GA/T 1722-2020CTID online authentication - Overall technical framework (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

Please note that certain contents of this document may involve patents. The issuing agency of this document is not responsible for identifying these patents.

This standard was proposed and managed by the Technical Committee for Standardization of Social and Public Security Applications of the Ministry of Public Security.

Drafting organizations of this standard. The First Research Institute of the Ministry of Public Security, Beijing Zhongdun Anxin Technology Development Co., Ltd., Beijing Zhongdun Security Technology Development Corporation Company, Guangdong Provincial Public Security Department, Xingtang Communication Technology Co., Ltd., Zhejiang Ant Small and Micro Financial Service Group Co., Ltd., Lenovo (Beijing) Co., Ltd.

Division, Shenzhen Tencent Computer System Co., Ltd.

Introduction

Resident identity network authentication is one of the important links in the national implementation of the network credible identity strategy. Due to the virtual nature of the Internet, Traditional identity authentication methods can no longer meet the needs of network user applications, and network identity authentication has a variety of authentication methods and identity information.

It is difficult to distinguish between true and false and other shortcomings, and has caused new security issues such as data leakage, fraudulent use of identity, and the spread of privacy, and even threatened national security.

For this reason, it is urgent to carry out research from the perspective of standardization to build a safe, convenient, and unified resident identity network authentication technical framework, so as to be in the cyberspace.

The identification and authentication of residents provide security guarantees, and provide technical support for improving the level of network identity management in my country and realizing the modernization of network social governance.

In order to build a network identity management system at the national level, establish a safe, convenient and unified resident identity network authentication technical framework, thereby Promote the establishment of a safe, reasonable and orderly sharing and use of user identity information mechanisms between different network service providers, this standard is specially formulated to construct the ecological environment of network trusted identity services.

The overall technical framework of resident identity network authentication

1 Scope

This standard gives the overall technical framework of resident identity network authentication, and specifies the composition, business functions and functions of the resident identity network authentication system.

skills requirement.

This standard applies to the design, development, integration, testing and application of resident identity network authentication systems.

2 Normative references

The following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this document.

For undated references, the latest version (including all amendments) applies to this document.

GB/T 22239-2019 Information Security Technology Network Security Level Protection Basic Requirements GA/T 1721 General Terms for Resident Identity Network Authentication GA/T 1724 Resident Identity Network Authentication Network Trusted Credentials and Network Identity Format Requirements GA/T 1723.1 Resident Identity Network Authentication Service Part 1: Authentication Classification GA/T 1723.2 Resident Identity Network Authentication Service Part 2: Service Interface Requirements GA/T 1723.3 Resident Identity Network Authentication Service Part 3: Information Acquisition Control Interface Requirements GA/T 1723.4 Resident Identity Network Authentication Service Part 4: Technical Requirements for Face Image Acquisition Control GA/T 1723.5 Resident Identity Network Authentication Service Part 5: Face Comparison Engine Interface Requirements GA/T 1725.1 Resident identity network authentication information collection equipment Part 1: Resident ID card opening network card reader GA/T 1725.2 Resident identity network authentication information collection equipment Part 2: Self-service network certification equipment GA/T 1725.3 Resident identity network authentication information collection equipment Part 3: Batch opening network certification equipment GA/T 1725.4 Resident identity network authentication information collection equipment Part 4: Mobile terminal security technical requirements GM/T 0054-2018 Information system password application basic requirements

3 Terms and definitions

The terms and definitions defined in GA/T 1721 apply to this document.

4 General