 2023 No. 820-P "On the Digital Ruble Platform"]. (As amended by Bank of Russia Instruction dated July 12, 2024 No. 6804-U).
12. Ukazanie TsB RF ot 12.07.2024 N 6804-U [Instruction of the Central Bank of the Russian Federation dated July 12, 2024 No. 6804-U].
13. Polozhenie Banka Rossii ot 7 dekabrya 2023 g. № 833-p «O trebovaniyakh k obespecheniyu zashchity informatsii dlya uchastnikov platformy tsifrovogo rublya» [Regulation of the Bank of Russia dated De-cember 7, 2023 No. 833-p "On the Requirements for Ensuring Information Security for Participants of the Digital Ruble Platform"].
14. Polozhenie PKZ-2005, utverzhdennoe prikazom Federal'noy sluzhby bezopasnosti Rossiyskoy Feder-atsii ot 9 fevralya 2005 goda N 66 Zaregistrirovan Minyustom Rossii 3 marta 2005 goda, regis-tratsionnyy N 6382, s izmeneniyami, vnesennymi prikazom FSB Rossii ot 12 aprelya 2010 goda N 173 (zaregistrirovan Minyustom Rossii 25 maya 2010 goda, registratsionnyy N 17350); Prikaz Federal'noy sluzhby bezopasnosti Rossiyskoy Federatsii ot 27 dekabrya 2011 goda N 796; Polozhenie Banka Rossii ot 7 dekabrya 2023 g. № 833-p «O trebovaniyakh k obespecheniyu zashchity informatsii dlya uchast-nikov platformy tsifrovogo rublya» [Regulation PKZ-2005, approved by the order of the Federal Securi-ty Service of the Russian Federation dated February 9, 2005 N 66 Registered by the Ministry of Justice of Russia on March 3, 2005, registration N 6382, with amendments introduced by the order of the FSB of Russia dated April 12, 2010 N 173 (registered by the Ministry of Justice of Russia on May 25, 2010, registration N 17350); Order of the Federal Security Service of the Russian Federation dated December 27, 2011 N 796; Regulation of the Bank of Russia dated December 7, 2023 N 833-p "On the require-ments for ensuring the protection of information for participants in the digital ruble platform"].
15. Reglament akkreditovannogo Udostoveryayushchego TSentra AO «AL'FA-BANK». Versiya 3.0 ot 27.04.2021 g. Prilozhenie k Prikazu № 519 ot 27.04.2021 [Regulations of the accredited Certification Authority of ALFA-BANK JSC. Version 3.0 dated 04/27/2021. Appendix to Order No. 519 dated 04/27/2021].
16. Natsional'nyy standart Rossiyskoy Federatsii. Informatsionnaya tekhnologiya. Kriptograficheskaya zashchita informatsii. Blochnye shifry. GOST R 34.12─2015 [National standard of the Russian Federa-tion. Information technology. Cryptographic protection of information. Block ciphers. GOST
R 34.12-2015].
17. Ob utverzhdenii trebovaniy o zashchite informatsii, ne sostavlyayushchey gosudarstvennuyu taynu, soderzhashcheysya v gosudarstvennykh informatsionnykh sistemakh. Prikaz FSTEK ot 11 fevralya
2013 g. N 17 [On approval of requirements for the protection of information that does not constitute a state secret, contained in state information systems. Order of the FSTEC dated February 11, 2013 N 17].
18. Ob utverzhdenii sostava i soderzhaniya organizatsionnykh i tekhnicheskikh mer po obespecheniyu be-zopasnosti personal'nykh dannykh pri ikh obrabotke v informatsionnykh sistemakh personal'nykh dannykh. Prikaz FSTEK ot 18 fevralya 2013 g. N 21 [On approval of the composition and content of organizational and technical measures to ensure the security of personal data when processing them in personal data information systems. Order of the FSTEC of February 18, 2013 N 21].
19. Ob utverzhdenii Sostava i soderzhaniya organizatsionnykh i tekhnicheskikh mer po obespecheniyu be-zopasnosti personal'nykh dannykh pri ikh obrabotke v informatsionnykh sistemakh personal'nykh dannykh s ispol'zovaniem sredstv kriptograficheskoy zashchity informatsii, neobkhodimykh dlya vy-polneniya ustanovlennykh Pravitel'stvom Rossiyskoy Federatsii trebovaniy k zashchite personal'nykh dannykh dlya kazhdogo iz urovney zashchishchennosti. Prikaz FSB Rossii ot 10 iyulya 2014 g. N 378 [On approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data when Processing them in Personal Data Information Systems Using Crypto-graphic Information Protection Means Necessary to Meet the Requirements for the Protection of Person-al Data for Each of the Security Levels Established by the Government of the Russian Federation. Order of the FSB of Russia of July 10, 2014 N 378].
20. GOST R 57580.1-2017. Natsional'nyy standart Rossiyskoy Federatsii. Bezopasnost' finansovykh (bankovskikh) operatsiy. Zashchita informatsii finansovykh organizatsiy. Bazovyy sostav organi-zatsionnykh i tekhnicheskikh mer". Utverzhden Prikazom Rosstandarta ot 08.08.2017 N 822-st. [GOST R 57580.1-2017. National standard of the Russian Federation. Security of financial (banking) transac-tions. Protection of information of financial organizations. Basic composition of organizational and tech-nical measures". Approved by Order of Rosstandart dated 08.08.2017 N 822-st.].
21. Kontseptsiya tsifrovogo rublya. Bank Rossii. 2021 [Concept of the digital ruble. Bank of Russia. 2021].
22. Standart platformy tsifrovogo rublya «Poryadok podklyucheniya uchastnika platformy k platforme tsifrovogo rublya» Versiya 1.3 [Digital ruble platform standard "Procedure for connecting a platform participant to the digital ruble platform" Version 1.3].
