GA 1277.4-2020Security management requirements for internet interactive service - Part 4: Instant messaging service (English PDF)

Foreword

GA 1277 "Internet Interactive Service Security Management Requirements" is planned to be published in multiple parts, including basic requirements and requirements in specific service types.

The following parts are currently planned.

---Part 1: Basic requirements;

---Part 2: Microblogging service;

---Part 3: Audio and video chat room service;

---Part 4: Instant messaging service;

---Part 5: Forum Services;

---Part 6: Mobile application software publishing platform;

---Part 7: Cloud services;

---Part 8: E-commerce platform;

---Part 9: Search Service;

---Part 10: Internet car-hailing service;

---Part 11: Internet short-term rental services.

This part is part 4 of GA 1277.

This section was drafted in accordance with the rules given in GB/T 1.1-2009.

This part was proposed by the Cyber Security Bureau of the Ministry of Public Security.

This part is under the jurisdiction of the Information System Security Standardization Technical Committee of the Ministry of Public Security.

Drafting organizations of this section. Cyber Security Bureau of the Ministry of Public Security, Computer Information System Security Product Quality Supervision and Inspection Center of the Ministry of Public Security, the Third Research Institute of the Ministry of Public Security.

1 Scope

This part of GA 1277 specifies the security management requirements for instant messaging services.

This section applies to Internet interactive service providers to implement security protection management systems and security protection technical measures for instant messaging services.

2 Normative references

The following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this document.

For undated references, the latest version (including all amendments) applies to this document.

GA 1277.1-2020 Security Management Requirements for Internet Interactive Services Part 1: Basic Requirements

3 Terms and definitions

The following terms and definitions defined by GA 1277.1-2020 apply to this document.

instant messaging

Through wired or wireless transmission, various Internet terminal devices are used to provide users with contact online status presentation and real-time communication.

The communication method of Internet information transmission and dissemination of interactive text, image, sound, data and other information exchange.

Instant messaging software the general term for software with instant messaging function. Instant messaging software is mainly divided into client software used by users and providing client information Server-side software for interaction and system management functions.

Instant messaging service provider Internet service providers that specialize in providing instant messaging services through client software, operating instant messaging network support platforms, etc.

Basic instant messaging service, but also other peripheral value-added services surrounding this basic service.

Instant messaging user Individuals who have identity registration information at an instant messaging service provider and use instant messaging services.

4 Safety management system requirements

The instant messaging service provider shall formulate and maintain a safety management system in accordance with the requirements of Chapter 4 in GA 1277.1-2020.

5 Institutional requirements

Instant messaging service providers should establish relevant institutions and clarify their responsibilities in accordance with the requirements of Chapter 5 of GA 1277.1-2020.