GB/T 36633-2018Information security technology—Technical guide for identity authentication over network (English PDF)
信息安全技术 网络用户身份鉴别技术指南
This is a limited preview
Buy now to download the full PDF (20 pages)
Need quotation for your management?
Get a formal quotation for GB/T 36633-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
September 17, 2018
Implementation date
April 1, 2019
Scope
GB/T 36633-2018 is the English-translated version of 信息安全技术 网络用户身份鉴别技术指南.
GB/T 36633-2018 is a technical guide to identifying and authenticating users over a network.
It describes the authentication process, protocols, credentials, verifiers, relying parties and cryptographic support, and then goes through each stage of the process: user registration and credential issuance, the submission and verification of identification information, and assertions.
For each stage and for credentials and credential management, it sets out the typical threats and the strategies for countering them. Annexes describe the identification process of three identification models and a basic assertion model.
It draws on the GB/T 15843 entity authentication series and applies to the design, development and testing of user identity authentication systems in a network environment. It was issued on 17 September 2018 and has applied since 1 April 2019.
Found what you need?
Document preview — GB/T 36633-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Overview
- 5.1 Network User Identity Identification Process
- 5.2 Authentication Protocol
- 5.3 Credentials
- 5.4 Verifier
- 5.5 relying party
- 5.6 Password Support
- 6 User registration and certificate issuance process
- 6.1 Registering and Distributing Threats
- 6.2 Coping strategies for registering and distributing threats
- 7 Identification information submission and verification process
- 7.1 Submitting and verifying threats
- 7.2 Coping strategies for submitting and verifying threats
- 8 assertion process
- 8.1 Assertion threat
- 8.2 Strategies for asserting threats
- 9 Document
- 9.1 Type of Document
- 9.2 Credential Threat
- 9.3 Coping strategies for voucher threats
- 10 Certificate Management
- 10.1 Voucher Management Activities
- 10.2 Credential Management Threats
- 10.3 Coping Strategies for Credential Management Threats
- Appendix A (informative appendix) Identification process of three identification models
- Appendix B (informative) Basic Assertion Model
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This standard gives the main process of user identity identification in the network environment and the threat of common authentication technology, and stipulates the defense against The method of threatening.
This standard applies to the design, development and testing of user identity authentication systems in a network environment.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 15843.1 Information technology security technology entity identification Part 1. General
GB/T 15843.2 Information technology security technology entity identification Part 2. Mechanisms using symmetric cryptographic algorithms
GB/T 15843.3 Information technology security technology entity identification Part 3. Mechanisms using digital signature technology
GB/T 15843.4 Information technology security technology entity identification Part 4. Mechanisms using cryptographic check function
GB/T 15843.5 Information technology security technology entity identification Part 5. Mechanisms using zero-knowledge technology
GB/T 25069 Information Security Technical Terminology
GB/T 28455 Information Security Technology Introduces Entity Authentication and Access Architecture Specification for Trusted Third Parties
3 Terms and definitions
The following terms and definitions as defined in GB/T 25069 apply to this document.
3.1 Claiming party
For identification, it is itself an ontology or an individual representing the ontology.
Note: The claimant has various functions that represent the ontology for authentication exchange.
3.2 Applicant
An individual requesting the assignment of a registration item and its label.
3.3 Verifier
An institution or organization that verifies the legality of a party.
3.4 Relying party
An organization or organization that relies on the identity authentication result to determine whether to establish a trust relationship with the claimant.
3.5 Credential
personal I.D.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 20 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 15843.1Information technology -- Security techniques -- Entity authentication -- Part 1: General
- GB/T 15843.2Cybersecurity technology—Entity authentication—Part 2: Mechanisms using authenticated encryption
- GB/T 15843.3Information technology—Security techniques—Entity authentication—Part 3: Mechanisms using digital signature techniques
- GB/T 15843.4Information technology - Security techniques - Entity authentication - Part 4: Mechanisms using a cryptographic check function
- GB/T 15843.5Information technology -- Security technique -- Entity authentication -- Part 5: Mechanisms using zero knowledge techniques
- GB/T 25069Information security techniques—Terminology
Similar standards
How to Download GB/T 36633-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 15843.1-2017 — Information technology -- Security techniques -- Entity authentication -- Part 1: General
GB/T 15843.2-2024 — Cybersecurity technology—Entity authentication—Part 2: Mechanisms using authenticated encryption
GB/T 15843.3-2023 — Information technology—Security techniques—Entity authentication—Part 3: Mechanisms using digital signature techniques
Secure payment via Stripe
Payments accepted
GB/T 36633-2018
$355.00