GB/T 38646-2020 English PDFUS$339.00 · In stock
Delivery: <= 4 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 38646-2020: Information security technology - Technical requirements of mobile signature service Status: Valid
Basic dataStandard ID: GB/T 38646-2020 (GB/T38646-2020)Description (Translated English): Information security technology - Technical requirements of mobile signature service Sector / Industry: National Standard (Recommended) Classification of Chinese Standard: L80 Classification of International Standard: 35.040 Word Count Estimation: 18,179 Date of Issue: 2020-04-28 Date of Implementation: 2020-11-01 Quoted Standard: GB/T 19713; GB/T 20518; GB/T 25064-2010; GB/T 25065-2010; GM/T 0028-2014 Issuing agency(ies): State Administration for Market Regulation, China National Standardization Administration Summary: This standard specifies the technical requirements for realizing the mobile signature service, including the basic framework of the mobile signature service, the basic service process, the main entity functions participating in the mobile signature service, the interface function and the security requirements. This standard applies to equipment development and platform development of mobile signature services. GB/T 38646-2020: Information security technology - Technical requirements of mobile signature service---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order. Information security technology--Technical requirements of mobile signature service ICS 35.040 L80 National Standards of People's Republic of China Technical requirements for information security technology mobile signature service 2020-04-28 release 2020-11-01 implementation State Administration of Market Supervision and Administration Issued by the National Standardization Management Committee ContentsForeword Ⅲ 1 Scope 1 2 Normative references 1 3 Terms and definitions 1 4 Acronyms 2 5 Overview 2 5.1 Basic characteristics of mobile signature 2 5.2 Related entities of mobile signature service 2 6 Process of mobile signature service 3 6.1 Basic flow of mobile signature 3 6.2 Certificate management related processes 4 7 Entity functions of mobile signature service 9 7.1 MSSP 9 7.2 MSD 9 7.3 User 9 7.4 CA 9 7.5 AP 10 8 Interface function of mobile signature service 10 8.1 Interface between MSSP and AP 10 8.2 Interface between MSSP and MSD 10 8.3 Interface between MSSP and CA 11 9 Security requirements for mobile signature services 11 9.1 Overview 11 9.2 Physical security 11 9.3 Mobile signature service process security 12 Reference 13ForewordThis standard was drafted in accordance with the rules given in GB/T 1.1-2009. Please note that some content of this document may involve patents. The issuer of this document does not assume responsibility for identifying these patents. This standard is proposed and managed by the National Information Security Standardization Technical Committee (SAC/TC260). This standard was drafted by. China Mobile Communications Group Co., Ltd., China Mobile (Hangzhou) Information Technology Co., Ltd., China Information and Communications Research Institute, Beijing Digital Certification Co., Ltd., China Telecom Corporation Limited, Ministry of Industry and Information Technology Electronics Industry Standardization Institute. The main drafters of this standard. Yu Rongrong, Zhang Bin, Yang Zhiqiang, Zhang Jinwei, Qiu Qin, Fan Shan, Yang Chao, Lu Xiaoming, Liu Hailong, Luo Hong, Dong Jingyu, Jia Qian, Lu Qing, Huang Weixiang, Lin Xueyan, Yang Zhengjun, Chong Jing, Xu Dongyang, Yu Le, Jiang Zhouliang, An Baoyu, Ma Chenyun, Huo Weijing, Cai Zhun. Technical requirements for information security technology mobile signature service1 ScopeThis standard specifies the technical requirements for implementing mobile signature services, including the basic framework of mobile signature services, basic service processes, and participation The main entity functions, interface functions and security requirements of the mobile signature service. This standard applies to device development and platform development of mobile signature services.2 Normative referencesThe following documents are essential for the application of this document. For dated references, only the dated version applies to this article Pieces. For the cited documents without date, the latest version (including all amendments) applies to this document. GB/T 19713 Information Technology Security Technology Public Key Infrastructure Online Certificate Status Protocol GB/T 20518 Information Security Technology Public Key Infrastructure Digital Certificate Format GB/T 25064-2010 Information Security Technology Public Key Infrastructure Electronic Signature Format Specification GB/T 25065-2010 Information security technology public key infrastructure signature generation application security requirements GM/T 0028-2014 Password module security requirements3 Terms and definitionsThe terms and definitions defined in GB/T 25064-2010 and GB/T 25065-2010 and the following apply to this document. 3.1 Application provider An entity that provides users with business application services. 3.2 Mobile device An electronic device that can be carried around and can be connected to a mobile communication network at any time. Note. Such as mobile phones, tablets, notebooks or other special equipment. 3.3 Mobile signature A general method for electronically signing data using a dedicated security module in a mobile device. 3.4 Mobile signature service Use dedicated security modules on mobile devices to implement electronic signature services. 3.5 Mobile signature service platform mobilesignatureserviceplatform Functional entity that provides mobile signature services to application providers and users. 3.6 Mobile signature device A dedicated security module in the mobile device that can process electronic signatures. ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 38646-2020_English be delivered?Answer: Upon your order, we will start to translate GB/T 38646-2020_English as soon as possible, and keep you informed of the progress. The lead time is typically 2 ~ 4 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of GB/T 38646-2020_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 38646-2020_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. |