GB/T 27913-2022Public key infrastructure for financial services - Practices and policy framework (English PDF)

1 Scope

This document specifies the management of PKI through certificate policies and authentication business specifications, and the use of public key certificates in the financial services industry requirements framework. It also defines the control objectives and control procedures for risk management. Although this document may be used to process digital signatures or encryption generation of public key certificates for key establishment, but it will not be used to handle authentication methods, non-repudiation requirements, or key management protocols.

This document applies to distinguish between PKI systems in open, closed and contractual environments, and is based on the financial services industry information system

Control objectives further define the business that is run. The purpose of this document is to help implementers define PKI services that support multi-certificate policies,

Includes the use of digital signatures, remote authentication, key exchange, and data encryption.

This document makes it easier to implement the operability of PKI-controlled businesses that meet the requirements of the financial services industry in a contractual environment.

Although this document is primarily aimed at the contract environment, it does not preclude the application of the document to other environments. The term "certificate" in this document refers to a public key certificate.

Attribute certificates are outside the scope of this document.

This document is aimed at a variety of users with different needs, so each type of user will focus on different content.

Business managers and analysts are those who need to use PKI technology in the conduct of business (e.g. e-commerce), see Section 1

Chapter ~ Chapter 6.

Technical designers and implementers are those who write the certificate policy and authentication business descriptions, see Chapters 6 to 7, and Appendix A to Appendix A.

record G.

Operational managers and auditors are those who are responsible for the day-to-day operation of the PKI system and perform consistency checks according to this document, see Chapters 6-

Chapter 7.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.

GB/T 14916-2006 Physical Characteristics of Identification Cards (ISO /IEC 7810.2003, IDT)

GB/T 16649.1 Integrated circuit cards with contacts for identification cards - Part 1.Physical characteristics

GB/T 16649.2 Identification card for integrated circuit cards with contacts - Part 2.Dimensions and locations of contacts

GB/T 16649.3 Identification Cards Integrated Circuit Cards with Contacts Part 3.Electrical Signals and Transmission Protocols

GB/T 16649.4 Identification Card Integrated Circuit Card Part 4.Structure, Security and Command for Switching

GB/T 16649.5 Integrated circuit cards with contacts for identification cards - Part 5.National numbering system and registration of application identifiers

Procedure

GB/T 16649.6 Integrated circuit cards with contacts for identification cards - Part 6.Inter-industry data elements

GB/T 16649.7 Integrated circuit cards with contacts for identification cards - Part 7.Lines for Structured Card Query Language (SCQL) inter-industry order

GB/T 16649.8 Integrated circuit cards with contacts for identification cards - Part 8.Inter-industry commands related to security

GB/T 16649.9 Identification Card Integrated Circuit Card Part 9.Commands for Card Management

JR/T 0197 | JR/T 0154 | GB/T 19584 | GB/T 27909.2 | GB/T 27909.1 | […]