GB/T 42573-2023Information security technology—Security technical requirements for identity service in network (English PDF)
信息安全技术 网络身份服务安全技术要求
This is a limited preview
Buy now to download the full PDF (25 pages)
Need quotation for your management?
Get a formal quotation for GB/T 42573-2023 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
May 23, 2023
Implementation date
December 1, 2023
Scope
GB/T 42573-2023 is the English-translated version of 信息安全技术 网络身份服务安全技术要求.
This document establishes the participants in a network identity service for natural persons and the models such a service follows, and specifies its security levels and the security technical requirements that go with them.
The document applies to the design, development, deployment and application of network identity services for natural persons.
Found what you need?
Document preview — GB/T 42573-2023
National Standard of the People's Republic of China
- ICS
- 35.030
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Overview of Web Identity Services
- 5.1 Participants
- 5.2 Identity service model
- 5.3 Service Security Level
- 6 Service Security Technical Requirements
- 6.1 Identity Verification Service
- 6.2 Identity authentication service
- 6.3 Identity federation service
- Appendix A (Informative) Network Identity Service Security Technical Requirements
- Appendix B (informative) Types of user attributes
- Appendix C (informative) Network identity service risk mitigation
- Appendix D (informative) Discriminator types
- Appendix E (Informative) Identity Federation Service Establishment Model
- Reference
Foreword
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules for Standardization Documents" drafting.
1 Scope
This document establishes the participants and models of network identity services for natural persons, and specifies the security level and security requirements of network identity services. skills requirement.
This document applies to the design, development, deployment and application of online identity services for natural persons.
2 Normative references
The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.
GB/T 15843 (all parts) Information technology security technology entity authentication
GB/T 22239 Basic Requirements for Network Security Level Protection of Information Security Technology
GB/T 25069 Information Security Technical Terms
GB/T 35273 Personal Information Security Specifications for Information Security Technology
GB/T 37036 (all parts) Biometric identification of information technology mobile devices
GB/T 37092 Information Security Technology Cryptographic Module Security Requirements
GB/T 40660 Basic requirements for information security technology biometric identification information protection
3 Terms and Definitions
The following terms and definitions defined in GB/T 25069 apply to this document.
3.1 Identity service provider
An entity that provides identity services in a network.
3.2 User
A natural person using an online identity service.
Note: The applicant, claimant, and subscriber represent different roles of users in different scenarios.
3.3 Relying party
An entity that relies on authentication results to determine whether to establish a trust relationship with a user.
3.4 Identity verification
identityproofing The process of collecting user identity information and verifying the authenticity of user identity information.
3.5 Identity authentication
The process of verifying who a user claims to be.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 25 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 22239Information security technology - Baseline for classified protection of cybersecurity
- GB/T 25069Information security techniques—Terminology
- GB/T 35273Information security technology—Personal information security specification
- GB/T 37092Information security technology—Security requirements for cryptographic modules
- GB/T 40660Information security technology—General requirements for biometric information protection
GB/T 15843 · GB/T 37036
Similar standards
How to Download GB/T 42573-2023
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 15843.1-2017 — Information technology -- Security techniques -- Entity authentication -- Part 1: General
GB/T 15843.2-2024 — Cybersecurity technology—Entity authentication—Part 2: Mechanisms using authenticated encryption
GB/T 15843.3-2023 — Information technology—Security techniques—Entity authentication—Part 3: Mechanisms using digital signature techniques
Secure payment via Stripe
Payments accepted
GB/T 42573-2023
$450.00