Gestão da segurança da informação: certificação digital

More over, the information has become the main asset of the institutions. Being thus, the Information Security (IS) is getting attention as one of the activities of extreme importance in the corporations. Guarantee the confidentiality, integrity, availability, no deny and legality becomes something very important for the day-by-day of the businesses. An analysis of the risk, passing through the assessment of the threats and vulnerabilities, is mandatory to let grow the activities of the institutions. Digital Certification came into IS to guarantee the Not Deny (ND) because it makes the unquestioned identification of the person that makes the action. Therefore, Information Security can be defined as a knowledge field focused in the protection of the information assets against: unauthorized access, improper modifications, not availability, deny of authorship and illegality.

Processos digitais na prefeitura de Santos: a certificação digital e a segurança da informação

O presente trabalho tem como principal objetivo a descrição da sistemática de certificação digital a ser implementada na Prefeitura de Santos, como parte de um processo maior, a implementação dos Processos Digitais naquele município através da verificação e o acompanhamento dos principais desafios que a Prefeitura Municipal de Santos, por intermédio de sua Secretaria de Gestão, encontrou para a contratação e implantação da fé pública exigida para o correto enquadramento legal do programa de digitalização dos processos administrativos da Municipalidade. Para tanto, tem-se como base a pesquisa de material legal, especialmente do Decreto do Prefeito de Santos e da Portaria Municipal da Secretaria de Gestão que criou efetivamente a obrigação para que todos os servidores do Município elaborem determinados processos administrativos de maneira unicamente digital. Ainda, a MP 2001-02/2001 que trata da certificação digital é retratada. Angariar informações, desde as básicas, como quais são os equipamentos necessários, até o modelo de licitação (pregão eletrônico) para que outros entes públicos busquem a digitalização de seus processos e a consequente licitação para a certificação digital são os desafios deste artigo.

Um serviço de certificação digital para plataformas de middleware

Nowadays due to the security vulnerability of distributed systems, it is needed mechanisms to guarantee the security requirements of distributed objects communications. Middleware Platforms component integration platforms provide security functions that typically offer services for auditing, for guarantee messages protection, authentication, and access control. In order to support these functions, middleware platforms use digital certificates that are provided and managed by external entities. However, most middleware platforms do not define requirements to get, to maintain, to validate and to delegate digital certificates. In addition, most digital certification systems use X.509 certificates that are complex and have a lot of attributes. In order to address these problems, this work proposes a digital certification generic service for middleware platforms. This service provides flexibility via the joint use of public key certificates, to implement the authentication function, and attributes certificates to the authorization function. It also supports delegation. Certificate based access control is transparent for objects. The proposed service defines the digital certificate format, the store and retrieval system, certificate validation and support for delegation. In order to validate the proposed architecture, this work presents the implementation of the digital certification service for the CORBA middleware platform and a case study that illustrates the service functionalities

Manipulação em imagens radiográficas odontológicas digitais e digitalizadas e a certificação digital

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

O Sistema de Comunicação Digital (SICODI) como instrumento para efetivação do teletrabalho na fiscalização a cargo do Tribunal de Contas do Estado do Rio de Janeiro

The acts of public administration personnel are of great importance and various laws have been passed in attempt to limit the related expenses. The management of Public administration personnel is based on the principle of efficiency. The TCE/RJ (State of Rio de Janeiro/Audit Court) digital communication system is expected through telework to facilitate its auditing duties in compliance with the terms of the Federal and State constitutions. The TCE/RJ, the superior judicial body of auditing, has done more than just reduce costs and use flextime; it applies telework as an instrument to optimize public service through SICODI digital certification to maximize the resources applied to this constitutional act with greater efficiency for effective auditing. The focus of the first part of this study is to evaluate the tasks of positions that forward the TCE/RJ objectives and the profile characteristics of employees of the inspection area on personnel performance beginning with defined concepts and purposes. Questionnaires for auditors and technicians of the area were approved for this specific purpose to analyze the duties of positions and employee profiles. The second part of this study evaluates the TCE/RJ digital communication system according to theoretical reference and ISO/IEC Standard No. 9126-1, observing three dimensions: the content, usability and functionality. The results obtained, with the use of qualitative methods complemented by quantitative analysis, were positive for the implementation of telework in the inspection of personnel performance in relation to the analysts and technicians involved in this type of auditing as well as in relation to the TCE/RJ digital communication system.

O Sistema De Comunicação Digital (Sicodi) Como Instrumento Para Efetivação Do Teletrabalho Na Fiscalização A Cargo Do Tribunal De Contas Do Estado Do Rio De Janeiro

The acts of public administration personnel are of great importance and various laws have been passed in attempt to limit the related expenses. The management of Public administration personnel is based on the principle of efficiency. The TCE/RJ (State of Rio de Janeiro/Audit Court) digital communication system is expected through telework to facilitate its auditing duties in compliance with the terms of the Federal and State constitutions. The TCE/RJ, the superior judicial body of auditing, has done more than just reduce costs and use flextime; it applies telework as an instrument to optimize public service through SICODI digital certification to maximize the resources applied to this constitutional act with greater efficiency for effective auditing. The focus of the first part of this study is to evaluate the tasks of positions that forward the TCE/RJ objectives and the profile characteristics of employees of the inspection area on personnel performance beginning with defined concepts and purposes. Questionnaires for auditors and technicians of the area were approved for this specific purpose to analyze the duties of positions and employee profiles. The second part of this study evaluates the TCE/RJ digital communication system according to theoretical reference and ISO/IEC Standard No. 9126-1, observing three dimensions: the content, usability and functionality. The results obtained, with the use of qualitative methods complemented by quantitative analysis, were positive for the implementation of telework in the inspection of personnel performance in relation to the analysts and technicians involved in this type of auditing as well as in relation to the TCE/RJ digital communication system.

A assinatura digital em contratos de câmbio : estudo de caso em um banco brasileiro

A Assinatura Digital de Contratos de Câmbio, regulamentada em 2004, é um processo que surge como uma alternativa ao tradicional processo de assinatura manual nos contratos. Este trabalho pretende, através de análise quantitativa da base de dados de um grande banco no Brasil, verificar padrões de comportamento que podem existir nos registros de operações de câmbio assinadas digitalmente, de acordo com o porte da empresa e sua segmentação dentro do Banco. O conceito do mercado de câmbio será analisado, assim como sua estrutura e funcionamento no Brasil. A Assinatura Digital será analisada profundamente, apresentando conceitos imprescindíveis para este processo, como a criptografia, funções hash, certificação digital e infra-estrutura de chaves públicas. Como contribuições do estudo serão apresentadas a importância do processo de assinatura digital na atualidade, o crescimento e a relevância das pequenas e médias empresas no uso da assinatura digital e as diferenças relativas à segmentação das empresas.

Mecanismos de segurança para um sistema cooperativo de armazenamento de arquivos baseado em P2P

Previous works have studied the characteristics and peculiarities of P2P networks, especially security information aspects. Most works, in some way, deal with the sharing of resources and, in particular, the storage of files. This work complements previous studies and adds new definitions relating to this kind of systems. A system for safe storage of files (SAS-P2P) was specified and built, based on P2P technology, using the JXTA platform. This system uses standard X.509 and PKCS # 12 digital certificates, issued and managed by a public key infrastructure, which was also specified and developed based on P2P technology (PKIX-P2P). The information is stored in a special file with XML format which is especially prepared, facilitating handling and interoperability among applications. The intention of developing the SAS-P2P system was to offer a complementary service for Giga Natal network users, through which the participants in this network can collaboratively build a shared storage area, with important security features such as availability, confidentiality, authenticity and fault tolerance. Besides the specification, development of prototypes and testing of the SAS-P2P system, tests of the PKIX-P2P Manager module were also performed, in order to determine its fault tolerance and the effective calculation of the reputation of the certifying authorities participating in the system

A proteção dos direitos autorais a partir da realidade Internet: a perspectiva brasileira

Pós-graduação em Ciência da Informação - FFC

Imageologia na odontologia e aspectos legais

The technology, through the advent of new equipments that allow imaging exams, has helped very much in the diagnosis and prognosis of diseases in Dentistry. The use of informatics, in general, in the manufacture of clinical reports is increasingly present in the dental offices. The legal validity of these systems is questioned, and is matter of discussion. This work makes considerations about Imageology or Diagnostic by image, a new area that is appearing on Dentistry. Among other exams, there are: digital radiography, tomography, computed tomography, artomography, magnetic resonance, computed cefalometry and ultra-sonography. It permits the professional to obtain a better diagnostic, and to the patient, the visualization of his problem and treatment. A survey on the possibilities of using informatics in Dentistry, particularly in Radiology, was also carried out, as well as the legal aspects, which are in accordance with the Law 8.935/94, what guarantees its practicability. Digital Certification is a mechanism that provides legal validity to documents and, as such, to radiographic images and others. It is a procedure that the dentist should take to ensure that he/she has safeguarded the judicial proofs that may be necessary in an eventual demand.

Sistemas de certificação da construção: contributo para uma plataforma digital

Dissertação para obtenção do Grau de Mestre em Engenharia Civil – Perfil de Construção

Metodologia para inovação tecnológica através de sistema colaborativo de inclusão digital e certificação na agricultura familiar

Pós-graduação em Agronomia (Energia na Agricultura) - FCA