公文電子交換系統之資訊安全改善建議

Suggestions for Improvement on Information Security of the Electronic Official Document Exchange System

公文電子交換系統緣起於行政院研究發展考核委員會推動「數位臺灣」（e-Taiwan）計畫，全面建構政府公文電子交換資訊環境，讓政府與各界可隨時隨地經由安全認證之電子公文往返，快速傳遞公務訊息。現行公文電子交換系統由財團法人資訊工業策進會開發與維運，迄今已建置58個公文統合電子交換中心，並提供15,000多個政府機關／單位／學校及5,000多家公司行號加入參與公文電子交換應用，是為我政府重要資訊高速公路。公文電子交換系統為我政府資訊傳遞的核心系統，應特別強化資訊安全防護與管理，以確保系統充分滿足機密性（Confidentiality）、完整性（Integrity），與可用性（Availability）的三大資訊系統安全目標，以對抗日新月異的駭客攻擊手法。本研究將深入探討現有公文電子交換網路系統資訊安全強化之長、中、短期可能之做法，深入系統技術架構之整體調整規劃，俾利各機關建置穩定、安全之公文電子交換強固環境。

The electronic official document exchange system was initiated from Digital Taiwan Project by the former Research, Development and Evaluation Commission, Executive Yuan. Taiwan government intended to construct a comprehensive environment for exchanging official documents electronically among agencies, so that all level of government agencies were able to transmit their official documents rapidly in a secured way using digital signature technologies. For this reason, Institute of Information Industry contracted by our government has been responsible for maintaining the system since then. The system consisting of 58 document exchange centers for about 15,000 government agencies and 5,000 non-government organizations has become one of the most important services for our government in the information highway. Since the system is a core function of our government information delivering mechanism, confidentiality, integrity and availability in its information security framework become more important. This article is to examine feasible solutions for establishing a more robust official document exchanging environment, including different approaches for goals in short-, middle-and long-term.