GB/T 36629.2-2018Information security technology—Security techniques requirement for citizen cyber electronic identity—Part 2:Security technique requirements of carrier (English PDF)

Foreword

GB/T 36629 "Information Security Technology Citizen Network Electronic Identity Identification Security Technical Requirements" is divided into the following sections.

--- Part 1. Safety requirements for reading and writing equipment;

--- Part 2. Carrier security technical requirements;

--- Part 3. Verify service messages and their processing rules.

This part is the second part of GB/T 36629.

This part is drafted in accordance with the rules given in GB/T 1.1-2009.

1 Scope

This part of GB/T 36629 specifies the basic security requirements for the citizen network electronic identity carrier, chip operating system and application security. Full requirements, carrier key application management security technical requirements and carrier password application service security technical requirements.

This section applies to the design, development, testing, production and application of the citizen network electronic identity identification carrier.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 16649.3-2006 Integrated circuit cards with identification contacts - Part 3. Electrical signals and transmission protocols

GB/T 16649.4-2010 Identification card IC card - Part 4. Structures, safety and commands for exchange

GB/T 16649.6-2001 Integrated circuit cards with identification contacts - Part 6. Inter-industry data elements

GB/T 20518 Information Security Technology Public Key Infrastructure Digital Certificate Format

GB/T 22186 information security technology IC card chip security technical requirements with central processing unit

GB/T 25069 Information Security Technical Terminology

GB/T 32915-2016 Information security technology binary sequence randomness detection method

GB/T 32918.2-2016 Information security technology SM2 elliptic curve public key cryptographic algorithm Part 2. Digital signature algorithm

GB/T 32918.4-2016 Information security technology - SM2 elliptic curve public key cryptographic algorithm - Part 4

GB/T 20518-2018 Information Security Technology Citizen Network Electronic Identity Format Specification

GM/T 0008-2012 Security Chip Password Detection Guidelines

ISO/IEC 14443-4:2016 Identification card contactless integrated circuit card proximity card Part 4. Transmission protocol (Identification cards - Contactless integrated circuit cards - Proximity cards - Part 4: Transmission protocol)

3 Terms and definitions

The following terms and definitions as defined in GB/T 25069 and GB/T 20518-2018 apply to this document.