GB/T 42930-2023Internet finance—Technical requirements for personal identification (English PDF)
互联网金融 个人身份识别技术要求
This is a limited preview
Buy now to download the full PDF (24 pages)
Need quotation for your management?
Get a formal quotation for GB/T 42930-2023 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
August 6, 2023
Implementation date
December 1, 2023
Scope
GB/T 42930-2023 is the English-translated version of 互联网金融 个人身份识别技术要求.
This document specifies the technical requirements for identifying a person in internet finance services: the technical framework, the requirements for the credential, the requirements for the identification itself, and the security requirements.
The document applies to the services and activities connected with personal identification in internet finance.
Found what you need?
Document preview — GB/T 42930-2023
National Standard of the People's Republic of China
- ICS
- 03.060
- Classification
- A 11
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- Introduction
- 1 Scope
- 2 Normative reference documents
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Personal Identification Technology Framework
- 5.1 Framework and the role of each component
- 5.2 Main functions implemented by personal identity recognition
- 6 Technical requirements for personal identification credentials
- 6.1 Overview
- 6.2 Memorized Credentials Class
- 6.3 OTP Token
- 6.4 Digital Certificate
- 6.5 Biometrics
- 6.6 Mobile phone number authentication
- 7 Personal Identification Technology Requirements
- 7.1 General requirements
- 7.2 Personal identification combined with financial risk prevention and control
- 7.3 Personal identification factor
- 7.4 Continuous personal identification
- 8 Personal Identification Security Requirements
- Appendix A (informative) Suggestions for application of personal identification technology in typical scenarios
- Appendix B (informative) Typical business process
- B.1 Typical general process
- B.2 Personal identity verification
- B.3 Credential Generation
- B.4 Personal Identification
- Reference
Foreword
This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.
Introduction
With the rapid development of Internet financial services, the demand for personal identification in financial services is also growing rapidly. in internet environment Meeting the strict real-name authentication requirements of relevant regulatory agencies for the financial industry is one of the issues that all parties involved in the Internet finance industry urgently need to solve.
Implementing this document will help achieve the balance between personal information protection, information security, data security and transaction convenience in Internet financial services.
A good balance can be achieved to help relevant institutions realize mutual recognition of the credibility of personal identity recognition and promote the effective development of financial industry services using the Internet as a channel.
1 Scope
This document specifies the technical requirements for personal identification applied to Internet financial services, including technical framework, credential technical requirements, identification Identification technical requirements and security requirements.
This document applies to services and activities related to personal identification in Internet financial services.
2 Normative reference documents
The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, the dated quotations For undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document.
GB/T 27912-2011 Biometric security framework for financial services
GB/T 35273-2020 Information Security Technology Personal Information Security Specifications
GB/T 37036.1-2018 Information technology biometric identification of mobile devices Part 1: General requirements
GB/T 40660 Basic requirements for biometric information protection in information security technology
GM/T 0028-2014 Security technical requirements for cryptographic modules
3 Terms and definitions
The following terms and definitions apply to this document.
3.1 Internet finance
Utilize Internet technology and information and communication technology to realize new financial business models of financing, payment, investment and information intermediary services.
3.2 Credential
certificate Data used to identify an individual.
Note 1. In this document, credentials are generated during the personal identity verification (3.4) stage.
Note 2. In the field of Internet finance, typical credentials include digital certificates, static passwords, dynamic passwords, biometric identification information, etc. [Source: ISO 12812-1:2017, 3.10, modified]
3.3 Personal identity recognition
The process of establishing an individual's claimed identity with a specified level of confidence.
Note: Personal identity recognition usually includes two processes. personal identity verification (3.4) and personal identity identification (3.5).
3.4 Initial personal identification
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 24 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 27912-2011Financial services - Biometrics - Security framework
- GB/T 35273-2020Information security technology—Personal information security specification
- GB/T 37036.1-2018Information technology—Biometrics used with mobile devices—Part1: General requirement
- GB/T 40660Information security technology—General requirements for biometric information protection
Similar standards
How to Download GB/T 42930-2023
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 27912-2011 — Financial services -- Biometrics -- Security framework
GB/T 35273-2020 — Information security technology—Personal information security specification
GB/T 37036.1-2018 — Information technology—Biometrics used with mobile devices—Part1: General requirement
Secure payment via Stripe
Payments accepted
GB/T 42930-2023
$420.00