GB/T 34080.3-2021Security specification of electronic government common platform based on cloud computing—Part 3: Service security (English PDF)

Foreword

GB/T 34080 ``Security Specifications for Public Platforms of E-Government Based on Cloud Computing'' is divided into the following 4 parts.

---Part 1: General requirements;

---Part 2: Information Resource Security;

---Part 3: Service Security;

---Part 4: Application Security. This part is Part 3 of GB/T 34080.

This section was drafted in accordance with the rules given in GB/T 1.1-2009.

Introduction

The development of e-government is in a critical transition period of changing the development mode, deepening the application and highlighting the results. Government function transformation and service-oriented Government construction puts forward newer and higher requirements for the development of e-government affairs. Emerging information technologies, industries, and applications represented by cloud computing continue to The emergence has profoundly changed the technological environment and conditions for the development of e-government. Building a public platform for e-government based on cloud computing can give full play to The role of existing resources and the potential of emerging information technology, accelerate the development and innovation of e-government, improve application support service capabilities, and enhance security assurance Ability, reduce duplication of construction, avoid self-government and information islands.

In order to enable service users to obtain safe, usable and sustainable services from the public platform of e-government based on cloud computing This part of GB/T 34080 specifies the service security requirements for cloud computing-based e-government public platforms in the process of providing services.

To ensure the management and control of service users' data and business.

1 Scope

This part of GB/T 34080 specifies the service security level and service security elements of the public platform of e-government based on cloud computing.

This section applies to the identification and evaluation of the security level of services provided by the public platform of e-government based on cloud computing.

Note: Unless otherwise specified, "e-government public platform" in the following chapters refers to "cloud-based e-government public platform".

2 Normative references

The following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this document. For undated reference documents, the latest version (including all modifications) applies to this document.

GB/T 31167-2014 Information Security Technology Cloud Computing Service Security Guidelines

GB/T 34078.1-2017 Cloud Computing-based E-government Public Platform General Specification Part 1: Terms and Definitions

GB/T 34080.1-2017 Cloud Computing-based E-government Public Platform Security Specification Part 1: General Requirements

GB/T 34080.2-2017 Cloud Computing-based E-government Public Platform Security Specification Part 2: Information Resource Security

3 Terms and definitions

GB/T 34078.1-2017, GB/T 34080.1-2017 and GB/T 34080.2-2017 and the following terms and definitions Applies to this document.

4 Classification of service security levels

According to the definition of government business classification in GB/T 31167-2014 6.4, the service security level of e-government public cloud platform can be classified Divided into the following three levels.

a) Basic service security. The services provided by the e-government public cloud platform should be able to meet the requirements for carrying out general government affairs. Safety capability;

b) Enhanced service security. The services provided by the e-government public cloud platform should meet basic service security requirements.