Valid

GB/T 36631-2018Information security technology—Time stamp policy and time stamp practice rules (English PDF)

信息安全技术 时间戳策略和时间戳业务操作规则

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 36631-2018 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

September 17, 2018

Implementation date

April 1, 2019

Scope

GB/T 36631-2018 is the English-translated version of 信息安全技术 时间戳策略和时间戳业务操作规则.

GB/T 36631-2018 sets the rules for third-party time stamp services, for use by the authorities that issue time stamps when they draw up their time stamp policy and their time stamp practice rules.

For the policy it covers the policy identifier, the entities involved, applicability and compliance. The practice rules deal with the business entity, policy management, time stamp management, time synchronization, key information, how the organization certificate is generated, backup, business continuity and operation management.

A final clause sets out the responsibilities and obligations of the parties. Terms such as time stamp policy, relying party, subscriber, time stamp authority and time stamp service are taken from GB/T 20520-2006. It was issued on 17 September 2018 and has applied since 1 April 2019.

Found what you need?

Document preview — GB/T 36631-2018

National Standard of the People's Republic of China

ICS
35.040
Classification
L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

  • Foreword
  • Introduction
  • 1 Scope
  • 2 Normative references
  • 3 Terms and Definitions
  • 4 Abbreviations
  • 5 timestamp strategy
  • 5.1 Overview
  • 5.2 Timestamp Policy ID
  • 5.3 Application Entity
  • 5.4 Applicability
  • 5.5 Compliance
  • 6 timestamp business operation rules
  • 6.1 Business entity
  • 6.2 Policy Management
  • 6.3 Time Stamp Management
  • 6.4 Time Synchronization Management
  • 6.5 Key Information
  • 6.6 Organization Certificate Generation Method
  • 6.7 Backup Mechanism
  • 6.8 Business Continuity
  • 6.9 Operation Management
  • 7 Responsibilities and obligations
  • 7.1 Responsibility
  • 7.2 Obligation
  • Reference

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

Introduction

With the development of information technology, more and more traditional applications have been replaced by network applications, such as e-commerce, digital publishing and other network applications.

The traditional method of recording time has not been used in the Internet environment to prove whether time has occurred at a certain moment, when it is triggered to a trusted third party.

The need for a poke service. To this end, a number of domestic certification bodies and professional companies have successively launched time-related business services for electronic Forensic, copyright protection, e-commerce and other services provide authoritative, reliable, and fair third-party time stamp services. In 2003, "Electronics The issuance of the Signature Law provides legal protection for the further development of time-stamped business services.

To standardize the development of timestamp services, this standard is for third-party timestamp service organizations, in timestamp policies, timestamp business operation rules.

It should be standardized such as the timestamp identifier, timestamp management, and the responsibility and obligation of the timestamp associated party. This standard is in the process of formulation In reference to the relevant norms at home and abroad, combined with the characteristics of China's time stamp service and application, it has been adjusted and expanded.

1 Scope

This standard specifies time stamping strategies, time stamping business operating rules, and responsibilities and obligations.

This standard applies to timestamp agencies to prepare timestamp strategies and timestamp business operation rules and other activities.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 16262.1-2006 Information technology abstract grammar notation - (ASN.1) Part 1. Basic notation specification

GB/T 20520-2006 Information Security Technology Public Key Infrastructure Time Stamp Specification

3 Terms and definitions

The following terms and definitions as defined in GB/T 20520-2006 apply to this document. For ease of use, the following is repeated Some terms and definitions in GB/T 20520-2006.

3.1 Timestamp policy

A set of specified rule sets that indicate the timestamp's suitability for a particular group and/or application type with the same security requirements.

3.2 Timestamp business operation rule

The timestamp mechanism is used by subscribers and relying parties in the process of issuing, managing, deleting and destroying timestamps and TSU key management. Business practice.

3.3 Relying party

Timestamp receiver.

3.4 Subscriber

An entity that requires a timestamp service by a timestamp mechanism.

3.5 Timestamp mechanism

The authority used to generate and manage timestamps. [GB/T 20520-2006, definition 3.3]

3.6 Timestamp service

A timestamp service provided by a timestamp organization to a subscriber.

Note: The file is timed by the subscriber and the time stamp authority issues a time stamp for this file.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Similar standards

How to Download GB/T 36631-2018

  1. 1

    Add to cart

    Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

  2. 2

    Checkout

    Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

  3. 3

    Instant delivery (0–9 sec)

    Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

  4. 4

    Invoice included

    A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
15 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GB/T 36631-2018

$145.00