GB/T 42570-2023 English PDFUS$539.00 ยท In stock
Delivery: <= 5 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 42570-2023: Information security technology - Security framework for blockchain technology Status: Valid
Basic dataStandard ID: GB/T 42570-2023 (GB/T42570-2023)Description (Translated English): Information security technology - Security framework for blockchain technology Sector / Industry: National Standard (Recommended) Classification of Chinese Standard: L80 Classification of International Standard: 35.030 Word Count Estimation: 28,25 Date of Issue: 2023-05-23 Date of Implementation: 2023-12-01 Issuing agency(ies): State Administration for Market Regulation, China National Standardization Administration GB/T 42570-2023: Information security technology - Security framework for blockchain technology---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.ICS35:030 CCSL80 National Standards of People's Republic of China Information Security Technology Blockchain Technology Security Framework Released on 2023-05-23 2023-12-01 implementation State Administration for Market Regulation Released by the National Standardization Management Committee table of contentsPreface III 1 Scope 1 2 Normative references 1 3 Terms and Definitions 1 4 Abbreviations 3 5 Overview 4 5:1 Blockchain Technology 4 5:2 Blockchain technology security risk 4 6 Blockchain Technology Security Framework 5 7 Blockchain password support 6 7:1 Overview 6 7:2 Cryptography 6 7:3 Cryptography infrastructure 7 8 Blockchain Security Functional Components 8 8:1 Overview 8 8:2 User Security 8 8:3 Service Interface Security 8 8:4 Contract Security 9 8:5 Consensus Security 9 8:6 Ledger Protection 10 8:7 Peer-to-peer security 10 8:8 Computing and Storage Security 11 8:9 Privacy Protection 12 8:10 Cross-chain security 12 9 Blockchain Security Management Operation 13 9:1 Overview 13 9:2 Security operation and maintenance 13 9:3 Identity authentication and management 14 9:4 Compliance Audit 14 9:5 Regulatory cooperation14 10 Blockchain Role Security Responsibilities 15 10:1 Blockchain End User Security Responsibilities 15 10:2 Blockchain service provider security responsibilities 15 10:3 Blockchain Technology Provider Security Responsibilities 16 10:4 Blockchain Auditor Security Responsibilities 16 10:5 Blockchain Regulator Security Responsibilities 17 Appendix A (Informative) Blockchain Technology Security Risks 18 A:1 Overview 18 A:2 Blockchain password application risk18 A:3 Security risks faced by blockchain security functional components18 A:4 Blockchain Security Management Operational Risks 19 Reference 21forewordThis document is in accordance with the provisions of GB/T 1:1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules for Standardization Documents" drafting: Please note that some contents of this document may refer to patents: The issuing agency of this document assumes no responsibility for identifying patents: This document is proposed and managed by the National Information Security Standardization Technical Committee (SAC/TC260): This document is drafted by: Tsinghua University, Digital Currency Research Institute of the People's Bank of China, China Institute of Electronic Technology Standardization, National Information Technology Security Research Center, Ant Technology Group Co:, Ltd:, Jingdong Technology Information Technology Co:, Ltd:, Beijing Baidu Netcom Technology Co:, Ltd: Company, Hangzhou Secret Ape Technology Co:, Ltd:, Shenzhen Nuchuangxinan Technology Development Co:, Ltd:, Shandong University, Shandong Blockchain Research Institute, Ali Cloud Computing Co:, Ltd:, Huawei Technologies Co:, Ltd:, Dinglian Digital Technology (Shenzhen) Co:, Ltd:, Matrix Element Technology (Shenzhen) Co:, Ltd:, Shenzhen City Tencent Computer System Co:, Ltd:, Zhejiang University, Shanghai Jiaotong University: The main drafters of this document: Wang Xiaoyun, Mu Changchun, Di Gang, Jia Keting, Guo Xiaolei, Wang Haijun, Zhang Shuang, Wang Haitang, Zhang Ren, Wang Zongyue, Yu Yu, Wei Puwen, Duan Sisi, Pan Guozhen, Wang Bo, Su Nianle, Jin Tao, Gong Zihong, Chang Wenting, Jing Bo, Zhang Haibin, He Chao, Wang Hailong, Qiu Pengcheng, Chen Yu, Wang Anyu, Chen Ping, Guo Shanqing, Zhang Guoyan, Ren Kui, Zhang Yuguang, Sun Xiaoli, Liu Jian, Qin Lingyue, Li Kepeng: Information Security Technology Blockchain Technology Security Framework1 ScopeThis document gives the blockchain technology security framework, which includes blockchain cryptographic support, blockchain security functional components, blockchain security Full management operation and blockchain role security responsibilities and other parts: This document is applicable to guide blockchain service providers to conduct overall planning in the process of blockchain design, development, deployment, management and operation and maintenance: Planning and security framework design can also provide reference for blockchain security assessment:2 Normative referencesThe contents of the following documents constitute the essential provisions of this document through normative references in the text: Among them, dated references For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document: GB/T 20518 Information Security Technology Public Key Infrastructure Digital Certificate Format GB/T 21053 Information Security Technology Public Key Infrastructure PKI System Security Level Protection Technical Requirements GB/T 22239-2019 Basic Requirements for Network Security Level Protection of Information Security Technology GB/T 25069 Information Security Technical Terms GB/T 30998 Information Technology Software Security Assurance Specification GB/T 35273-2020 Personal Information Security Specifications for Information Security Technology GB/T 37092-2018 Security requirements for cryptographic modules of information security technology GB/T 39786-2021 Basic Requirements for Cryptography Application in Information Security Technology Information System GM/T 0005 Random Testing Specification3 Terms and DefinitionsThe following terms and definitions defined in GB/T 25069 apply to this document: 3:1 block block A basic data structure consisting of a series of information units: [Source: ISO 22739:2020, 3:2, with modifications] 3:2 blockchain blockchain The blocks are connected in sequence, and the tamper-resistant and unforgeable data are guaranteed by cryptographic methods such as consensus protocols, digital signatures, and hash functions: Distributed ledger: [Source: ISO 22739:2020, 3:6, with modifications] 3:3 node node Independently functioning blockchain components with specific functions: ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 42570-2023_English be delivered?Answer: Upon your order, we will start to translate GB/T 42570-2023_English as soon as possible, and keep you informed of the progress. The lead time is typically 3 ~ 5 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of GB/T 42570-2023_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 42570-2023_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. |