GB/T 36629.1-2018Information security technology—Security technique requirements for citizen cyber electronic identity—Part 1: Security technique requirements for reader (English PDF)
信息安全技术 公民网络电子身份标识安全技术要求 第1部分：读写机具安全技术要求
This is a limited preview
Buy now to download the full PDF (15 pages)
Need quotation for your management?
Get a formal quotation for GB/T 36629.1-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
October 10, 2018
Implementation date
May 1, 2019
Scope
GB/T 36629.1-2018 is the English-translated version of 信息安全技术 公民网络电子身份标识安全技术要求 第1部分：读写机具安全技术要求.
GB/T 36629.1-2018 sets the security requirements for readers used with citizen cyber electronic identity, the devices that read and write identity data held on smart cards, smart keys and similar carriers.
It covers the basic components of the reader, its micro control unit, security module and security module interface, and the initialization of reader identification data, reader codes and the format of reader digital certificates.
It also deals with the management of cryptographic algorithms, keys and certificates, reader boot password management, and cryptographic services for data encryption and decryption, signature PINs and digital signatures, drawing on the SM2, SM3 and SM4 algorithm standards.
It applies to the design, development, testing, production and use of such readers. It was issued on 10 October 2018 and has applied since 1 May 2019.
Found what you need?
Document preview — GB/T 36629.1-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 basic safety requirements for reading and writing equipment
- 5.1 Basic Components
- 5.2 Micro Control Unit
- 5.3 Security Module
- 5.4 Security Module Interface
- 6 read and write equipment data initialization requirements
- 6.1 Reading and writing machine identification data
- 6.2 Code for reading and writing machine identification
- 6.3 Read and write machine digital certificate format
- 6.4 Read and write machine certificate issuance system certificate format
- 7 literacy tool password management security requirements
- 7.1 Cryptographic Algorithm
- 7.2 Key Management
- 7.3 Certificate Management
- 7.4 Read and write machine boot password management
- 8 literacy tool password application service security requirements
- 8.1 Data encryption and decryption service
- 8.2 Signature PIN Service
- 8.3 Digital Signature Service
- Reference
Foreword
GB/T 36629 "Information Security Technology Citizen Network Electronic Identity Identification Security Technical Requirements" is divided into the following sections.
--- Part 1. Safety requirements for reading and writing equipment;
--- Part 2. Carrier security technical requirements;
--- Part 3. Verify service messages and their processing rules.
This part is the first part of GB/T 36629.
This part is drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This part of GB/T 36629 stipulates the basic security requirements and data initialization security of the citizen network electronic identity identification reading and writing machine.
Requirements, password application management security requirements and password application service security requirements.
This section applies to the design, development, testing, production and application of citizen network electronic identity identification reading and writing equipment.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 16649.3-2006 Integrated circuit cards with identification contacts - Part 3. Electrical signals and transmission protocols
GB/T 20518-2018 Information Security Technology Public Key Infrastructure Digital Certificate Format
GB/T 32905-2016 Information Security Technology SM3 Password Hash Algorithm
GB/T 32907-2016 Information Security Technology SM4 Block Cipher Algorithm
GB/T 32915-2016 Information security technology binary sequence randomness detection method
GB/T 32918.2-2016 Information security technology SM2 elliptic curve public key cryptographic algorithm Part 2. Digital signature algorithm
GB/T 32918.4-2016 Information security technology - SM2 elliptic curve public key cryptographic algorithm - Part 4
GB/T 36632-2018 Information Security Technology Citizen Network Electronic Identity Format Specification
ISO/IEC 14443.4:2016 Identification card contactless integrated circuit card proximity card Part 4. Transmission protocol (Identification cards - Contactless integrated circuit cards - Proximity cards - Part 4: Transmission protocol)
3 Terms and definitions
The following terms and definitions as defined in GB/T 36632-2018 apply to this document.
3.1 Read and write machine
The utility model can read and write the information related to the electronic identity of the citizen network carried in the carrier such as the smart card and the smart cipher key.
3.2 Read and write machine security module
The core hardware circuit security component inside the reader.
3.3 Read and write machine digital certificate
A digital certificate used to identify the identity of the reader.
3.4 Password application management
Used to generate, store, import, export, and update keys on the read/write implement security module, and digitally certificate the reader […]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 16649.3-2006Identification cards - Integrated circuit cards - Part 3: Cards with contacts - Electrical interface and transmission protocols
- GB/T 20518-2018Information security technology—Public key infrastructure—Digital certificate format
- GB/T 32905-2016Information security techniques - SM3 cryptographic hash algorithm
- GB/T 32907-2016Information security technology - SM4 block cipher algorithm
- GB/T 32915-2016Cybersecurity technology — Randomness test methods for binary sequences
- GB/T 32918.2-2016Information security technology—Public key cryptographic algorithm SM2 based on elliptic curves—Part 2: Digital signature algorithm
Similar standards
How to Download GB/T 36629.1-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 20518-2018 — Information security technology—Public key infrastructure—Digital certificate format
GB/T 32905-2016 — Information security techniques - SM3 cryptographic hash algorithm
GB/T 32907-2016 — Information security technology - SM4 block cipher algorithm
Secure payment via Stripe
Payments accepted
GB/T 36629.1-2018
$145.00