东京——据《日经新闻》获悉，日本将建立一套数据中心与云服务安全认证体系，旨在推动金融、医疗等领域采用安全技术，同时防范来自中国、俄罗斯及其他所谓“值得警惕国家”带来的风险。
TOKYO -- Japan will establish a system to certify the security of data centers and cloud services, aiming to encourage the use of secure technology in such fields as finance and healthcare while blocking the risk posed by China, Russia and other countries of concern, Nikkei has learned.
该认证体系预计于2027财年之后正式实施，适用范围为日本境内的数据中心运营商以及在本国境内设有服务器的云服务提供商。
The new system, to be introduced after fiscal 2027, will cover data center operators located in Japan and providers of cloud services that maintain servers within the country.
认证过程中将综合考量企业所有权结构、防止数据泄露的风险管理措施以及设备供应商情况等多项因素。
It is expected to consider such factors as corporate ownership, risk management procedures for preventing data leaks, and equipment suppliers.
日本政府将建议金融机构、医疗机构、研究机构等负责处理涉及国家安全的敏感个人信息的机构，仅与获得认证的数据中心及云服务提供商签订服务合同。
The government will recommend that financial institutions, medical institutions, research institutes and other organizations handling sensitive personal information with national security implications contract only with certified data center and cloud service providers.
日本政府计划在一月份召开的国会常会上提出对《经济安全保障促进法》的修订案。
The government plans to propose changes to the Economic Security Promotion Act during the ordinary session of parliament convening in January.
修订后的法律将赋予日本政府下令叫停存在数据安全隐患项目的权力，而上述认证体系也将在这一法律框架下运作。
Under the revised law, Tokyo would be able to issue orders to halt projects that pose data security risks. The new certifications would operate based on this legal framework.
尽管企业仍有权自主选择是否使用政府推荐的各类服务，但处理敏感个人信息的企业必须接受对其数据管理实践的审查与监督。预计几乎没有企业会选择未获推荐的服务。
Though companies would retain the right to choose whether to use government-recommended data centers or cloud services, firms handling sensitive personal information would be subject to reviews and oversight of their data management practices. Few are expected to choose services that are not recommended.
这套认证体系的设计参考了日本经济产业省下属机构推出的JC-STAR认证标签。该标签专门授予符合特定网络安全标准的网络设备及其他物联网产品。
One model for the new certifications will be the JC-STAR labels issued by an arm of Japan's Ministry of Economy, Trade and Industry. The labels are given to network equipment and other internet of things products that meet designated cybersecurity standards.
虽然该认证并未明确排除特定国家，但迄今为止尚无任何中国制造的产品获得该认证。
Though they do not explicitly exclude specific countries, no Chinese-made products have received the label to date.
从4月起，太阳能发电系统、储能电池等并网设备均须符合该计划设定的基准标准，这一举措预计将几乎把中国制造的产品排除在外。
Starting in April, grid-connected equipment like solar power systems and storage batteries will be required to meet the program's baseline standards, a move that is expected to all but exclude Chinese-made products.
如今，中国科技巨头阿里巴巴集团已与亚马逊、微软等美国科技企业并驾齐驱，成为云计算领域的领军企业。
Chinese technology giant Alibaba Group Holding has emerged as a major cloud services player alongside U.S. tech companies like Amazon and Microsoft.
迄今为止，日本尚未建立起针对存储与处理关键数据的信息基础设施运营商的监管体系。人们担忧，若被视为存在安全风险的国家能对这类基础设施产生广泛影响，日本将难以防范数据泄露或网络攻击引发的服务中断。
Until now, Japan has lacked a framework for regulating operators of information infrastructure that store and process critical data. Concerns have been raised that widespread influence over such infrastructure by countries viewed as security risks could leave Japan unable to prevent data leaks or service disruptions caused by cyberattacks.
此外，人们还担心中国资本控股的企业需遵守中国法律，即必须配合政府的情报工作并服从民用资源的征用。
Concerns also exist that Chinese-owned companies are subject Chinese laws that require cooperation with government intelligence activities and the requisitioning of civilian resources.
欧盟委员会要求数据中心及云服务提供商采取风险管理措施，以应对第三国可能产生的影响。在韩国，信息通信服务提供商依法必须取得信息安全体系认证，并及时上报安全事件。
The European Commission requires data center and cloud service operators to take risk management measures addressing potential influence from third countries. In South Korea, information and communications service providers are legally required to obtain certification for their information protection systems and report security incidents.