GB/T 42971-2023Third-party service platform for electronic contract information security technical requirement (English PDF)
第三方电子合同服务平台信息安全技术要求
This is a limited preview
Buy now to download the full PDF (15 pages)
Need quotation for your management?
Get a formal quotation for GB/T 42971-2023 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
September 7, 2023
Implementation date
April 1, 2024
Scope
GB/T 42971-2023 is the English-translated version of 第三方电子合同服务平台信息安全技术要求.
This document specifies the information security requirements for a third-party electronic contract service platform: the basic requirements, the security of the process by which a contract is concluded, the security of storage and of the application, and secure operation and maintenance.
The document applies to the design, development and operation of such a platform and to the process of concluding an electronic contract on it.
Found what you need?
Document preview — GB/T 42971-2023
National Standard of the People's Republic of China
- ICS
- 35.240.60
- Classification
- A 10
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- 1 Scope
- 2 Normative reference documents
- 3 Terms and Definitions
- 4 Basic requirements
- 4.1 Qualification requirements
- 4.2 True identity
- 4.3 Business Continuity Guarantee
- 4.4 Communication security
- 4.5 Safety Assessment and Supervision
- 4.6 Data Security
- 4.7 Electronic signature
- 4.8 Record retention
- 5 Establish process safety
- 5.1 Basic requirements
- 5.2 Real-name verification
- 5.3 Digital certificate application
- 5.4 Cryptozoological algorithms and cryptographic products
- 5.5 Timestamp
- 5.6 Reliability of evidence
- 5.7 Data security technology
- 6 Storage and Application Security
- 6.1 Storage Security
- 6.2 Privacy Protection Security
- 6.3 Judicial Evidence
- 7 Security Operation and Maintenance
- 7.1 Log Management
- 7.2 Vulnerability Management
- 7.3 Backup management
- 7.4 Security incident management
- Reference
Foreword
This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.
1 Scope
This document stipulates the basic requirements for third-party electronic contract service platforms, the security of the conclusion process, storage and application security, and secure operation and maintenance, etc. Require.
This document applies to the design, development, operation and electronic contract conclusion process of the third-party electronic contract service platform.
2 Normative reference documents
The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, the dated quotations For undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document.
GB/T 20520 Information security technology public key infrastructure timestamp specification
GB/T 20988 Information Security Technology Information System Disaster Recovery Specification
GB/T 22239 Basic requirements for network security level protection of information security technology
GB/T 28448 Information security technology network security level protection evaluation requirements
GB/T 32918.2 Information security technology SM2 elliptic curve public key cryptography algorithm Part 2: Digital signature algorithm
GB/T 35273 Information Security Technology Personal Information Security Specifications
GB/T 37988 Information security technology data security capability maturity model
GB 50174 Data Center Design Specification
JR/T 0118 Financial Electronic Authentication Specification
3 Terms and definitions
The following terms and definitions apply to this document.
3.1 Electronic contract
The establishment, change and termination of civil rights obligations between natural persons, legal persons and other organizations use data messages as the carrier and use electronic communication means. business relationship agreement. [Source: GB/T 36298-2018, 3.1, with modifications]
3.2 Electronic signature
Data contained in a data message in electronic form and attached to identify the signer and indicate that the signer acknowledges its content.
3.3 PKI-based digital signature authentication technology
3.4 Electronic signature authentication service
Activities that provide authenticity and reliability verification for all parties involved in electronic signatures.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 20520Cybersecurity technology - Public key infrastructure - Specification for time stamp
- GB/T 20988Cybersecurity technology - Disaster recovery specifications for information systems
- GB/T 22239Information security technology - Baseline for classified protection of cybersecurity
- GB/T 28448Information security technology —Evaluation requirement for classified protection of cybersecurity
- GB/T 32918.2Information security technology—Public key cryptographic algorithm SM2 based on elliptic curves—Part 2: Digital signature algorithm
- GB/T 35273Information security technology—Personal information security specification
Similar standards
How to Download GB/T 42971-2023
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB 50174-2017 — Code for design of data centers
GB/T 20520-2006 — Information security technology - Public key infrastructure - Time stamp specification
GB/T 20520-2025 — Cybersecurity technology - Public key infrastructure - Specification for time stamp
Secure payment via Stripe
Payments accepted
GB/T 42971-2023
$225.00