GM/T 0118-2022 PDF English
US$560.00 · In stock · Download in 9 secondsGM/T 0118-2022: Browser digital certificate application interface specification Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See step-by-step procedureStatus: Valid
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivery | Name of Chinese Standard | Status |
| GM/T 0118-2022 | English | 560 |
Add to Cart
|
0-9 seconds. Auto-delivery
|
Browser digital certificate application interface specification
| Valid |
Excerpted PDFs (Download full copy in 9 seconds upon purchase)PDF Preview: GM/T 0118-2022
GM/T 0118-2022: Browser digital certificate application interface specification---This is an excerpt. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.), auto-downloaded/delivered in 9 seconds, can be purchased online: https://www.ChineseStandard.net/PDF.aspx/GMT0118-2022
GM
CRYPTOGRAPHIC INDUSTRY STANDARD
ICS 35.030
L 80
Browser digital certificate application interface specification
Issued on. NOVEMBER 20, 2022
Implemented on. JUNE 01, 2023
Issued by. State Cryptography Administration
Table of Contents
Foreword... 3
1 Scope... 4
2 Normative references... 4
3 Terms and definitions... 5
4 Abbreviations... 6
5 Overall technical framework... 6
6 Algorithm identification and data type... 7
6.1 Algorithm identification... 7
6.2 Basic data types... 7
6.3 Constant definition... 8
6.4 Composite data type... 9
7 Interface function... 18
7.1 Overview... 18
7.2 Certificate storage area management interface... 20
7.3 UI interface... 28
7.4 SKF management interface... 30
7.5 Relationship with other interface specifications... 31
Appendix A (Normative) Error code definitions and descriptions... 33
Appendix B (Informative) Routine using this specification interface... 34
B.1 Register SKF and store certificates... 34
B.2 SKF function pointer... 37
B.3 Load and release SKF dynamic library... 38
B.4 Certificate usage... 39
References... 43
Foreword
This document was drafted in accordance with the provisions of GB/T 1.1-2020
"Directives for standardization - Part 1.Rules for the structure and drafting of
standardizing documents".
Please note that some contents of this document may involve patents. The issuing
agency of this document does not assume the responsibility for identifying patents.
This document was proposed by AND shall be under the jurisdiction of the Technical
Committee for Standardization of the Cryptography Industry.
Drafting organizations of this document. Tianjin Yingdaxin Technology Co., Ltd.,
Beijing Xin'an Century Technology Co., Ltd., Beijing Digital Certification Co., Ltd.,
Beijing Hitech Fangyuan Technology Co., Ltd., China Minsheng Bank Co., Ltd.,
Beijing Qihoo Technology Co., Ltd., Asia Information Technology (Shanghai) Co., Ltd.
The main drafters of this document. Zhang Qiupu, Cao Wei, Peng Zhu, Li Qiangqiang,
Zhang Yongqiang, Zhang Qingyong, Jiang Hongyu, Yu Gang, Liu Shuhong, Yuan Liou,
Huo Haitao, Zhang Zhilei, Zhai Xinyuan.
Browser digital certificate application interface specification
1 Scope
This document specifies the browser SM2 digital certificate application interface;
describes the definition of functions, data types and parameters of the digital certificate
application interface in browsers, that support the application of domestic cryptographic
algorithms.
This document is applicable to the development, application, testing of browser
products, the development of browser applications that support SM2 digital certificates,
the testing of secure browser password modules; it can also be used to guide the
integration and development of third-party applications calling SM2 digital certificates
in different terminal devices.
2 Normative references
The contents of the following documents constitute essential clauses of this document
through normative references in the text. Among them, for dated references, only the
version corresponding to that date applies to this document; for undated references, the
latest version (including all amendments) applies to this document.
GB/T 20518 Information security technology - Public key infrastructure - Digital
certificate format
GB/T 32918.2 Information security technology - Public key cryptographic
algorithm SM2 based on elliptic curves - Part 2.Digital signature algorithm
GB/T 33560 Information security technology - Cryptographic application identifier
criterion specification
3 Terms and definitions
The terms and definitions as defined in GM/Z 4001, as well as the following terms and
definitions, apply to this document.
3.1
SM2 cryptographic algorithm
Public key cryptographic algorithm defined by GB/T 32918.5.
3.2
Digital certificate
Also known as public key certificate, which is a data structure signed by a certificate
authority (CA) that contains public key owner information, public key, issuer
information, validity period, extended information. It can be divided into personal
certificate, agency certificate, device certificate by type; or it can be divided into
signature certificate and encryption certificate by purpose.
3.3
Digital signature
The result obtained by the signer using the private key to perform cryptographic
operations on the signed data. The result can only be verified by the signer's public
key and is used to confirm the integrity of the data to be signed, the authenticity of
the signer's identity, the non-repudiation of the signature behavior.
3.4
Certificate context
A data structure, which is used to store relevant certificate information, including
owner information, public key, issuer information, validity period, extended
information.
4 Abbreviations
The following abbreviations apply to this document.
AIA. Authority Information Access
API. Application Programming Interface
CRL. Certificate Revocation List
5 Overall technical framework
The overall technical framework of the browser digital certificate application interface
is shown in Figure 1.
6 Algorithm identification and data type
6.1 Algorithm identification
The identification definition of the algorithm used in this document is implemented in
accordance with GB/T 33560.
6.4.3 Certificate find attributes
6.4.3.1 Type definition
7 Interface function
7.1 Overview
The algorithm used in this document shall comply with GB/T 33560 in its identification
definition; the error code shall comply with the provisions of Appendix A.
The browser digital certificate application interface standard mainly consists of the
following parts.
7.2 Certificate storage area management interface
7.2.1 Create certificate context
Function prototype.
7.2.3 Add certificate to certificate storage
Function prototype
7.2.14 Find CRL in the certificate store
Function prototype.
7.2.15 Traverse CRL in the certificate store
Function prototype.
Function description. Traverse CRL in the certificate store. Call this function to obtain
the CRL linked list and eventually all CRLs.
7.5 Relationship with other interface specifications
For GM/T 0019, its main purpose is to provide general cryptographic services such as
certificate parsing, certificate authentication, confidentiality, integrity and non-
repudiation of information to the cryptographic service layer and application layer,
through a unified cryptographic service interface;
GM/T 0118-2022
GM
CRYPTOGRAPHIC INDUSTRY STANDARD
ICS 35.030
L 80
Browser digital certificate application interface specification
Issued on. NOVEMBER 20, 2022
Implemented on. JUNE 01, 2023
Issued by. State Cryptography Administration
Table of Contents
Foreword... 3
1 Scope... 4
2 Normative references... 4
3 Terms and definitions... 5
4 Abbreviations... 6
5 Overall technical framework... 6
6 Algorithm identification and data type... 7
6.1 Algorithm identification... 7
6.2 Basic data types... 7
6.3 Constant definition... 8
6.4 Composite data type... 9
7 Interface function... 18
7.1 Overview... 18
7.2 Certificate storage area management interface... 20
7.3 UI interface... 28
7.4 SKF management interface... 30
7.5 Relationship with other interface specifications... 31
Appendix A (Normative) Error code definitions and descriptions... 33
Appendix B (Informative) Routine using this specification interface... 34
B.1 Register SKF and store certificates... 34
B.2 SKF function pointer... 37
B.3 Load and release SKF dynamic library... 38
B.4 Certificate usage... 39
References... 43
Foreword
This document was drafted in accordance with the provisions of GB/T 1.1-2020
"Directives for standardization - Part 1.Rules for the structure and drafting of
standardizing documents".
Please note that some contents of this document may involve patents. The issuing
agency of this document does not assume the responsibility for identifying patents.
This document was proposed by AND shall be under the jurisdiction of the Technical
Committee for Standardization of the Cryptography Industry.
Drafting organizations of this document. Tianjin Yingdaxin Technology Co., Ltd.,
Beijing Xin'an Century Technology Co., Ltd., Beijing Digital Certification Co., Ltd.,
Beijing Hitech Fangyuan Technology Co., Ltd., China Minsheng Bank Co., Ltd.,
Beijing Qihoo Technology Co., Ltd., Asia Information Technology (Shanghai) Co., Ltd.
The main drafters of this document. Zhang Qiupu, Cao Wei, Peng Zhu, Li Qiangqiang,
Zhang Yongqiang, Zhang Qingyong, Jiang Hongyu, Yu Gang, Liu Shuhong, Yuan Liou,
Huo Haitao, Zhang Zhilei, Zhai Xinyuan.
Browser digital certificate application interface specification
1 Scope
This document specifies the browser SM2 digital certificate application interface;
describes the definition of functions, data types and parameters of the digital certificate
application interface in browsers, that support the application of domestic cryptographic
algorithms.
This document is applicable to the development, application, testing of browser
products, the development of browser applications that support SM2 digital certificates,
the testing of secure browser password modules; it can also be used to guide the
integration and development of third-party applications calling SM2 digital certificates
in different terminal devices.
2 Normative references
The contents of the following documents constitute essential clauses of this document
through normative references in the text. Among them, for dated references, only the
version corresponding to that date applies to this document; for undated references, the
latest version (including all amendments) applies to this document.
GB/T 20518 Information security technology - Public key infrastructure - Digital
certificate format
GB/T 32918.2 Information security technology - Public key cryptographic
algorithm SM2 based on elliptic curves - Part 2.Digital signature algorithm
GB/T 33560 Information security technology - Cryptographic application identifier
criterion specification
3 Terms and definitions
The terms and definitions as defined in GM/Z 4001, as well as the following terms and
definitions, apply to this document.
3.1
SM2 cryptographic algorithm
Public key cryptographic algorithm defined by GB/T 32918.5.
3.2
Digital certificate
Also known as public key certificate, which is a data structure signed by a certificate
authority (CA) that contains public key owner information, public key, issuer
information, validity period, extended information. It can be divided into personal
certificate, agency certificate, device certificate by type; or it can be divided into
signature certificate and encryption certificate by purpose.
3.3
Digital signature
The result obtained by the signer using the private key to perform cryptographic
operations on the signed data. The result can only be verified by the signer's public
key and is used to confirm the integrity of the data to be signed, the authenticity of
the signer's identity, the non-repudiation of the signature behavior.
3.4
Certificate context
A data structure, which is used to store relevant certificate information, including
owner information, public key, issuer information, validity period, extended
information.
4 Abbreviations
The following abbreviations apply to this document.
AIA. Authority Information Access
API. Application Programming Interface
CRL. Certificate Revocation List
5 Overall technical framework
The overall technical framework of the browser digital certificate application interface
is shown in Figure 1.
6 Algorithm identification and data type
6.1 Algorithm identification
The identification definition of the algorithm used in this document is implemented in
accordance with GB/T 33560.
6.4.3 Certificate find attributes
6.4.3.1 Type definition
7 Interface function
7.1 Overview
The algorithm used in this document shall comply with GB/T 33560 in its identification
definition; the error code shall comply with the provisions of Appendix A.
The browser digital certificate application interface standard mainly consists of the
following parts.
7.2 Certificate storage area management interface
7.2.1 Create certificate context
Function prototype.
7.2.3 Add certificate to certificate storage
Function prototype
7.2.14 Find CRL in the certificate store
Function prototype.
7.2.15 Traverse CRL in the certificate store
Function prototype.
Function description. Traverse CRL in the certificate store. Call this function to obtain
the CRL linked list and eventually all CRLs.
7.5 Relationship with other interface specifications
For GM/T 0019, its main purpose is to provide general cryptographic services such as
certificate parsing, certificate authentication, confidentiality, integrity and non-
repudiation of information to the cryptographic service layer and application layer,
through a unified cryptographic service interface;
......
Source: Above contents are excerpted from the full-copy PDF -- translated/reviewed by: www.ChineseStandard.net / Wayne Zheng et al.
Tips & Frequently Asked QuestionsQuestion 1: How long will the true-PDF of English version of GM/T 0118-2022 be delivered?Answer: The full copy PDF of English version of GM/T 0118-2022 can be downloaded in 9 seconds, and it will also be emailed to you in 9 seconds (double mechanisms to ensure the delivery reliably), with PDF-invoice. Question 2: Can I share the purchased PDF of GM/T 0118-2022_English with my colleagues?Answer: Yes. The purchased PDF of GM/T 0118-2022_English will be deemed to be sold to your employer/organization who actually paid for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. www.ChineseStandard.us -- GM/T 0118-2022 -- Click this link and select your country/currency to pay, the exact amount in your currency will be printed on the invoice. Full PDF will also be downloaded/emailed in 9 seconds. How to buy and download a true PDF of English version of GM/T 0118-2022?A step-by-step guide to download PDF of GM/T 0118-2022_EnglishStep 1: Visit website https://www.ChineseStandard.net (Pay in USD), or https://www.ChineseStandard.us (Pay in any currencies such as Euro, KRW, JPY, AUD).
Step 2: Search keyword "GM/T 0118-2022".
Step 3: Click "Add to Cart". If multiple PDFs are required, repeat steps 2 and 3 to add up to 12 PDFs to cart.
Step 4: Select payment option (Via payment agents Stripe or PayPal).
Step 5: Customize Tax Invoice -- Fill up your email etc.
Step 6: Click "Checkout".
Step 7: Make payment by credit card, PayPal, Google Pay etc. After the payment is completed and in 9 seconds, you will receive 2 emails attached with the purchased PDFs and PDF-invoice, respectively.
Step 8: Optional -- Go to download PDF.
Step 9: Optional -- Click Open/Download PDF to download PDFs and invoice.
See screenshots for above steps: Steps 1~3 Steps 4~6 Step 7 Step 8 Step 9
|