{"id":365,"date":"2025-12-21T00:00:54","date_gmt":"2025-12-20T16:00:54","guid":{"rendered":"http:\/\/www.pansin.net\/index.php\/2025\/12\/21\/feijiegouhuashujuanquantixigoujianzaixianwendangpingtaiyuanshujuyuqianmingjizhishenducepingyuguanai\/"},"modified":"2025-12-21T00:00:54","modified_gmt":"2025-12-20T16:00:54","slug":"feijiegouhuashujuanquantixigoujianzaixianwendangpingtaiyuanshujuyuqianmingjizhishenducepingyuguanai","status":"publish","type":"post","link":"https:\/\/www.pansin.net\/index.php\/2025\/12\/21\/feijiegouhuashujuanquantixigoujianzaixianwendangpingtaiyuanshujuyuqianmingjizhishenducepingyuguanai\/","title":{"rendered":"\u975e\u7ed3\u6784\u5316\u6570\u636e\u5b89\u5168\u4f53\u7cfb\u6784\u5efa\uff1a\u5728\u7ebf\u6587\u6863\u5e73\u53f0\u5143\u6570\u636e\u4e0e\u7b7e\u540d\u673a\u5236\u6df1\u5ea6\u6d4b\u8bc4\u4e0e\u7ba1\u63a7\u6307\u5357"},"content":{"rendered":"
\n

 <\/span><\/p>\n

\n

1. \u6267\u884c\u6458\u8981<\/span><\/h2>\n
<\/section>\n


<\/span><\/p>\n

\u968f\u7740\u4f01\u4e1a\u6570\u5b57\u5316\u8f6c\u578b\u7684\u6df1\u5165\uff0c\u975e\u7ed3\u6784\u5316\u6570\u636e\u7684\u751f\u4ea7\u4e0e\u6d41\u8f6c\u5df2\u4ece\u4f20\u7edf\u7684\u672c\u5730\u6587\u4ef6\u7cfb\u7edf\u5168\u9762\u8fc1\u79fb\u81f3\u4e91\u7aef\u534f\u4f5c\u5e73\u53f0\uff08SaaS\uff09\u3002\u5728\u300a\u975e\u7ed3\u6784\u5316\u6570\u636e\u5b89\u5168\u4f53\u7cfb\u6784\u5efa\u300b\u6307\u5357\u4e2d\uff0c\u6211\u4eec\u786e\u7acb\u4e86\u4ee5**XMP\uff08Extensible Metadata Platform\uff09<\/span>\u4e3a\u6838\u5fc3\u7684\u5143\u6570\u636e\u9a71\u52a8\u9632\u5fa1\u548c\u4ee5<\/span><\/strong>PAdES\uff08PDF Advanced Electronic Signatures\uff09**\u4e3a\u57fa\u7840\u7684\u9632\u7be1\u6539\u4f53\u7cfb 1\u3002\u7136\u800c\uff0c\u5f53\u8fd9\u4e00\u7406\u8bba\u6846\u67b6\u906d\u9047\u817e\u8baf\u6587\u6863\u3001\u4f01\u4e1a\u5fae\u4fe1\uff08\u5fae\u6587\u6863\uff09\u3001\u77f3\u58a8\u6587\u6863\u53caOffice 365\u7b49\u4e3b\u6d41\u5728\u7ebf\u6587\u6863\u5e73\u53f0\u65f6\uff0c\u9762\u4e34\u7740\u4ece\u201c\u6587\u4ef6\u672c\u4f4d\u201d\u5411\u201c\u6570\u636e\u6d41\u672c\u4f4d\u201d\u7684\u6df1\u523b\u8303\u5f0f\u8f6c\u79fb\u3002<\/span><\/p>\n

\u672c\u62a5\u544a\u4f5c\u4e3a\u4e0a\u8ff0\u6307\u5357\u7684\u6df1\u5ea6\u8865\u5145\uff0c\u4ee5\u7f51\u7edc\u5b89\u5168\u4e13\u5bb6\u7684\u89c6\u89d2\uff0c\u5bf9\u4e0a\u8ff0\u5e73\u53f0\u5728\u5143\u6570\u636e\u6301\u4e45\u5316\u5d4c\u5165\u3001\u6570\u5b57\u7b7e\u540d\u5b8c\u6574\u6027\u4fdd\u62a4\u53ca\u8de8\u5e73\u53f0\u6d41\u8f6c\u63a7\u5236\u65b9\u9762\u7684\u80fd\u529b\u8fdb\u884c\u4e86\u8be6\u5c3d\u7684\u7a7f\u900f\u5f0f\u5206\u6790\u3002\u7814\u7a76\u53d1\u73b0\uff0c\u867d\u7136Office 365\u901a\u8fc7MIP\uff08Microsoft Purview Information Protection\uff09\u5b9e\u73b0\u4e86\u5143\u6570\u636e\u4e0e\u4e91\u7aef\u534f\u4f5c\u7684\u9ad8\u5ea6\u878d\u5408\uff0c\u4f46\u5728\u56fd\u4ea7SaaS\u5e73\u53f0\u4e2d\uff0c\u666e\u904d\u5b58\u5728\u7740\u201c\u5143\u6570\u636e\u6c14\u9699\uff08Metadata Air Gap\uff09\u201d\u73b0\u8c61\u2014\u2014\u5373\u6587\u4ef6\u5728\u4e91\u7aef\u4ee5\u6570\u636e\u5e93\u8bb0\u5f55\u5f62\u5f0f\u5b58\u5728\u65f6\u5177\u5907\u6743\u9650\u63a7\u5236\uff0c\u4e00\u65e6\u5bfc\u51fa\u4e3a\u5b9e\u4f53\u6587\u4ef6\uff0c\u5176\u5b89\u5168\u5c5e\u6027\u5f80\u5f80\u968f\u4e4b\u5265\u79bb\u3002\u6b64\u5916\uff0c\u6570\u5b57\u7b7e\u540d\u673a\u5236\u5728SaaS\u73af\u5883\u4e2d\u5e38\u5f02\u5316\u4e3a\u89c6\u89c9\u5c42\u9762\u7684\u201c\u7535\u5b50\u5370\u7ae0\u201d\uff0c\u7f3a\u4e4f\u5e95\u5c42PAdES-LTA\uff08\u957f\u671f\u5f52\u6863\u6709\u6548\u6027\uff09\u6807\u51c6\u7684\u5bc6\u7801\u5b66\u652f\u6491\u3002<\/span><\/p>\n

\u57fa\u4e8e\u6b64\uff0c\u672c\u62a5\u544a\u4e0d\u4ec5\u63ed\u793a\u4e86\u5404\u5e73\u53f0\u7684\u6280\u672f\u5e95\u5ea7\u5dee\u5f02\uff0c\u66f4\u63d0\u51fa\u4e86\u4e00\u5957\u9488\u5bf9\u6027\u7684\u201c\u5728\u7ebf\u6587\u6863\u5b89\u5168\u7ba1\u63a7\u67b6\u6784\u201d\u3002\u8be5\u67b6\u6784\u4e3b\u5f20\u901a\u8fc7API\u7f51\u5173\u62e6\u622a\u3001\u4e2d\u95f4\u4ef6\u6ce8\u5165\u53ca\u7ec8\u7aef\u9a71\u52a8\u8054\u52a8\u7b49\u624b\u6bb5\uff0c\u5f3a\u5236\u5f25\u5408SaaS\u5e73\u53f0\u4e0e\u672c\u5730\u6587\u4ef6\u5b89\u5168\u6807\u51c6\u4e4b\u95f4\u7684\u88c2\u75d5\uff0c\u786e\u4fdd\u6570\u636e\u65e0\u8bba\u5728\u4e91\u7aef\u534f\u4f5c\u8fd8\u662f\u843d\u5730\u5206\u53d1\uff0c\u59cb\u7ec8\u5904\u4e8e\u53ef\u8bc6\u522b\u3001\u53ef\u9a8c\u8bc1\u3001\u53ef\u8ffd\u6eaf\u7684\u53d7\u63a7\u72b6\u6001\u3002<\/span><\/p>\n

2. \u7eea\u8bba\uff1a\u4e91\u534f\u4f5c\u65f6\u4ee3\u7684\u5143\u6570\u636e\u201c\u6c14\u9699\u201d\u98ce\u9669<\/span><\/h2>\n

\u5728\u6df1\u5165\u5256\u6790\u5177\u4f53\u5e73\u53f0\u4e4b\u524d\uff0c\u5fc5\u987b\u5398\u6e05\u4e91\u534f\u4f5c\u73af\u5883\u5bf9\u4f20\u7edf\u975e\u7ed3\u6784\u5316\u6570\u636e\u5b89\u5168\u6a21\u578b\u6784\u6210\u7684\u672c\u8d28\u6311\u6218\u3002\u8fd9\u79cd\u6311\u6218\u5e76\u975e\u6e90\u4e8e\u52a0\u5bc6\u7b97\u6cd5\u7684\u5f3a\u5f31\uff0c\u800c\u5728\u4e8e\u6570\u636e\u5f62\u6001\u7684\u6839\u672c\u6027\u53d8\u5316\u3002<\/span><\/p>\n

2.1 \u4ece\u201c\u9ed1\u76d2\u201d\u5230\u201c\u73bb\u7483\u76d2\u201d\u7684\u5f62\u6001\u6f14\u53d8<\/span><\/strong><\/h3>\n

\u5728\u672c\u5730\u73af\u5883\u4e2d\uff0c\u4e00\u4e2aWord\u6587\u6863\u6216PDF\u6587\u4ef6\u662f\u4e00\u4e2a\u72ec\u7acb\u7684\u4e8c\u8fdb\u5236\u5bb9\u5668\uff08BLOB\uff09\uff0c\u6211\u4eec\u79f0\u4e4b\u4e3a\u201c\u9ed1\u76d2\u201d\u3002\u5b89\u5168\u7b56\u7565\uff08\u5982XMP\u6807\u7b7e\u3001\u6570\u5b57\u7b7e\u540d\uff09\u50cf\u7eb9\u8eab\u4e00\u6837\u523b\u5728\u5bb9\u5668\u8868\u9762 1\u3002\u7136\u800c\uff0c\u5f53\u6587\u4ef6\u4e0a\u4f20\u81f3\u817e\u8baf\u6587\u6863\u6216\u77f3\u58a8\u6587\u6863\u65f6\uff0c\u5b83\u88ab\u89e3\u6790\u3001\u62c6\u5206\u5e76\u5b58\u5165NoSQL\u6216\u5173\u7cfb\u578b\u6570\u636e\u5e93\u4e2d\u3002\u6b64\u65f6\uff0c\u6587\u6863\u53d8\u6210\u4e86\u4e00\u4e2a\u201c\u73bb\u7483\u76d2\u201d\u2014\u2014\u7531\u65e0\u6570\u4e2a\u6570\u636e\u5e93\u5b57\u6bb5\uff08\u884c\u3001\u5217\u3001\u6bb5\u843d\u5bf9\u8c61\uff09\u52a8\u6001\u6e32\u67d3\u800c\u6210\u7684\u89c6\u56fe\u3002<\/span><\/p>\n

\u8fd9\u79cd\u5f62\u6001\u8f6c\u6362\u5e26\u6765\u4e86<\/span>\u5143\u6570\u636e\u6301\u4e45\u6027\u7684\u65ad\u88c2<\/span><\/strong>\u3002\u5728\u4e91\u7aef\uff0c\u6587\u4ef6\u7684\u5bc6\u7ea7\u53ef\u80fd\u53ea\u662f\u6570\u636e\u5e93\u4e2d\u7684\u4e00\u4e2a\u5b57\u6bb5\uff08\u5982permission_level: “secret”\uff09 2\u3002\u5f53\u7528\u6237\u6267\u884c\u201c\u4e0b\u8f7d\u201d\u6216\u201c\u5bfc\u51fa\u201d\u64cd\u4f5c\u65f6\uff0c\u5e73\u53f0\u9700\u8981\u5b9e\u65f6\u751f\u6210\u4e00\u4e2a\u65b0\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u5982\u679c\u5bfc\u51fa\u5f15\u64ce\u6ca1\u6709\u88ab\u660e\u786e\u7f16\u7a0b\u4ee5\u5c06\u6570\u636e\u5e93\u4e2d\u7684\u5bc6\u7ea7\u5b57\u6bb5\u6620\u5c04\u56deXMP\u6807\u51c6\u5934\u90e8\uff0c\u90a3\u4e48\u4e0b\u8f7d\u4e0b\u6765\u7684\u6587\u4ef6\u5c31\u662f\u201c\u88f8\u5954\u201d\u7684\u2014\u2014\u5931\u53bb\u4e86\u6240\u6709\u5b89\u5168\u4e0a\u4e0b\u6587\u3002\u8fd9\u5c31\u662f\u672c\u62a5\u544a\u6240\u5b9a\u4e49\u7684\u201c\u5143\u6570\u636e\u6c14\u9699\u201d\u3002<\/span><\/p>\n

2.2 \u5728\u7ebf\u73af\u5883\u4e0b\u7684PAdES\u7b7e\u540d\u56f0\u5883<\/span><\/strong><\/h3>\n

PAdES\u6807\u51c6\u7684\u6838\u5fc3\u8981\u6c42\u662f\u57fa\u4e8e\u6587\u4ef6\u5185\u5bb9\u7684\u54c8\u5e0c\u503c\u8fdb\u884c\u5bc6\u7801\u5b66\u7b7e\u540d\uff0c\u5e76\u5c06\u9a8c\u8bc1\u6570\u636e\uff08CRL\u3001OCSP\u54cd\u5e94\uff09\u5d4c\u5165\u6587\u4ef6\u672c\u8eab\u4ee5\u5b9e\u73b0\u957f\u671f\u6709\u6548\u6027\uff08LTV\uff09 1\u3002\u5728SaaS\u73af\u5883\u4e2d\uff0c\u6d4f\u89c8\u5668\u65e0\u6cd5\u76f4\u63a5\u8c03\u7528\u7528\u6237\u7684\u672c\u5730USB Key\uff08U\u76fe\uff09\u8fdb\u884c\u79c1\u94a5\u8fd0\u7b97\uff0c\u5bfc\u81f4\u5fc5\u987b\u4f9d\u8d56**\u8fdc\u7a0b\u7b7e\u540d\uff08Remote Signing\uff09**\u670d\u52a1\u3002<\/span><\/p>\n

\u8fd9\u5f15\u5165\u4e86\u4e24\u4e2a\u6838\u5fc3\u98ce\u9669\u70b9\uff1a<\/span><\/p>\n

    \n
  1. \n
    1. <\/span>\u5185\u5bb9\u4e00\u81f4\u6027\u98ce\u9669\uff1a<\/span><\/strong> \u7528\u6237\u5728\u6d4f\u89c8\u5668\u4e2d\u770b\u5230\u7684\u6e32\u67d3\u5185\u5bb9\uff0c\u4e0e\u670d\u52a1\u5668\u540e\u53f0\u7528\u4e8e\u8ba1\u7b97\u54c8\u5e0c\u7684\u4e8c\u8fdb\u5236\u6d41\u662f\u5426\u5b8c\u5168\u4e00\u81f4\uff1f\u6240\u89c1\u5373\u6240\u7b7e\uff08WYSIWYS\uff09\u5728Web\u73af\u5883\u4e0b\u6781\u96be\u4e25\u683c\u4fdd\u8bc1\u3002<\/span><\/section>\n<\/li>\n
  2. \n
    2. <\/span>\u5bc6\u94a5\u6258\u7ba1\u98ce\u9669\uff1a<\/span><\/strong> \u4e3a\u4e86\u4fbf\u6377\uff0c\u79c1\u94a5\u5f80\u5f80\u6258\u7ba1\u5728\u4e91\u7aef\u3002\u867d\u7136\u817e\u8baf\u7535\u5b50\u7b7e\u7b49\u5e73\u53f0\u4f7f\u7528\u4e86\u533a\u5757\u94fe\u5b58\u8bc1\u6280\u672f 4\uff0c\u4f46\u8fd9\u4e0e\u6807\u51c6\u7684PAdES-LTA\u5d4c\u5165\u5f0f\u9a8c\u8bc1\u673a\u5236\u5728\u6280\u672f\u8def\u7ebf\u4e0a\u5b58\u5728\u5206\u6b67\uff0c\u5bfc\u81f4\u5bfc\u51fa\u7684PDF\u6587\u4ef6\u5728\u8131\u79bb\u5e73\u53f0\u73af\u5883\u540e\uff0c\u53ef\u80fd\u65e0\u6cd5\u5728Adobe Reader\u7b49\u6807\u51c6\u9605\u8bfb\u5668\u4e2d\u9a8c\u8bc1\u5176\u5b8c\u6574\u6027 5\u3002<\/span><\/section>\n<\/li>\n<\/ol>\n

    3. \u6df1\u5ea6\u6d4b\u8bc4\uff1aMicrosoft 365 (MIP) \u7684\u5143\u6570\u636e\u539f\u751f\u878d\u5408<\/span><\/h2>\n

    \u5728\u6240\u6709\u53d7\u6d4b\u5e73\u53f0\u4e2d\uff0cMicrosoft 365\uff08\u4ee5\u4e0b\u7b80\u79f0O365\uff09\u51ed\u501f\u5176\u5bf9OOXML\u6587\u4ef6\u683c\u5f0f\u6807\u51c6\u7684\u638c\u63a7\u529b\u53caMicrosoft Purview Information Protection\uff08MIP\uff09\u4f53\u7cfb\u7684\u6df1\u5ea6\u96c6\u6210\uff0c\u5c55\u73b0\u4e86\u6700\u4e3a\u6210\u719f\u7684\u5143\u6570\u636e\u5b89\u5168\u80fd\u529b\u3002\u5b83\u901a\u8fc7\u91cd\u6784\u5e95\u5c42\u5b58\u50a8\u673a\u5236\uff0c\u6709\u6548\u89e3\u51b3\u4e86\u201c\u534f\u4f5c\u201d\u4e0e\u201c\u52a0\u5bc6\u201d\u7684\u5929\u7136\u77db\u76fe\u3002<\/span><\/p>\n

    3.1 \u5143\u6570\u636e\u67b6\u6784\u7684\u6f14\u8fdb\uff1a\u4ece Custom XML \u5230 LabelInfo.xml<\/span><\/strong><\/h3>\n

    \u5728\u65e9\u671f\u7684Office\u7248\u672c\u4e2d\uff0c\u81ea\u5b9a\u4e49\u5143\u6570\u636e\u901a\u5e38\u5b58\u50a8\u5728OOXML\uff08ZIP\u5bb9\u5668\uff09\u5185\u7684custom.xml\u90e8\u4ef6\u4e2d 6\u3002\u7136\u800c\uff0c\u8fd9\u79cd\u65b9\u5f0f\u5728\u591a\u4eba\u5b9e\u65f6\u534f\u4f5c\uff08Co-authoring\uff09\u573a\u666f\u4e0b\u5b58\u5728\u4e25\u91cd\u7684\u9501\u51b2\u7a81\u95ee\u9898\u3002\u4e3a\u4e86\u652f\u6301\u5728\u52a0\u5bc6\u6587\u6863\u4e0a\u8fdb\u884c\u591a\u4eba\u540c\u65f6\u7f16\u8f91\uff0c\u5fae\u8f6f\u5bf9\u5143\u6570\u636e\u5b58\u50a8\u67b6\u6784\u8fdb\u884c\u4e86\u6839\u672c\u6027\u7684\u91cd\u6784\u3002<\/span><\/p>\n

    3.1.1 \u534f\u540c\u7f16\u8f91\u4e0b\u7684\u5143\u6570\u636e\u6301\u4e45\u5316<\/span><\/strong><\/h4>\n

    O365\u5f15\u5165\u4e86\u65b0\u7684\u5143\u6570\u636e\u5b58\u50a8\u4f4d\u7f6e\u3002\u5f53\u79df\u6237\u5f00\u542f\u201c\u652f\u6301\u654f\u611f\u5ea6\u6807\u7b7e\u6587\u4ef6\u7684\u534f\u540c\u521b\u4f5c\u201d\u529f\u80fd\u540e\uff0c\u6807\u7b7e\u4fe1\u606f\u4e0d\u518d\u5b58\u50a8\u4e8e\u4f20\u7edf\u7684\u81ea\u5b9a\u4e49\u5c5e\u6027\u4e2d\uff0c\u800c\u662f\u5199\u5165\u5230OPC\uff08Open Packaging Conventions\uff09\u7ed3\u6784\u4e0b\u7684docMetadata\u6587\u4ef6\u5939\u5185\u7684labelinfo.xml\u6587\u4ef6\u4e2d 7\u3002<\/span><\/p>\n

    \u8fd9\u79cd\u67b6\u6784\u53d8\u9769\u5e26\u6765\u4e86\u6df1\u8fdc\u7684\u5b89\u5168\u610f\u4e49\uff1a<\/span><\/p>\n