GA/T 1725.4-2020CTID online authentication - Information acquisition devices - Part 4: Security technical requirements for mobile terminal (English PDF)

Foreword

GA/T 1725 "Resident Identity Network Authentication Information Collection Equipment" is divided into four parts.

---Part 1: Open the network card reader for the resident ID card;

---Part 2: Self-service network card activation equipment;

---Part 3: Open network certificate equipment in batches;

---Part 4: Mobile terminal security technical requirements.

This part is part 4 of GA/T 1725.

This section was drafted in accordance with the rules given in GB/T 1.1-2009.

Introduction

Resident identity network authentication is one of the important links in the national implementation of the network credible identity strategy. Due to the virtual nature of the Internet, Traditional identity authentication methods can no longer meet the needs of network user applications, and network identity authentication has a variety of authentication methods and identity information.

It is difficult to distinguish between true and false and other shortcomings, and has caused new security issues such as data leakage, fraudulent use of identity, and the spread of privacy, and even threatened national security.

For this reason, it is urgent to carry out research from the perspective of standardization to build a safe, convenient, and unified resident identity network authentication technical framework, so as to be in the cyberspace.

The identification and authentication of residents provide security guarantees, and provide technology for improving the level of my country's network identity management and realizing the modernization of network social governance stand by.

In the application scenario of resident identity network authentication, the convenience of mobile terminal makes it the most frequently used application terminal. in order to this section is specially formulated to effectively guarantee the security of resident identity network authentication and promote the healthy and sustainable development of the industry.

Resident identity network authentication information collection equipment Part 4: Mobile terminal security technical requirements

1 Scope

This part of GA/T 1725 specifies the security function requirements of the mobile terminal information collection function module.

This section applies to the design and development of resident identity network authentication products on the mobile terminal side, and the the citizen identity network authentication function realizes the reference when making the selection.

2 Normative references

The following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this article Pieces. For undated reference documents, the latest version (including all amendments) is applicable to this document.

GA/T 1721 General Terms for Resident Identity Network Authentication GA/T 1722 Overall Technical Framework of Resident Identity Network Authentication GA/T 1723.3 Resident Identity Network Authentication Service Part 3: Information Acquisition Control Interface Requirements GA/T 1723.4 Resident Identity Network Authentication Service Part 4: Technical Requirements for Face Image Acquisition Control JR/T 0156-2017 Technical Specification for Trusted Environment of Mobile Terminal Payment

3 Terms, definitions and abbreviations

4 General