GB/T 42571-2023Information security technology - Security specification for blockchain information service (English PDF)

1 Scope

This document specifies the security technical requirements and security management requirements for blockchain information service providers, and describes the corresponding testing and evaluation methods:

and check assessment methods:

This document applies to services such as security construction, security operation, security management, and security assessment for blockchain information services:

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text: Among them, dated references

For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document:

GB /Z 20986-2007 Guidelines for Classification and Classification of Information Security Technology and Information Security Incidents

GB/T 25069-2022 Information Security Technical Terminology

GB/T 32915-2016 Binary sequence randomness detection method for information security technology

GB/T 35273-2020 Personal Information Security Specifications for Information Security Technology

GB/T 40645-2021 Information Security Technology Internet Information Service Security General Requirements

GM/T 0033-2014 Timestamp Interface Specification

3 Terms and Definitions

Defined in GB/T 25069-2022, GB/T 35273-2020 and GB/T 40645-2021 and the following terms and definitions apply in this document:

3:1

Based on blockchain technology or systems, information services provided through internet sites, applications and other network platforms:

3:2

Organizations or individuals using blockchain information services:

Note: Blockchain information service users are referred to as "users":

3:3

An organization that provides blockchain information services to blockchain information service users:

Note: Blockchain information service providers include but are not limited to blockchain business operators and blockchain technology providers:

3:4 timestamp timestamp

The data obtained by signing the time and other data to be signed, and used to indicate the time attribute of the data: