January 28 is International Data Protection Day. On this day in 1981, the Convention of the Council of Europe "On the protection of individuals with regard to automated processing of personal data" was signed. In some countries, this holiday is called "Privacy Day".
The convention became the first international document in the field of personal data protection, which defined the mechanisms of protection of human rights to the inviolability of his personal life, and also defined the concept of "personal data". The main principles of processing and protection of personal data proposed by the said Convention are honesty and legality of obtaining and processing personal data; storing personal data for certain and legitimate purposes and not using them in a way incompatible with these purposes.
For Research Institute of Applied Information Technologies this holiday is special, because it is the PIT Research Institute that is the leader in the development and implementation of the most modern technologies for personal data protection in software products used in the field of domestic education.
From the very beginning of the implementation of the "OSVITA" information and production system by the specialists of the institute, which started the era of electronic documents and electronic document circulation in the Ukrainian education system, the task arose to ensure reliable work and prevent unauthorized access to the "OSVITA" information system through the development and implementation of a complex of information, software and technical measures for cryptographic protection of personal information and construction comprehensive information protection system.
The main advantages of the PIT Research Institute's proposals in the field of development and implementation of information protection solutions are a comprehensive approach to the creation of personal information protection systems. The software and technical complex of the Key Certification Center, developed by the institute's specialists, is in the top ten of relevant institutions in the country. Setting up the electronic document flow for clients, the specialists of the institute ensure its support by the means of electronic digital signature, which is legally recognized, while adhering to the standards defined for organizations with increased requirements for the protection of personal data.
When fulfilling customer orders, developers of IT solutions in the field of personal data protection from the Research Institute of PIT use the most modern hardware means of cryptographic protection of information. While developing and implementing electronic document management standards within the framework of the "OSVITA" IAS, the specialists of the PIT Research Institute made a choice in favor of the progressive technology of smart cards. Currently, this technology is used in all software products of the PIT Research Institute. A smart card is a full-fledged mini-computer on a single crystal. All critical functions for protecting personal data rely on it: it contains cryptographic keys, with the help of these cards, cryptographic operations are performed that would be dangerous to perform on an ordinary computer.
The technology of information protection with the help of smart cards is successfully used in the automated system of the SCHOOL and the automated management system of the university. The personal data protection system in the SCHOOL ACS and the university ACS provides for cryptographic protection of information when it is stored on magnetic media, transmission through communication channels, electronic digital signature verification, identification of system operators, implementation of delimitation of access to resources and processes in the system. Protection of personal data with the help of start cards is also successfully used in the unique development of the Scientific Research Institute PIT - an electronic student ticket, which combines the functions of a student ticket and a bank card based on the NSMEP and VISA payment systems.
In order to protect the client from unauthorized access to its networks and systems, as well as to prevent the compromise of its keys, the PIT Research Institute offers all the necessary tools necessary for safe work through the development and implementation of a comprehensive information protection system (ICSI). KSZI - a set of measures of a diverse nature - from organizational to technical, which allow to ensure the protection of information for this automated system.
In accordance with the normative documents on KSZI, specialists of the institute coordinate the technical idea, develop technical and operational sets, as well as organize state expertise of KSZI with the help of external authorized organizations. These independent organizations conclude that the announced possibilities have been implemented and, based on the results of the examination, KSZI receives a certificate of compliance with state standards. Specialists of the PIT Research Institute carry out full customization of KSZI for the client in order to protect him from the occurrence of any problems. So, for example, the entire set of operating documents is developed taking into account the requirements of the organization that must check the system.
An important argument for the client regarding cooperation with the PIT Research Institute in matters of personal data protection is that the institute's specialists have successful experience in the development and implementation of both typical and non-typical (individual) solutions for personal data protection. In the event that it is necessary to take into account all the specific wishes of the client and implement an atypical solution with KSZI, the specialists of the Research Institute of PIT study the client's wishes for several months in order to take them into account as much as possible during the development and implementation of KSZI. During the operation of information protection systems, the specialists of the institute carefully study all the wishes of customers in order to take them into account in their future developments.
The Research Institute of PIT carries out its activities on the development and implementation of information protection systems exclusively in accordance with the current legislation of Ukraine. All software products - Key Certification Center, software libraries built into products developed by specialists of the institute have relevant expert opinions. All KSZI, which are developed and implemented by specialists of the institute, also have expert opinions.
Every year, with every stage of the scientific, technical and technological revolution, the problem of personal data protection is gaining more and more importance. Electronic devices of various purposes are increasingly actively becoming an integral part of business and private life. Accordingly, the threat of leakage of personal data, business or private information, which can lead to fatal consequences, is increasing. Corporate or personal efforts to secure business or private information are usually not enough, so you should turn to true information security professionals. The Research Institute of Applied Information Technologies is just such an experienced professional in the market of cryptographic protection of personal data, development and implementation of complex information protection systems.
