Valid

GB/T 37033.3-2018Information security technology—Technical requirements for cryptographic application for radio frequency identification systems—Part 3: Technical requirements for key management (English PDF)

信息安全技术射频识别系统密码应用技术要求第3部分：密钥管理技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 37033.3-2018 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 28, 2018

Implementation date

July 1, 2019

Scope

GB/T 37033.3-2018 is the English-translated version of 信息安全技术射频识别系统密码应用技术要求第3部分：密钥管理技术要求.

GB/T 37033.3-2018 is the third part of the Chinese national series on how cryptography is applied in radio frequency identification (RFID) systems, and it deals with key management.

It sets the key management requirements for the cryptographic mechanisms used by electronic tags, readers and the communication between them.

After terms such as secure cryptographic device, split knowledge, key component and dual control, it describes the key management models for symmetric and asymmetric keys, the general requirements for managing each kind of key and how those requirements are applied, with an informative annex giving a key management example for an RFID system.

It is meant for the design, implementation, evaluation and application of key management in RFID systems, and relies on the terms of GB/T 37033.1-2018. It was issued on 28 December 2018 and has applied since 1 July 2019.

Found what you need?

Document preview — GB/T 37033.3-2018

National Standard of the People's Republic of China

ICS: 35.040
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Foreword
1 Scope
2 Normative references
3 Terms and Definitions
4 symbols and abbreviations
5 Overview
6 Key Management Model
6.1 Symmetric Key Management Model
6.2 Asymmetric Key Management Model
7 Key Management General Requirements
7.1 General Requirements for Symmetric Key Management
7.2 General Requirements for Asymmetric Key Management
8 Key Management Application Requirements
8.1 Symmetric Key Management Application Requirements
8.2 Asymmetric Key Management Application Requirements
Appendix A (informative) Key Management Example for Radio Frequency Identification System

Foreword

GB/T 37033 "Information Security Technology Radio Frequency Identification System Password Application Technical Requirements" is divided into three parts.

--- Part 1. Password security framework and security level;

--- Part 2. Electronic tag and reader and its communication password application technical requirements;

--- Part 3. Key management technical requirements.

This part is the third part of GB/T 37033.

This part is drafted in accordance with the rules given in GB/T 1.1-2009.

1 Scope

This part of GB/T 37033 specifies the use of the cryptographic mechanism for RFID tags, electronic tags, readers and their communication-related Key management requirements.

This section applies to the design, implementation, evaluation and application of key management in radio frequency identification systems.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 37033.1-2018 Information security technology - Radio frequency identification system - Code - Technical requirements - Part 1 Frame and security level

3 Terms and definitions

The following terms and definitions as defined in GB/T 37033.1-2018 apply to this document.

3.1 Secure password device

Secure storage for secret information such as keys, and devices that provide security services based on such secret information.

3.2 Key split

Two or more entities respectively own key fragments, and key information cannot be synthesized by a single key fragment.

3.3 Key component

One of at least two parameters generated by a random or pseudo-random process that can be combined with one or more other parameters to form a Key.

3.4 Dual control

A process that uses two or more separate entities (usually people) to work together to protect sensitive functions and information.

Note: Individual entities cannot access and use these features or information (such as keys).

4 Symbols and abbreviations

The following symbols and abbreviations apply to this document.

CA. Certification Authority (CertificationAuthority)

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 37033.1-2018Information security technology—Technical requirements for cryptographic application for radio frequency identification systems—Part 1: Cryptographic protection framework and security levels

Cited by

Similar standards

GB/T 18805-2026|GB/T 32915-2026|GB/T 42382.2-2026|GB/T 42382.3-2026|GB/T 47277-2026|GB/T 47312-2026

How to Download GB/T 37033.3-2018

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.