Valid

GB/T 46798-2025Cybersecurity technology - Technical requirements for cryptography and related security of identity-based cryptographic authentication systems (English PDF)

网络安全技术　标识密码认证系统密码及其相关安全技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (35 pages)

Need quotation for your management?

Get a formal quotation for GB/T 46798-2025 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 2, 2025

Implementation date

July 1, 2026

Scope

GB/T 46798-2025 is the English-translated version of 网络安全技术　标识密码认证系统密码及其相关安全技术要求.

GB/T 46798-2025 is the Chinese standard "Cybersecurity technology - Technical requirements for cryptography and related security of identity-based cryptographic authentication systems".

Its scope clause reads: This document specifies the security and technical requirements for services such as key generation, management, and public parameter querying in the identification cryptographic authentication system.

This document applies to the design, development, use, and testing of identification and password authentication systems. Its clauses include terms and definitions.

Found what you need?

Document preview — GB/T 46798-2025

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1.Scope
2 Normative References
3.Terms and Definitions
4.Abbreviations 3.
5.Identification Password Authentication System
5.1 System Composition
5.2 Identification Management
5.3 Identification Format
6.Cryptographic Algorithms, Cryptographic Devices, and Interface Requirements
6.1 Cryptographic Algorithms
6.2 Cryptographic Devices
6.3 Cryptographic Device Service Interface
7.Key generation service system requirements 6.
7.1 System Requirements
7.2 Key Generation Service Design
7.3 Safety Requirements
7.4 Data Backup Requirements
8.Registration service system requirements 9.
8.1 System Requirements
8.2 Registration Service Design
8.3 User Key Carrier
8.4 Safety Requirements
8.5 Data backup requirements
9.Service publishing system requirements
9.1 System Requirements
9.2 Service Release Design
9.3 Safety Requirements
9.4 Data Backup Requirements
10 Safety Requirements
10.1 Overview
10.2 System Security
10.3 Key Security
10.4 Communication security
10.5 Security Audit
11 Key Management Requirements
11.1 Key Security
11.2 User Key Request Authentication
11.3 Key Generation
11.4 Key Transmission
11.5 Key Storage
11.6 Key Update
11.7 Key Deregistration
11.8 Key Backup
11.9 Key Recovery
11.10 Master Key Management
11.11 System Identification Management
12 Key Management Security Operation Procedure Requirements
12.1 System Initialization Process
12.2 User Key Carrier Initialization
12.3 User Key Generation Process
12.4 Status Identification Release Process
12.5 Update User Key Status Process
12.6 Judicial Evidence Collection Key Recovery Process
12.7 User Information Status Query and Response Process
12.8 Master Key Update Process
Appendix A (Normative) Service Message Format
Appendix B (Informative) User Key Request Process and Message Format
Appendix C (Normative) Identification Data Format Requirements
Appendix D (Normative) OID and Algorithm Identifier of Cryptographic Algorithms
References

1 Scope

This document specifies the security and technical requirements for services such as key generation, management, and public parameter querying in the identification cryptographic authentication system.

This document applies to the design, development, use, and testing of identification and password authentication systems.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies.

This document.

GB/T 22239-2019 Information Security Technology - Basic Requirements for Network Security Level Protection

GB/T 25069 Information Security Technical Terminology

GB/T 32905 Information Security Technology - SM3 Cryptographic Hash Algorithm

GB/T 32907 Information Security Technology - SM4 Block Cipher Algorithm

GB/T 32918 (all parts) Information Security Technology SM2 Elliptic Curve Public Key Cryptography Algorithm

GB/T 37092 Information Security Technology - Security Requirements for Cryptographic Modules

GB/T 38635-2020 (All Parts) Information Security Technology - SM9 Identifier Cryptographic Algorithm

GM/T 0016-2023 Smart Cryptographic Key Cryptographic Application Interface Specification

GM/T 0018-2023 Application Interface Specification for Cryptographic Devices

GM/T 0057-2018 Identity Authentication Specification Based on IBC Technology

GM/T 0081-2020 SM9 Cryptographic Algorithm for Encrypting and Signing Messages Syntax Specification

GM/T 0090-2020 Identification Format Specification for Identification Cryptography Applications

3 Terms and Definitions

The terms and definitions defined in GB/T 38635-2020 (all parts) and GB/T 25069, as well as the following terms and definitions, apply to this document.

3.1 Authentication

The process of verifying the identity or attributes claimed by an entity.

3.2 Identity

Information that can uniquely identify an entity and is undeniable.

Note 1.Data in this document is identified as conforming to the Identifier definition in GM/T 0090-2020.

Note 2.In GM/T 0090-2020, the identityData of the Identifier is the entity's identifiable name, email address, ID card number, telephone number, and device code.

Number, street address, etc.

[Source. GB/T 38635.1-2020, 3.1, with modifications]

GB 46864 | GB/T 43696 | GB/T 43779 | GB/T 46796 | GB/T 46795 | […]

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 35 pages — is available in the English PDF.

Referenced standards

Normative references

Editions of GB/T 46798

Edition	Title	Revision	Status
GB/T 46798-2025	Cybersecurity technology - Technical requirements for cryptography and related security of identity-based cryptographic authentication system	current edition	Current

This page sells the current edition, GB/T 46798-2025. Earlier editions are listed for reference only.

How to Download GB/T 46798-2025

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.