GM/T 0065-2019 PDF English
US$135.00 · In stock · Download in 9 secondsGM/T 0065-2019: Specification for Capability Construction of Production and Guarantee for Commercial-Cryptographic Products Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See step-by-step procedureStatus: Valid
Standard ID | Contents [version] | USD | STEP2 | [PDF] delivery | Name of Chinese Standard | Status |
GM/T 0065-2019 | English | 135 |
Add to Cart
|
0-9 seconds. Auto-delivery
|
Specification for Capability Construction of Production and Guarantee for Commercial-Cryptographic Products
| Valid |
Excerpted PDFs (Download full copy in 9 seconds upon purchase)PDF Preview: GM/T 0065-2019
GM/T 0065-2019: Specification for Capability Construction of Production and Guarantee for Commercial-Cryptographic Products ---This is an excerpt. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.), auto-downloaded/delivered in 9 seconds, can be purchased online: https://www.ChineseStandard.net/PDF.aspx/GMT0065-2019
CRYPTOGRAPHIC INDUSTRY STANDARD
ICS 35.040
L 80
Specification for Capability Construction of
Production and Guarantee for Commercial-
Cryptographic Products
Issued on. JULY 12, 2019
Implemented on. JULY 12, 2019
Issued by. State Cryptography Administration
Table of Contents
Foreword... 4
Introduction... 5
1 Scope... 6
2 Normative References... 6
3 Terms and Definitions... 6
4 Evaluation Elements... 7
5 Requirements for Basic Items... 9
6 Requirements for Declaration Items... 9
7 Requirements for Evaluation Item... 10
Foreword
This Standard was drafted as per the rules specified in GB/T 1.1-2009.
This Standard was proposed by and under the jurisdiction of Cryptography
Standardization Technical Committee.
Drafting organizations of this Standard. CEC Huada Electronic Design Co., Ltd.; Koal
Software Co., Ltd.; Xingtang Communication Technology Co., Ltd.; Commercial
Cryptography Testing Center of State Cryptography Administration; Beijing Sansec
Technology Development Company Ltd.; Tendyron Corporation; Chengdu Westone
Information Industry Inc; Beijing Cryptography Administration; Shanghai Cryptography
Administration; and Guangdong Cryptography Administration.
Chief drafting staffs of this Standard. Zhou Jiansuo, Ye Feng, Zhao Shan, Luo Peng,
Feng Yuhui, Han Xiaojun, Yang Yaohua, Gao Zhiquan, Xiong Yun, Li Lixu, Ma Fei,
Zheng Qiang, Li Ming, Qu Zhihua, and Yang Yang.
1 Scope
This Standard specifies the evaluation elements and evaluation requirements for the
production and guarantee capabilities of commercial cryptographic products.
This Standard is applicable to the capability building and verification of the production
organizations of the commercial cryptographic products for the production capacity,
quality assurance ability, security guarantee ability and service guarantee ability.
2 Normative References
The following documents are essential to the application of this document. For the
dated documents, only the versions with the dates indicated are applicable to this
document; for the undated documents, only the latest version (including all the
amendments) are applicable to this document.
GM/Z 4001 Cryptography Terminology
Regulation on the Administration of Commercial Cipher Codes
3 Terms and Definitions
For the purpose of this document, the terms and definitions given in GM/Z 4001 and
the following apply.
3.1 Main technical personnel
Personnel engaged in the design, implementation, inspection or testing and technical
support of commercial cryptographic products.
3.2 Crucial personnel
Including legal representatives, actual controllers, senior management personnel, and
technical leaders.
3.4 Core cryptographic technology
The technology used in commercial cryptographic products to implement the core
functions of cipher.
4 Evaluation Elements
4.1 Basic items
Basic items are the basic conditions that the production organizations of the
commercial crypto products shall satisfy, including items such as legal person
qualifications, main technical personnel, R&D products, and industry management
compliance.
4.3 Evaluation items
The evaluation item is a specific quantification indicator for the evaluation of
commercial cryptographic products and production guarantee capabilities. The
production organization refers to the evaluation items to improve its own production
and guarantee capabilities of commercial cryptographic products.
5 Requirements for Basic Items
5.1 Legal person qualification
It shall be an independent legal person registered in China.
5.2 Main technical personnel
They Shall be no less than 15 persons.
5.4 Industry management compliance
It shall abide by relevant laws and regulations on commercial cryptographic product
management, voluntarily abide by relevant standards and regulations on commercial
cryptographic product management; and promise to provide product source code for
review; promise to accept the on-site review of R&D and production; and make daily
records of product sales.
6 Requirements for Declaration Items
6.1 Crucial personnel information
Information on the nationality (or green card), education background and employment
experience of crucial personnel shall be provided. If crucial personnel have a criminal
record, it shall be truthfully declared.
6.3 Data management
It shall declare the locations for the R&D, production and guarantee data center of the
commercial cryptographic products;
7 Requirements for Evaluation Item
7.1 Production capacity
7.1.1 Technical force
7.1.1.4 Technical innovation
a) It has the intellectual property rights such as invention patents, utility model
patents, software copyrights and / or integrated circuit layout registration, etc.;
b) Cryptographic products shall fill gaps in domestic and foreign industry
applications; and the products are competitive and innovative in terms of cost,
function, performance, reliability, and market applications.
7.1.1.5 R&D tools and equipment
It shall have software and hardware tools and equipment that meet the needs of R&D
of cryptographic product.
7.1.1.6 Test conditions
It shall have perfect functions, performance, stability, reliability, and environmental
adaptability, and the like test conditions of cryptographic product.
7.1.2 Production management
7.1.2.4 Supply management
7.1.3 Production conditions
7.1.3.1 Production site
It shall have the right to use the land and houses of production sites; and the production
facilities and storage sites shall meet the needs that are compatible with the production
capacity of the product.
7.1.3.2 Production equipment
It shall have production equipment and testing equipment that meet production
requirements.
7,1.3.3 Production sub-contracting
Proof that the production sub-contracting organization meets the requirements of
7.2 Quality assurance capability
7.2.1 System guarantee
It shall ensure full life cycle quality of commercial cryptographic products; establish
quality management systems and standard requirements; and clarify that the quality
objectives should be defined and implemented by senior management.
7.2.2 Quality management in development process
7.2.2.1 Development and test system
It shall establish a complete development and test system to standardize chip
development, software and hardware module development and system integration;
and standardize unit testing, integration testing, system testing, and acceptance
testing, etc.
7.4.2 Emergency response capability
a) It shall establish an emergency response mechanism and perform coordinated
planning and coordination management;
b) It shall have the ability to solve unexpected problems; and identify and analyze
the cause of the problem to restore the agreed service requirements as soon as
possible and minimize the impact on the business;
c) The progress and latest status shall be reported to the user in a timely manner
during the resolution process.
7.4.3 Service response mode
7.4.3.1 Service network
7.4.3.2 Acceptance and feedback
a) It shall establish official acceptance channels such as call centers, networks, and
local customer service departments; and ensure that customers can provide
feedback and problems;
GM/T 0065-2019
CRYPTOGRAPHIC INDUSTRY STANDARD
ICS 35.040
L 80
Specification for Capability Construction of
Production and Guarantee for Commercial-
Cryptographic Products
Issued on. JULY 12, 2019
Implemented on. JULY 12, 2019
Issued by. State Cryptography Administration
Table of Contents
Foreword... 4
Introduction... 5
1 Scope... 6
2 Normative References... 6
3 Terms and Definitions... 6
4 Evaluation Elements... 7
5 Requirements for Basic Items... 9
6 Requirements for Declaration Items... 9
7 Requirements for Evaluation Item... 10
Foreword
This Standard was drafted as per the rules specified in GB/T 1.1-2009.
This Standard was proposed by and under the jurisdiction of Cryptography
Standardization Technical Committee.
Drafting organizations of this Standard. CEC Huada Electronic Design Co., Ltd.; Koal
Software Co., Ltd.; Xingtang Communication Technology Co., Ltd.; Commercial
Cryptography Testing Center of State Cryptography Administration; Beijing Sansec
Technology Development Company Ltd.; Tendyron Corporation; Chengdu Westone
Information Industry Inc; Beijing Cryptography Administration; Shanghai Cryptography
Administration; and Guangdong Cryptography Administration.
Chief drafting staffs of this Standard. Zhou Jiansuo, Ye Feng, Zhao Shan, Luo Peng,
Feng Yuhui, Han Xiaojun, Yang Yaohua, Gao Zhiquan, Xiong Yun, Li Lixu, Ma Fei,
Zheng Qiang, Li Ming, Qu Zhihua, and Yang Yang.
1 Scope
This Standard specifies the evaluation elements and evaluation requirements for the
production and guarantee capabilities of commercial cryptographic products.
This Standard is applicable to the capability building and verification of the production
organizations of the commercial cryptographic products for the production capacity,
quality assurance ability, security guarantee ability and service guarantee ability.
2 Normative References
The following documents are essential to the application of this document. For the
dated documents, only the versions with the dates indicated are applicable to this
document; for the undated documents, only the latest version (including all the
amendments) are applicable to this document.
GM/Z 4001 Cryptography Terminology
Regulation on the Administration of Commercial Cipher Codes
3 Terms and Definitions
For the purpose of this document, the terms and definitions given in GM/Z 4001 and
the following apply.
3.1 Main technical personnel
Personnel engaged in the design, implementation, inspection or testing and technical
support of commercial cryptographic products.
3.2 Crucial personnel
Including legal representatives, actual controllers, senior management personnel, and
technical leaders.
3.4 Core cryptographic technology
The technology used in commercial cryptographic products to implement the core
functions of cipher.
4 Evaluation Elements
4.1 Basic items
Basic items are the basic conditions that the production organizations of the
commercial crypto products shall satisfy, including items such as legal person
qualifications, main technical personnel, R&D products, and industry management
compliance.
4.3 Evaluation items
The evaluation item is a specific quantification indicator for the evaluation of
commercial cryptographic products and production guarantee capabilities. The
production organization refers to the evaluation items to improve its own production
and guarantee capabilities of commercial cryptographic products.
5 Requirements for Basic Items
5.1 Legal person qualification
It shall be an independent legal person registered in China.
5.2 Main technical personnel
They Shall be no less than 15 persons.
5.4 Industry management compliance
It shall abide by relevant laws and regulations on commercial cryptographic product
management, voluntarily abide by relevant standards and regulations on commercial
cryptographic product management; and promise to provide product source code for
review; promise to accept the on-site review of R&D and production; and make daily
records of product sales.
6 Requirements for Declaration Items
6.1 Crucial personnel information
Information on the nationality (or green card), education background and employment
experience of crucial personnel shall be provided. If crucial personnel have a criminal
record, it shall be truthfully declared.
6.3 Data management
It shall declare the locations for the R&D, production and guarantee data center of the
commercial cryptographic products;
7 Requirements for Evaluation Item
7.1 Production capacity
7.1.1 Technical force
7.1.1.4 Technical innovation
a) It has the intellectual property rights such as invention patents, utility model
patents, software copyrights and / or integrated circuit layout registration, etc.;
b) Cryptographic products shall fill gaps in domestic and foreign industry
applications; and the products are competitive and innovative in terms of cost,
function, performance, reliability, and market applications.
7.1.1.5 R&D tools and equipment
It shall have software and hardware tools and equipment that meet the needs of R&D
of cryptographic product.
7.1.1.6 Test conditions
It shall have perfect functions, performance, stability, reliability, and environmental
adaptability, and the like test conditions of cryptographic product.
7.1.2 Production management
7.1.2.4 Supply management
7.1.3 Production conditions
7.1.3.1 Production site
It shall have the right to use the land and houses of production sites; and the production
facilities and storage sites shall meet the needs that are compatible with the production
capacity of the product.
7.1.3.2 Production equipment
It shall have production equipment and testing equipment that meet production
requirements.
7,1.3.3 Production sub-contracting
Proof that the production sub-contracting organization meets the requirements of
7.2 Quality assurance capability
7.2.1 System guarantee
It shall ensure full life cycle quality of commercial cryptographic products; establish
quality management systems and standard requirements; and clarify that the quality
objectives should be defined and implemented by senior management.
7.2.2 Quality management in development process
7.2.2.1 Development and test system
It shall establish a complete development and test system to standardize chip
development, software and hardware module development and system integration;
and standardize unit testing, integration testing, system testing, and acceptance
testing, etc.
7.4.2 Emergency response capability
a) It shall establish an emergency response mechanism and perform coordinated
planning and coordination management;
b) It shall have the ability to solve unexpected problems; and identify and analyze
the cause of the problem to restore the agreed service requirements as soon as
possible and minimize the impact on the business;
c) The progress and latest status shall be reported to the user in a timely manner
during the resolution process.
7.4.3 Service response mode
7.4.3.1 Service network
7.4.3.2 Acceptance and feedback
a) It shall establish official acceptance channels such as call centers, networks, and
local customer service departments; and ensure that customers can provide
feedback and problems;
...... Source: Above contents are excerpted from the full-copy PDF -- translated/reviewed by: www.ChineseStandard.net / Wayne Zheng et al.
Tips & Frequently Asked QuestionsQuestion 1: How long will the true-PDF of English version of GM/T 0065-2019 be delivered?Answer: The full copy PDF of English version of GM/T 0065-2019 can be downloaded in 9 seconds, and it will also be emailed to you in 9 seconds (double mechanisms to ensure the delivery reliably), with PDF-invoice. Question 2: Can I share the purchased PDF of GM/T 0065-2019_English with my colleagues?Answer: Yes. The purchased PDF of GM/T 0065-2019_English will be deemed to be sold to your employer/organization who actually paid for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. www.ChineseStandard.us -- GM/T 0065-2019 -- Click this link and select your country/currency to pay, the exact amount in your currency will be printed on the invoice. Full PDF will also be downloaded/emailed in 9 seconds.
How to buy and download a true PDF of English version of GM/T 0065-2019?A step-by-step guide to download PDF of GM/T 0065-2019_EnglishStep 1: Visit website https://www.ChineseStandard.net (Pay in USD), or https://www.ChineseStandard.us (Pay in any currencies such as Euro, KRW, JPY, AUD). Step 2: Search keyword "GM/T 0065-2019". Step 3: Click "Add to Cart". If multiple PDFs are required, repeat steps 2 and 3 to add up to 12 PDFs to cart. Step 4: Select payment option (Via payment agents Stripe or PayPal). Step 5: Customize Tax Invoice -- Fill up your email etc. Step 6: Click "Checkout". Step 7: Make payment by credit card, PayPal, Google Pay etc. After the payment is completed and in 9 seconds, you will receive 2 emails attached with the purchased PDFs and PDF-invoice, respectively. Step 8: Optional -- Go to download PDF. Step 9: Optional -- Click Open/Download PDF to download PDFs and invoice. See screenshots for above steps: Steps 1~3 Steps 4~6 Step 7 Step 8 Step 9
|