GM/T 0095-2020Technical requirements for applications of cryptography in electronic bidding (English PDF)

3.1 Asymmetric cryptographic algorithm

a cryptographic algorithm that encryption and decryption use different keys; one of the keys (public key) can be made public, and the other key (private key) must be kept secret; it is computationally infeasible to solve the private key from the public key

3.2 Digital certificate

a data structure signed by a certificate authority (CA) that contains public key owner information, public key, issuer information, validity period, and extended information

3.3 Certificate authority; CA

an entity that manages the entire life cycle of digital certificate

3.4 Confidentiality

the nature of ensuring that information is not leaked to unauthorized individuals, processes and other entities

3.5 Data integrity

the characteristic that the data has not been altered or destroyed in an unauthorized manner

6.1 User registration

During the registration process, the important sensitive information of the bidder, tendering agency, and tenderee involved in the process is encrypted and protected during the transmission process.

6.2 Bidding plan

In the bidding plan stage, the documents issued by the tenderee in the name of the organization, including bidding commission contract and bidding project documents, shall use the digital certificate of the tenderee or agency for electronic signature.

6.3 Tender invitation

In the tender invitation stage, the electronic bidding system shall use the digital certificate of the tenderee or agency to conduct electronic signature to documents such as procurement bidding announcements, prequalification announcements and tender invitations. It shall be time stamped at the same time. It is advisable to use electronic signature at the same time.

6.4 Bid issuing

During the bid issuing, the tenderee shall conduct electronic signature and time stamp to the published documents. It is advisable to use electronic seal at the same time. The bidding documents can include bidding announcements,

6.7 Bid evaluation

During the bid evaluation, the electronic bidding system shall authenticate the identity of bid evaluation experts. Identity authentication shall meet the requirements of 7.3.

6.8 Bid awarding

During the bid awarding process, the tenderee shall be able to electronically sign the announced announcement of successful bid candidates, the announcement of the winning bid result, the bid winning notice/prequalification result/tender result notice. Electronic signature shall be used. Time stamp can be sealed.

6.9 Objection

When the bidder raises objections to the prequalification documents, bidding documents, bid opening process, prequalification results, and bid evaluation results, the content of the objection submitted shall be electronically signed.

The tenderee shall electronically sign the content of the objection and stamp it with a time stamp. Electronic signature and verification shall meet the requirements of 7.5.

7.1 Algorithm requirements

The cryptographic algorithms that the electronic bidding system shall use include SM3 cryptographic hash algorithm, SM4 block cryptographic algorithm, SM2 elliptic curve public key cryptographic algorithm.

7.2.1 Overview

The cryptographic devices used in the electronic bidding system are divided into client cryptographic devices and server cryptographic devices. The cryptographic devices shall obtain the qualification certificate issued by the national cryptographic management authority.

7.2.3 Server cryptographic device

The electronic bidding system shall use server cryptographic devices, such as cryptographic server, signature verification server, time stamp server,

7.3 Identity authentication technical requirements

The electronic bidding system shall identify the true identity of each visiting entity. Clarify the access control authority of the access entity. Ensure that each entity can only use the functions provided by the system in accordance with the scope set by the system. Before the visiting entity is successfully authenticated, the electronic bidding system shall prohibit any operation on behalf of the visiting entity.

7.4 Data encryption technology requirements

The electronic bidding system shall ensure the confidentiality of data. Data confidentiality ensures that sensitive data is not leaked or used without authorization, including storage confidentiality and transmission confidentiality.

For the scope of the data, refer to the cryptographic application requirements during business process described in Clause 6.

7.5 Technical requirements for electronic signature

The electronic bidding system shall ensure the integrity and non-repudiation of data messages through electronic signature technology based on digital certificates. Electronic signature shall comply with relevant national technical specifications. For the signature of the document, a public standard format file shall be used.

7.6 Electronic seal

The electronic bidding system shall adopt electronic seal and other forms to conduct electronic signature on various documents required in Clause 6 that need to be signed and other documents that need to be signed in the business.

For details, refer to Clause 6 Cryptographic application requirements for electronic bidding business process. When the electronic bidding system uses electronic seal to sign, the generation and use of electronic seal shall follow GM/T 0031.

7.7 Key management requirements

GM/T 0095-2020

CRYPTOGRAPHIC INDUSTRY STANDARD ICS 35.040 CCS L 80 Technical requirements for applications of cryptography in electronic bidding Issued on. DECEMBER 28, 2020 Implemented on. JULY 01, 2021 Issued by. National Cryptography Administration

Table of Contents

Foreword... 4

1 Scope... 5

2 Normative references... 5

3 Terms and definitions... 6

4 Abbreviations... 8

5 Reference model... 8

6 Cryptographic application requirements for electronic bidding business process... 10

6.1 User registration... 10

6.2 Bidding plan... 10

6.3 Tender invitation... 10

6.4 Bid issuing... 11

6.5 Tendering... 11

6.6 Bid opening... 12

6.8 Bid awarding... 13

6.9 Objection... 13

6.10 Supervision... 13

6.11 Bidding exception... 14

6.12 Filing... 14

7 Technical requirements for applications of cryptography in electronic bidding ... 14

7.1 Algorithm requirements... 14

7.2 Cryptographic device requirements... 14

7.3 Identity authentication technical requirements... 15

7.4 Data encryption technology requirements... 16

7.5 Technical requirements for electronic signature... 16

7.6 Electronic seal... 17

7.7 Key management requirements... 17

7.8 Certificate management requirements... 18

7.9 Emergency remediation requirements... 20 Annex A (informative) Examples of typical electronic bidding business process ... 21 Annex B (informative) Examples of emergency remedies... 23 Bibliography... 25

7.1 Algorithm requirements

The cryptographic algorithms that the electronic bidding system shall use include SM3 cryptographic hash algorithm, SM4 block cryptographic algorithm, SM2 elliptic curve public key cryptographic algorithm.

7.2.1 Overview

The cryptographic devices used in the electronic bidding system are divided into client cryptographic devices and server cryptographic devices. The cryptographic devices shall obtain the qualification certificate issued by the national cryptographic management authority.

7.2.3 Server cryptographic device

The electronic bidding system shall use server cryptographic devices, such as cryptographic server, signature verification server, time stamp server,

7.3 Identity authentication technical requirements

The electronic bidding system shall identify the true identity of each visiting entity. Clarify the access control authority of the access entity. Ensure that each entity can only use the functions provided by the system in accordance with the scope set by the system. Before the visiting entity is successfully authenticated, the electronic bidding system shall prohibit any operation on behalf of the visiting entity.

7.4 Data encryption technology requirements

The electronic bidding system shall ensure the confidentiality of data. Data confidentiality ensures that sensitive data is not leaked or used without authorization, including storage confidentiality and transmission confidentiality.

For the scope of the data, refer to the cryptographic application requirements during business process described in Clause 6.

7.5 Technical requirements for electronic signature

The electronic bidding system shall ensure the integrity and non-repudiation of data messages through electronic signature technology based on digital certificates. Electronic signature shall comply with relevant national technical specifications. For the signature of the document, a public standard format file shall be used.

7.6 Electronic seal

The electronic bidding system shall adopt electronic seal and other forms to conduct electronic signature on various documents required in Clause 6 that need to be signed and other documents that need to be signed in the business.

For details, refer to Clause 6 Cryptographic application requirements for electronic bidding business process. When the electronic bidding system uses electronic seal to sign, the generation and use of electronic seal shall follow GM/T 0031.