Valid

GB/T 36629.3-2018Information security technology—Security technique requirements for citizen cyber electronic identity—Part 3: Verification service message and processing rules (English PDF)

信息安全技术公民网络电子身份标识安全技术要求第3部分：验证服务消息及其处理规则

Preview PDF

This is a limited preview

Buy now to download the full PDF (17 pages)

Need quotation for your management?

Get a formal quotation for GB/T 36629.3-2018 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 28, 2018

Implementation date

July 1, 2019

Scope

GB/T 36629.3-2018 is the English-translated version of 信息安全技术公民网络电子身份标识安全技术要求第3部分：验证服务消息及其处理规则.

GB/T 36629.3-2018 is Part 3 of the Chinese security technique requirements for the citizen cyber electronic identity (eID), and specifies the messages exchanged between the eID verification service and application service providers, with their encoding and processing rules.

It covers message parameter encoding and signature parameter generation, the input and return parameters of the registration interface, and the parameters of the eID authentication messages: the provider's request, the eID service platform's challenge, the provider's verification message and the platform's return.

Informative annexes give examples of request and return processing and of signature parameter generation. It applies to the eID verification service and to the design and development of applications and systems that use it. It was issued on 28 December 2018 and has applied since 1 July 2019.

Found what you need?

Document preview — GB/T 36629.3-2018

National Standard of the People's Republic of China

ICS: 35.040
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Foreword
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Overview
6 eID verification service parameter encoding rule
6.1 Message Encoding
6.2 Signature Parameter Generation Rule
7 Registration interface parameter
7.1 Input Parameter
7.2 Return parameter
8 eID authentication service message parameter
8.1 Overview
8.2 Application Service Provider Request Message Parameter
8.3 eID Service Platform Challenge Message Parameter
8.4 Application Service Provider Verification Message Parameter
8.5 eID service platform returns parameter
Appendix A (informative) Request and return message processing example
Appendix B (informative) Signature parameter generation example
Reference

Foreword

GB/T 36629 "Information Security Technology Citizen Network Electronic Identity Identification Security Technical Requirements" is divided into three parts.

--- Part 1. Safety requirements for reading and writing equipment;

--- Part 2. Carrier security technical requirements;

--- Part 3. Verification service messages and their processing rules.

This part is the third part of GB/T 36629.

This part is drafted in accordance with the rules given in GB/T 1.1-2009.

1 Scope

This part of GB/T 36629 specifies the messages transmitted between the citizen network electronic identity verification service and the application service provider. Its encoding processing rules.

This section applies to the citizen network electronic identity verification service and the design and development of applications and systems that use the service.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only the dated version applies to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 13000-2010 Information Technology General Multi-Bit Coded Character Set (UCS)

GB/T 20518 Information Security Technology Public Key Infrastructure Digital Certificate Format

GB/T 25069-2010 Information Security Technology Terminology

GB/T 26231-2017 National Technical Numbering System and Operating Procedures for Information Technology Open Systems Interconnection Object Identifier (OID)

GB/T 36632-2018 Information Security Technology Citizen Network Electronic Identity Format Specification

IETFRFC4648-2006 Base16, Base32 and Base64 data encoding (TheBase16, Base32, andBase64 DataEncodings)

3 Terms and definitions

The following terms and definitions as defined in GB/T 25069-2010 and GB/T 36632-2018 apply to this document.

3.1 eID service platform

Provides a platform for lifecycle business processing related services such as eID generation, storage, use and maintenance.

3.2 eID authentication

Confirm that the declared eID identity is correct by comparing the submitted eID identity assertion with the pre-registered information process.

3.3 eID identity registration

Providing a set of data as evidence of the declared identity and/or rights by assigning a unique eID identification code to the identity of the entity, and Issue the eID carrier to ensure its authenticity.

3.4 eID mobile application

An eID application running on a mobile client.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 17 pages — is available in the English PDF.

Referenced standards

Normative references

Similar standards

GB/T 18805-2026|GB/T 32915-2026|GB/T 42382.2-2026|GB/T 42382.3-2026|GB/T 47277-2026|GB/T 47312-2026

How to Download GB/T 36629.3-2018

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.