Personal information security cannot stop at "patching" (People's Review)

The network security control ability of a country is not only reflected in the escort of economic and social development, but also reflected in the protection of personal information security
You can get thousands of bank card information in five minutes, and most of the passwords are correct! Recently, a black industrial chain of stealing bank card information was exposed by the media. Among them, the division of labor of "blanking man" and "washing man" is clear, and the "advanced" technology of erecting fake base stations and intercepting verification codes is amazing. "The money was transferred inexplicably when it was stuck on the body", which scared the public out of a cold sweat.
In fact, many people have had similar experiences: as soon as they registered for the civil service exam, those who sold "answers" came to contact; When the baby was born, the milk powder seller sent messages; Before the delivery of the new house, there was a call for decoration... On the one hand, we were surprised at the other party's power, but on the other hand, we had to face the embarrassing reality of the overflow of privacy leaks. It can be said that ensuring the security of personal information has become a necessity for people's livelihood in the Internet era.
According to the Survey Report on the Protection of the Rights and Interests of Chinese Internet Users (2015), about 45 million Internet users suffered economic losses of more than 1000 yuan last year due to personal information disclosure and other reasons. Not only that, the theft of personal information will also bring endless trouble and psychological shadow. For example, a man in Shaanxi was "drugged" for 10 years because of his identity being falsely used, and his travel and accommodation were restricted everywhere; Another example is that more than 200000 infant information in Jinan has been leaked, and the address is accurate to the house number of the community, which makes parents "shudder at the thought that the black hand may reach out to the child".
Who let us "run naked" in the eyes of businessmen and outlaws? From the source, many mobile apps collect user information without authorization, and some business organizations ignore the law to buy and sell user data. What is more frightening is the "insider". Among the suspect seized by the police, there are personnel from telecommunications companies, as well as staff from express companies, banks, hospitals, schools, and industrial and commercial bureaus. The wide range of information security issues and the length of the black industry chain need to be highly valued.
"Network security and informatization are two wings of one body and two driving wheels". The network society brings people more convenience and speed, but if this society lacks information security, how can people trust to deposit and transfer wealth in electronic banks? How can you write down your real name and address when you buy online? Less sense of security, the vitality of economic and social development may be less. The network security control ability of a country is not only reflected in the escort of economic and social development, but also reflected in the protection of personal information security.
Personal information security, especially how to protect personal information in the network era, is a new topic for all countries in the world. In fact, China is also actively meeting this challenge. From the perspective of top-level design, the central government set up a leading group for network security and informatization work in 2014. "Strengthening personal data protection and cracking down on illegal disclosure and sale of personal data" was also included in the "13th Five-Year Plan"; From the perspective of the rule of law, the act of divulging personal information has been punished. The relevant ministries and commissions have also issued a number of protection policies and regulations, and the judicial crackdown has been intensified. It can be said that the "security fortress" of personal information is being gradually strengthened.
Of course, compared with the actual safety risks and public satisfaction, this "reinforcement" still needs to be accelerated and increased efficiency. This includes speeding up the research and follow-up of relevant laws and regulations, and supporting the system, strengthening the coordination and joint governance of relevant departments in "grasping the fingers and forming a fist", further clarifying the rights and responsibilities of operators, banks, e-commerce, etc., increasing the cost of punishment for information leakers, effectively protecting personal information, and carrying out legal rights protection. It can be said that today, in order to solve the security vulnerabilities of personal information, it is no longer simple to "patch" it. It is urgent to rectify the system and control the source.
Maintaining personal information security is a protracted battle and an unprecedented encounter. About 191 million voters' personal information has been leaked in the United States, and tens of thousands of customers' personal data have been stolen from Barclays Bank in the United Kingdom. The degree of "evolution" of cybercrime sometimes exceeds the speed of formulating laws and regulations. We can win the personal information security war only by seeking protection countermeasures from the technical point of view, improving the security awareness of netizens from the conceptual point of view, and making every effort and three-dimensional protection.
People's Daily (Version 05, April 14, 2016)