Shulou(Shulou.com)06/01 Report--

On December 28, the CBRC, together with the Ministry of Industry and Information Technology, the Ministry of Public Security, the Internet Information Office and other departments, studied and drafted the interim measures for the Administration of the Business activities of Network Lending Information intermediary agencies (draft for soliciting opinions) (hereinafter referred to as the "measures"). And solicit opinions from the public. The measures provide policy support to P2P-related ecological service institutions (such as CA institutions and notaries), in which there is a special space to emphasize the importance of P2P institutions to strengthen network and information security and use electronic authentication.

The "measures" clearly states: "Network lending information intermediaries shall, in accordance with the relevant provisions of national network security and the requirements of the national information security level protection system, carry out information system classification and filing and grade testing." with a sound firewall, * detection, data encryption and disaster recovery and other network security facilities and management system, …... protect the information security of lenders and borrowers.

The national information security level protection system divides the security protection capability into several different levels. The protection system from malicious threats from individual threat sources with few resources is one of the most basic first-level protection capabilities. However, at present, many P2P platforms have not yet achieved the most basic data transmission security protection. Any person with basic technical capabilities can steal customer data from P2P platforms by hijacking http traffic transmitted in plaintext. "relevant technical experts pointed out.

Realizing HTTPS encryption through SSL authentication is internationally recognized as the most basic and reliable data transmission security solution, which not only encrypts data transmission between P2P platform servers and user browsers, but also shows the authenticity of P2P platform identity through global browsers, and builds platform online security and trust.

The Application of Electronic signature accelerates the Popularization of Electronic contracts in P2P Network

The measures also clearly stipulate that "when all parties participate in the business activities of online lending information intermediaries and need to use electronic signatures and electronic authentication on the basic information and transaction information of lenders and borrowers, they shall abide by the provisions of laws and regulations to ensure the authenticity and integrity of data and the legal effect of electronic signatures and electronic authentication. If the network loan information intermediary uses a third-party digital authentication system, it shall regularly evaluate the third-party digital certification body to ensure that the relevant certification is safe, reliable and independent.

Electronic signature provides an important guarantee for the confirmation of the identity of both parties, information tampering prevention, data encryption and transaction non-repudiation. With the rise of Internet finance, transaction behavior gradually gets rid of the shackles of offline "face-to-face signatures". The introduction of electronic signature technology into P2P online loan electronic contracts will accelerate the popularization of electronic contracts and have positive significance for both electronic signatures and P2P online loan industries.

The security of a P2P website needs to be evaluated from many aspects, but the "encryption lock" of SSL certificate is the basis of information security of online loan platform. For platform operators and investors, the establishment of trust between you may begin with this small certificate. If your P2P website does not have a SSL certificate, contact EVTrust.com to apply for a SSL certificate.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.