GB/T 43694-2024Cybersecurity technology - Certificate application integrated service interface specification (English PDF)

1 Scope

This document specifies the requirements and definitions of the comprehensive service interface for certificate applications and describes the corresponding verification methods:

This document is applicable to the development of certificate application middleware and certificate application system under the public key cryptography infrastructure application technology system, as well as the development of certificate application middleware and certificate application system under the public key cryptography infrastructure application technology system:

Development and testing of code application support platform:

2 Normative references

The contents of the following documents constitute the essential clauses of this document through normative references in this document:

For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to

This document:

GB/T 20518 Information security technology Public key infrastructure Digital certificate format

GB/T 25061 Information security technology XML digital signature syntax and processing specification

GB/T 25069 Information security technical terms

GB/T 33560 Information security technology cryptographic application identification specification

GB/T 35275 Information security technology SM2 cryptographic algorithm encryption signature message syntax specification

GB/T 35276 Information security technology SM2 cryptographic algorithm usage specification

GB/T 35291 Information security technology Intelligent password key application interface specification

GB/T 36322 Information security technology cryptographic equipment application interface specification

GB/T 43578 Information security technology general cryptographic service interface specification

GM/T 0094-2020 Public Key Cryptography Application Technology System Framework Specification

GM/Z4001 Cryptographic Terminology

3 Terms and definitions

The terms and definitions defined in GB/T 25069, GM/Z4001 and the following apply to this document:

3:1 digital certificatedigitalcertificate

A data signed by a CA that contains information about the public key owner, public key, issuer, validity period, and extended information:

structure:

Note: Digital certificates are also called public key certificates: They are divided into personal certificates, institutional certificates, and device certificates by category, and into signature certificates and encryption certificates by purpose:

[Source: GM/Z4001-2013, 2:115]

3:2

User key userkey

An asymmetric key pair stored inside the device and used for application cryptographic operations:

Note: User keys include a signature key pair and an encryption key pair:

3:3 keycontainer

A unique storage space in a cryptographic device used to store user keys: