GB/T 28826.4-2022Information technology - Common biometric exchange formats framework - Part 4: Security block format specifications (English PDF)

1 Scope

This document gives the biometric identification organization ISO /IEC JTC1/SC37 defined by CBEFF, according to ISO /IEC 19785-2

Two registered security block formats, and the registered security block format identifier is given.

NOTE. The security block format identifier is recorded in the SBH of the maintainer format (or is defined by that maintainer format as the only available security block format).

The general security block format provides the specification of whether the BDB is encrypted and whether the SBH and BDB need integrity verification. The format adopts

The international RFC series of cryptographic message syntaxes can also contain instances of ACBio according to ISO /IEC 24761.The security block contains the encryption and/or or all necessary security parameters including integrity.

It does not restrict the algorithms and parameters used for encryption or integrity, but provides a way how to document the values of such algorithms and parameters.

For a specific application field, how to determine which algorithms and parameter ranges can be used by the security block generator, so as to determine the security block usage

The range of algorithms and parameters to be supported by the author is a matter of analysis and beyond the scope of this document.

The signature-only security block format is similar to the general security block format, although more restrictive, but simpler, in particular it cannot contain

ACBio instances, also do not support BDB encryption.

This document also gives a security block format defined by SAC/TC28/SC37 and registered according to GB/T 28826.2-2020.

Common security block format for domestic commercial ciphers.

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references

For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 16262.1 Information Technology Abstract Syntax Notation 1 (ASN.1) Part 1.Basic notation specification (GB/T 16262.1-

2006, ISO /IEC 8824-1.2002, IDT)

GB/T 16263.1 Information Technology ASN.1 Encoding Rules Part 1.Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Atypical Encoding Rules (DER) specification (GB/T 16263.1-2006, ISO /IEC 8825-1.2002, IDT)

GB/T 16263.2 Information Technology ASN.1 Encoding Rules Part 2.Compressed Encoding Rules (PER) Specifications (GB/T 16263.2-

2006, ISO /IEC 8825-2.2002, IDT)

GB/T 16263.4 Information Technology ASN.1 Encoding Rules Part 4.XML Encoding Rules (XER) (GB/T 16263.4-

2015, ISO /IEC 8825-4.2008, IDT)

GB/T 28826.1 Information technology common biometric identification exchange format framework - Part 1.Data element specification (GB/T 28826.1-2012, ISO /IEC 19785-1.2006, MOD)

Note. There is no technical difference between the referenced content of GB/T 28826.1-2012 and the referenced content of ISO /IEC 19785-1.2006.

GB/T 28826.2-2020 Information technology public biometric identification exchange format framework - Part 2.Notes on biometric identification operating procedures

GB/T 32918.2 Information Security Technology SM2 Elliptic Curve Public Key Cryptography Algorithm Part 2.Digital Signature Algorithm

GB/T 28826.2 | GB/T 36344 | GB/T 34680.4 | GB/T 23332 | GB/T 47343 | GB/T 28826.3 | […]