GB/T 37376-2024 PDF English
US$560.00 · In stock · Download in 9 secondsGB/T 37376-2024: Transportation - Digital certificate format Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See step-by-step procedureStatus: Valid GB/T 37376: Evolution and historical versions
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivery | Name of Chinese Standard | Status |
| GB/T 37376-2024 | English | 560 |
Add to Cart
|
0-9 seconds. Auto-delivery
|
Transportation - Digital certificate format
| Valid |
| GB/T 37376-2019 | English | 175 |
Add to Cart
|
0-9 seconds. Auto-delivery
|
Transportation - Digital Certificate Format
| Valid |
Excerpted PDFs (Download full copy in 9 seconds upon purchase)PDF Preview: GB/T 37376-2024
GB/T 37376-2024: Transportation - Digital certificate format---This is an excerpt. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.), auto-downloaded/delivered in 9 seconds, can be purchased online: https://www.ChineseStandard.net/PDF.aspx/GBT37376-2024
GB
NATIONAL STANDARD OF THE
PEOPLE’S REPUBLIC OF CHINA
ICS 03.220.20; 35.240.60
CCS R 07
Replacing GB/T 37376-2019
Transportation - Digital certificate format
Issued on. AUGUST 23, 2024
Implemented on. MARCH 01, 2025
Issued by. State Administration for Market Regulation;
National Standardization Administration.
Table of Contents
Foreword... 3
1 Scope... 6
2 Normative references... 6
3 Terms and definitions... 7
4 Abbreviations... 7
5 Classification of digital certificates... 8
6 Digital certificate format... 8
Appendix A (Normative) Signature calculation process... 42
Appendix B (Informative) Example of ITS certificate... 44
Appendix C (Normative) ITS CRL security encapsulation related data structure... 47
Appendix D (Informative) Example of ITS CRL... 52
References... 54
1 Scope
This document specifies the requirements for the classification and format of digital
certificates in transportation information systems.
This document applies to the design, development, testing, application of software and
hardware systems related to digital certificates in transportation information systems.
2 Normative references
The contents of the following documents constitute essential clauses of this document
through normative references in the text. Among them, for dated references, only the
version corresponding to that date applies to this document; for undated references, the
latest version (including all amendments) applies to this document.
GB/T 2659.1 Codes for the representation of names of countries and their
subdivisions - Part 1.Country code
GB/T 13000 Information technology - Universal multiple-octet coded character set
(UCS)
GB/T 16262 (all parts) Information technology - Abstract syntax notation one
(ASN.1)
GB/T 20518 Information security technology - Public key infrastructure - Digital
certificate format
GB/T 25069 Information security techniques - Terminology
GB/T 32905 Information security techniques - SM3 cryptographic hash algorithm
GB/T 32907 Information security technology - SM4 block cipher algorithm
GB/T 32918.1 Information security technology - Public key cryptographic
algorithm SM2 based on elliptic curves - Part 1.General
GB/T 32918.2 Information security technology - Public key cryptographic
algorithm SM2 based on elliptic curves - Part 2.Digital signature algorithm
YD/T 3957-2021 LTE-based vehicular communication - Technical requirement of
security certificate management system
ISO/IEC 8825-7 Information technology - ASN.1 encoding rules - Part 7.
Specification of Octet Encoding Rules (OER)
3 Terms and definitions
The terms and definitions as defined in GB/T 25069, GB/T 32905, GB/T 32907, GB/T
32918.2, as well as the following terms and definitions, apply to this document.
3.1
Digital certificate
A trusted digital document digitally signed by a third-party certificate authority (CA)
recognized by the state and with authority, credibility, impartiality.
[Source. GB/T 20518-2018, 3.7]
3.2
ITS certificate
A digital certificate with a specific format issued to on-board units, roadside units,
mobile terminals, operation service providers in intelligent transportation systems.
3.3
SM2 algorithm
An elliptic curve public key cryptographic algorithm defined by GB/T 32918.
[Source. GB/T 25069-2022, 3.583]
4 Abbreviations
The following abbreviations apply to this document.
COER. Canonical Octet Encoding Rules
CRACA. Certificate Revocation Authorizing Certificate Authority
CRL. Certificate Revocation List
ITS. Intelligent Transport System
LA. Linkage Authority
SPDU. Secured Protocol Data Unit
SSP. Service Specific Permissions
5 Classification of digital certificates
The digital certificates issued and managed in the transportation information system
include the following 5 categories.
a) Institutional certificates - General format certificates issued to transportation
information system institutions;
b) Civil servant certificates - General format certificates issued to end users of
transportation information system staff;
c) Social public certificates - General format certificates issued to end users of the
public outside the transportation information system;
d) Equipment certificate - General format certificate issued to servers and supporting
terminal equipment of transportation information systems;
6 Digital certificate format
6.1 General format
Institutional certificates, public servant certificates, social public certificates,
equipment certificate formats, certificate revocation lists shall comply with the
requirements of GB/T 20518.
6.2 ITS certificate format
6.2.1 Basic elements
6.2.1.1 Encoding rules
The data structure defined in this document shall comply with the requirements of GB/T
16262 (all parts). The various information in the digital certificate format shall be
encoded using the COER encoding rules specified in ISO/IEC 8825-7.
6.2.1.2 Basic data types
The basic data types are defined as follows.
The following octet strings are used in the data structure definitions.
6.2.1.3 Application identifier
Definition type. Aid
6.2.1.4 3-byte (OCTET) hash value
Definition type. HashedId3
6.2.1.5 8-byte (OCTET) hash value
Definition type. HashedId8
Structure. HashedId8..= OCTET STRING (SIZE(8))
SequenceOfHashedId8..= SEQUENCE OF HashedId8
Description. This data structure contains an 8-byte truncated hash value of another data
structure. The HashedId8 of a given data structure is obtained by computing the hash
value of the encoded data structure and taking the low-order 8 octets of the hash output.
The low-order 8 bytes are the last 8 octets of the hash value, when represented in
network byte order.
6.2.1.6 10-byte (OCTET) hash value
Type definition. HashedId10
Structure. HashedId10..= OCTET STRING (SIZE(10))
SequenceOfHashedId10..= SEQUENCE OF HashedId10
Description. This data structure contains a 10-byte truncated hash value of another data
structure. HashedId10 of a given data structure is obtained by computing the hash value
of the encoded data structure and taking the low-order 10 octets of the hash output. The
low-order 10 bytes are the last 10 octets of the hash value, when represented in network
byte order.
6.2.1.7 Hash algorithm
Type definition. HashAlgorithm
Structure.
Description. This data structure represents a hash algorithm.
6.2.1.8 32-bit time
Definition type. Time32
Structure. Time32..= Uint32
Description. Time32 is a 32-bit unsigned integer, with high-order first encoding format,
giving the number of seconds of the International Atomic Time since 08.00.00 Beijing
time on January 1, 2004.
6.2.1.9 64-bit time
Definition type. Time64
Structure. Time64..= Uint64
Description. Time64 is a 64-bit unsigned integer, with high-order first encoding format,
giving the number of microseconds of the International Atomic Time since 08.00.00
Beijing time on January 1, 2004.
6.2.2 Certificate
6.2.2.30 Verification key indicator
Definition type. VerificationKeyIndicator
Structure.
6.3 ITS certificate revocation list
6.3.1 ITS CRL encapsulation format
Definition type. SecuredCrl
Structure.
Description. ITS CRL is defined as a secure encapsulation message, whose content field
type is signed data. The signature data payload structure in the signed CRL has no range
data extDataHash field; the data field contains ITSSecData, whose content field type is
UnsecuredData data and contains signature content. ITSSecData and other ITS CRL
security encapsulation related data structures shall comply with the requirements of
Appendix C.
6.3.2 ITS CRL content
Definition type. CrlContents
Structure.
6.3.3 Priority information
Definition Type. CrlPriorityInfo
Structure.
6.3.6 Revocation certificate link value information
Definition type. ToBeSignedLinkageValueCrl
Structure.
6.3.7 Revocation batch information
Definition type. JMaxGroup
Structure.
Description. This data structure contains the following information.
- jMax is used for the link value-based revocation algorithm. This value applies to
all revocation information contained in contents;
- contents contains individual link data.
6.3.8 Linkage authority information
Definition type. LAGroup
Structure.
6.3.9 Total revocation information
Definition type. IMaxGroup
Structure.
6.3.10 Individual linkage data
Definition type. IndividualRevocation
Structure.
Description. This data structure contains the following information.
- linkageSeed1 is used as the LinkageSeed 1 parameter for the revocation algorithm
based on the double seed link value;
- linkageSeed2 is used as the LinkageSeed 2 parameter for the revocation algorithm
based on the double seed link value.
6.3.11 Dual link authority CRL information
Definition type. GroupCrlEntry
Structure.
6.3.12 Single link authority CRL information
Definition type. GroupSingleSeedCrlEntry
Structure.
Description. This data structure contains the following information.
6.3.13 Linkage authority identifier
Definition type. LaId
6.3.14 Linkage seed
Definition type. LinkageSeed
Structure.
......
Source: Above contents are excerpted from the full-copy PDF -- translated/reviewed by: www.ChineseStandard.net / Wayne Zheng et al.
Tips & Frequently Asked QuestionsQuestion 1: How long will the true-PDF of English version of GB/T 37376-2024 be delivered?Answer: The full copy PDF of English version of GB/T 37376-2024 can be downloaded in 9 seconds, and it will also be emailed to you in 9 seconds (double mechanisms to ensure the delivery reliably), with PDF-invoice. Question 2: Can I share the purchased PDF of GB/T 37376-2024_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 37376-2024_English will be deemed to be sold to your employer/organization who actually paid for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. www.ChineseStandard.us -- GB/T 37376-2024 -- Click this link and select your country/currency to pay, the exact amount in your currency will be printed on the invoice. Full PDF will also be downloaded/emailed in 9 seconds. Question 5: Should I purchase the latest version GB/T 37376-2024?Answer: Yes. Unless special scenarios such as technical constraints or academic study, you should always prioritize to purchase the latest version GB/T 37376-2024 even if the enforcement date is in future. Complying with the latest version means that, by default, it also complies with all the earlier versions, technically. How to buy and download a true PDF of English version of GB/T 37376-2024?A step-by-step guide to download PDF of GB/T 37376-2024_EnglishStep 1: Visit website https://www.ChineseStandard.net (Pay in USD), or https://www.ChineseStandard.us (Pay in any currencies such as Euro, KRW, JPY, AUD).
Step 2: Search keyword "GB/T 37376-2024".
Step 3: Click "Add to Cart". If multiple PDFs are required, repeat steps 2 and 3 to add up to 12 PDFs to cart.
Step 4: Select payment option (Via payment agents Stripe or PayPal).
Step 5: Customize Tax Invoice -- Fill up your email etc.
Step 6: Click "Checkout".
Step 7: Make payment by credit card, PayPal, Google Pay etc. After the payment is completed and in 9 seconds, you will receive 2 emails attached with the purchased PDFs and PDF-invoice, respectively.
Step 8: Optional -- Go to download PDF.
Step 9: Optional -- Click Open/Download PDF to download PDFs and invoice.
See screenshots for above steps: Steps 1~3 Steps 4~6 Step 7 Step 8 Step 9
|