GB/T 39786-2021Information security technology—Baseline for information system cryptography application (English PDF)
信息安全技术 信息系统密码应用基本要求
This is a limited preview
Buy now to download the full PDF (21 pages)
Need quotation for your management?
Get a formal quotation for GB/T 39786-2021 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
March 9, 2021
Implementation date
October 1, 2021
Scope
GB/T 39786-2021 is the English-translated version of 信息安全技术 信息系统密码应用基本要求.
GB/T 39786-2021 fixes the baseline for the use of cryptography in an information system.
It sets the requirements of levels one to four on four technical planes - the physical and environmental security, the network and communication security, the device and computing security and the application and data security - and the requirements of the same levels on management: the management system, the people, the construction and operation and the emergency response.
It applies to the design, building and assessment of the cryptographic protection of information systems. System owners, security firms and assessors use it. Issued on 9 March 2021, it has applied since 1 October 2021.
Found what you need?
Document preview — GB/T 39786-2021
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and definitions
- 4 Overview
- 4.1 Information system password application technology framework
- 4.2 Description of basic requirements for password application
- 5 General requirements
- 6 Basic requirements for the first-level password application
- 6.1 Physical and environmental safety
- 6.2 Network and communication security
- 6.3 Equipment and computing security
- 6.4 Application and data security
- 6.5 Management System
- 6.6 Personnel Management
- 6.7 Construction and operation
- 6.8 Emergency response
- 7 Basic requirements for the second-level password application
- 7.1 Physical and environmental safety
- 7.2 Network and communication security
- 7.3 Equipment and computing security
- 7.4 Application and data security
- 7.5 Management System
- 7.6 Personnel Management
- 7.7 Construction and operation
- 7.8 Emergency response
- 8 Basic requirements for third-level password applications
- 8.1 Physical and environmental safety
- 8.2 Network and communication security
- 8.3 Equipment and computing security
- 8.4 Application and data security
- 8.5 Management System
- 8.6 Personnel Management
- 8.7 Construction and operation
- 8.8 Emergency response
- 9 Basic requirements for the fourth level of password application
- 9.1 Physical and environmental safety
- 9.2 Network and communication security
- 9.3 Equipment and computing security
- 9.4 Application and data security
- 9.5 Management System
- 9.6 Personnel management
- 9.7 Construction and operation
- 9.8 Emergency response
- 10 Basic requirements for level 5 password application
- Appendix A (informative appendix) Summary list of basic requirements for different levels of password applications
- Appendix B (Informative Appendix) Key Life Cycle Management
- Reference
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This standard specifies the basic requirements for the first to fourth levels of cryptographic applications in information systems, from the physical and environmental security of the information system, the network The four technical levels of network and communication security, equipment and computing security, and application and data security propose the first to fourth levels of cryptographic application technologies.
Requirements, and put forward the first to fourth levels of password application management from four aspects. management system, personnel management, construction and operation, and emergency response. Claim.
Note: The fifth-level password application only describes the general requirements in this standard, and the fifth-level password application technical requirements and management requirements are not described in this standard.
This standard is applicable to guide and standardize the planning, construction, operation and evaluation of cryptographic applications of information systems. On the basis of this standard, Domains and industries can combine the cryptographic application requirements of the field and industry to guide and standardize the cryptographic applications of information systems.
2 Normative references
The following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this document. For undated reference documents, the latest version (including all amendments) is applicable to this document.
GB/T 37092 Information Security Technology Password Module Security Requirements
3 Terms and definitions
The following terms and definitions apply to this document.
3.1 Confidentiality
The nature of ensuring that information is not leaked to unauthorized entities.
3.2 Dataintegrity
The data is not subject to the nature of unauthorized changes.
3.3 Authenticity
An entity is this characteristic of the entity it claims. Authenticity applies to entities such as users, processes, systems, and information.
3.4 Non-repudiation
Prove the undeniable nature of an operation that has occurred.
3.5 Encryption
The process of cryptographically transforming data to generate ciphertext.
3.6 Key
The key information or parameters that control the operation of a cryptographic algorithm.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 21 pages — is available in the English PDF.
Referenced standards
Normative references
Cited by
- DB/T 113.3-2026Earthquake early warning information release - Part 3: Earthquake early warning dedicated terminal
- GB/T 47474-2026General technical requirements for the energy efficiency operation platform of civil buildings
- GB/T 47855-2026Basic requirements for smart park information systems
- GB/T 45396-2025Data security technology — Security requirements for government data processing
- GB/T 45402-2025Urban intelligent hub - Overall architecture and requirements
- GB/T 45409-2025Cybersecurity technology — Technical specifications for operation and maintenance security management products
Similar standards
How to Download GB/T 39786-2021
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 37092-2018 — Information security technology—Security requirements for cryptographic modules
GB/T 10003-2026 — Biaxially oriented polypropylene (BOPP) film
GB/T 10004-2026 — Plastic/Plastic laminated films and pouches for packaging
Secure payment via Stripe
Payments accepted
GB/T 39786-2021
$330.00