GB/T 45498.3-2025Specifications for the social security card one-card-pass of the People's Republic of China — Part 3: Security specifications (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document is Part 3 of GB/T 45498 "Specifications for the Social Security Card of the People's Republic of China".

The following parts were published.

— Part 1: Basic specifications;

— Part 2: Application specifications;

— Part 3: Safety regulations;

— Part 4: Terminal specifications.

Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents.

This document is proposed and coordinated by the Ministry of Human Resources and Social Security of the People's Republic of China.

This document was drafted by: Information Center of the Ministry of Human Resources and Social Security, the People's Bank of China, Jinbaoxin Social Security Card Technology Co., Ltd., Beijing Weiwang Technology Development Co., Ltd., Beijing Guoxin Bofei Technology Development Co., Ltd., China Electronics Technology Network Security Technology Co., Ltd., Tianjin Social Insurance Fund Management Center, Liaoning Social Insurance Service Center, Fujian Human Resources and Social Security Information Center, Hubei Human Resources and Social Security Information Center, Guizhou Human Resources and Social Security Information Center, Shaanxi Human Resources and Social Security Information Center According to the Cyber Security Supervision Center, Ningxia Hui Autonomous Region Social Insurance Administration, China National Institute of Standardization, China Electronics Technology Standard Institute of Chemistry, Beijing CEC Huada Electronic Design Co., Ltd., Puhua Chengxin Information Technology Co., Ltd., China Electronics Technology Group Corporation The 15th Research Institute, Sanwei Xinan Technology Co., Ltd., Datang Microelectronics Technology Co., Ltd., Tsinghua Unigroup Tongxin Microelectronics Co., Ltd., Shanghai Fudan Microelectronics Group Co., Ltd., Shenzhen Deka Technology Co., Ltd., Shenzhen Mingtai Intelligent Technology Co., Ltd., Beijing Yin LIANJINKA TECHNOLOGY LIMITED.

The main drafters of this document are: Li Na, Wang Zhifei, Xu Yuwei, Zhao Yaru, Hao Mingqi, Mo Linmin, Peng Hong, Song Jingyan, Chang Jun, Li Chenxing, Wei Lili, Hou Han, Ma Danlei, Cheng Yong, Zhao Gang, Zhang Bo, Wang Xia, Yu Xin, Wu Shuyuan, Yang Shuang, Li Na, Liao Lelin, Hua Zirong, Zhang Xinliang, Wang Wenfeng, Dong Jingjing, Wang Xiaoyu, Zhang Wenjie, Gao Yan, Gai Shutian, Liu Bo, Long Mengmeng, Song Guodong, Lu Jun, Jiang Dong, Duan Kaizhi, Zheng Ying, Zhang Xuefei, Yu Hong.

Introduction

This document regulates the application practice of the social security card, focuses on the business needs of the social security card, and targets the physical social security Standardize the technology, quality control, application and management requirements of social security cards, electronic social security cards and one-card applications It is a basic standard for realizing the social security card "one card for multiple uses, universal nationwide", supporting the government public service card, and the resident service card.

It plays an important basic guiding role.

GB/T 45498 "Specifications for the Social Security Card of the People's Republic of China" is the basis for regulating the work of the Social Security Card of the whole country.

The standard for the safety and universality of the project is planned to consist of four parts.

— Part 1: Basic specifications. The purpose is to specify the basic requirements for the social security card, including the Contents include system architecture, carrier requirements, service channels and basic support requirements.

— Part 2: Application Specification. The purpose is to specify the application requirements of the social security card, including the Platform basic requirements, application scenarios, application processes, platform access technology requirements, platform access management requirements, application collaboration and promotion Requirements, etc.

— Part 3: Security specifications. The purpose is to specify the security requirements of the social security card, including the Contents include carrier security requirements, terminal security requirements, platform security requirements, data security requirements and key security requirements.

— Part 4: Terminal Specification. The purpose is to specify the terminal requirements for the social security card, including the terminal requirements for the social security card Terminal form, basic terminal requirements, terminal technical requirements, etc.

Social Security Card of the People's Republic of China Part 3: Safety regulations

1 Scope

This document specifies the security system architecture, carrier security requirements, terminal security requirements, platform security requirements, data security requirements, etc. of the social security card.

According to security requirements and key security requirements.

This document applies to the design, development, integration, application, maintenance and operation of the social security card security system.

2 Normative references

GB/T 16649.4

GB/T 22239-2019

GB/T 25069-2022

GB/T 31506-2022

GB/T 32905

GB/T 32907

GB/T 32918.4

GB/T 35273-2020

GB/T 35275

GB/T 37092

GB/T 37988-2019

GB/T 38542

GB/T 39204

GB/T 39786-2021

GB/T 40660-2021

GB/T 41479-2022

GB/T 41803.1-2022

GB/T 41819-2022

GB/T 45498.1-2025

GB/T 45498.4-2025

3 Terms and definitions

The terms and definitions defined in GB/T 25069-2022, GB/T 16649.4, GB/T 45498.1-2025 and the following terms and definitions apply to this document.