| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| LD/T 30.3-2009 | English | RFQ |
ASK
|
5 days [Need to translate]
|
Human resources and social security electronic authentication system. Part 3: Format specifications of digital certificate and CRL
| Obsolete |
LD/T 30.3-2009
|
PDF similar to LDT30.3-2009
Basic data | Standard ID | LD/T 30.3-2009 (LD/T30.3-2009) | | Description (Translated English) | Human resources and social security electronic authentication system. Part 3: Format specifications of digital certificate and CRL | | Sector / Industry | Chinese Industry Standard (Recommended) | | Classification of Chinese Standard | L80 | | Classification of International Standard | 35.040 | | Word Count Estimation | 29,257 | | Date of Issue | 2009-12-14 | | Date of Implementation | 2010-03-01 | | Quoted Standard | Information technology - Security techniques password terminology (State Encryption Administration); GB/T 20518-2006; GB/T 16262.4-2006; GB/T 16262.3-2006; GB/T 16262.2-2006; GB/T 16262.1-2006 | | Regulation (derived from) | ?Industry Standard Filing Announcement 2010 No.2 (Total No.122) | | Issuing agency(ies) | Ministry of Human Resources and Social Security | | Summary | This standard specifies the digital certificates and certificate revocation lists basic structure. Describes the contents of each data item in a digital certificate. Developed a certificate and certificate revocation list format template. This section applies to the guidance of human resources and social security system in accordance with uniform certificates and certificate revocation lists and issuing custom format to ensure mutual recognition and mutual trust between the various human resources and social security applications. | LDT30.3-2009: Human resources and social security electronic authentication system. Part 3: Format specifications of digital certificate and CRL
---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Human resources and social security electronic authentication system.Part 3. Format specifications of digital certificate and CRL
ICS 35.040
L80
Record number. 27110-2010
People's Republic of China labor and labor safety industry standards
Human Resource and Social Security Electronic Certification System
Part 3. Certificate and certificate revocation list format specification
2009-12-14 release
2010-03-01 Implementation
Issued by the Ministry of Human Resources and Social Security of the People's Republic of China
Directory
Preface III
1 Scope 1
2 normative reference document 1
3 Terms and definitions 1
4 acronym 2
5 certificate classification 2
6 Digital Certificate Generic Format 3
6.1 Basic structure 3
6.2 Basic Certificate Domain 3
6.3 Signature algorithm domain 7
6.4 Signature value field 7
6.5 naming conventions 7
7 Digital Certificate Format Template 7
7.1 CA certificate format template 7
7.2 Secondary CA Certificate Format Template 8
7.3 Institution Certificate Format Template 10
7.4 Staff Certificate Form Template 11
7.5 Device Certificate Format Template 12
7.6 Unit Certificate Format Template 14
7.7 Personal Certificate Format Template 16
8 CRL format 17
8.1 CRL basic structure 17
8.2 CRL format template
Appendix A (informative appendices) Subject naming conventions 20
Appendix B (informative) Digital certificate coding example 22
Appendix C (informative) Algorithm Example 25
Foreword
In order to meet the human resources and social security information development requirements, to meet the human resources and social security network trust system construction and management
The Ministry of Human Resources and Social Security organized and developed LD/T 30-2009 "Human Resource and Social Security Electronic Certification System".
The network trust system includes the electronic authentication system, the authorization management system and the responsibility identification system. This standard mainly describes the human resources and society
Will guarantee the electronic certification system related content, including the following five parts.
- Part 1. Framework specification;
- Part 2. Technical specifications for electronic certification systems;
- Part 3. Certificate and certificate revocation list format specification;
- Part 4. Certificate application management specification;
Part 5. Certificate carrier specification.
This part is Part 3 of LD/T 30-2009.
This section describes the basic structure and phase of the digital certificate and certificate revocation list issued by the Human Resources and Social Security Electronic Certification System
Off requirements.
This part of the key reference to the GB/T 20518-2006 "information security technology public key infrastructure digital certificate format", and here
Based on the expansion of the certificate classification, various types of certificate templates, certificate DN naming norms, CRL format specifications and other related content, given the digital card
Book code format example, from the perspective of meeting the needs of human resources social security business, the industry issued by the digital certificate and certificate revocation
List the type and format of the specification and requirements.
This part of the People's Republic of China Human Resources and Social Security Information Center and put forward.
This part of the main drafting unit. the People's Republic of China Human Resources and Social Security Information Center, Shanghai Human Resources and Social Security
Bureau information center, Beijing digital certificate certification center, Wei Hao Information Technology Co., Ltd.
The main drafters of this part are. Zhao Ximing, Dai Ruimin, Jia Huabin, Zhai Yanyi, Li Lihong, Wu Zhibin, Huang Yong, Lu Lijuan, Xu Huaguang,
Zhang Jiahui, Jin Zhaohui, Lu Chunsheng, Li Yongliang, Song Jingyan, Du Shouguo, Ouyang Jin, Lin Xueyan, Li Shusheng, Gu Qing, Song Cheng.
This part of the relevant information related to the password, according to the relevant state regulations.
Human Resource and Social Security Electronic Certification System
Part 3. Certificate and certificate revocation list format specification
1 Scope
This part of LD/T 30 classifies human resources and social security digital certificates, defines digital certificates and certificate revocation lists
The basic structure of the digital certificate describes the contents of each data item, developed a certificate and certificate revocation list format template.
This section applies to directing human resources and social security systems to be customized and signed in accordance with a unified certificate and certificate revocation list format.
To ensure mutual recognition of human resources and social security between the application systems.
2 normative reference documents
The following documents are indispensable for the application of this document. For dated references, only the dated edition applies to this article
Pieces. For undated references, the latest edition (including all modifications) applies to this document.
GB/T 16262.1-2006 Information technology Abstract syntax notation (ASN.1) Part 1. Basic notation specification (ISO /
IEC 8824-1..2002, IDT)
Information technology - Abstract syntax - Notation 1 (ASN.1) - Part 2. Object information specification (ISO /
IEC 8824-2..2002, IDT)
Information technology - Abstract syntax - Notation 1 (ASN.1) - Part 3. Constraint specification (ISO /IEC 16262.3-2006)
8824-3..2002, IDT)
Information technology - Abstract Syntax Notation 1 (ASN.1) - Part 4. ASN - GB/T 16262.4-2006. 1 specification of the parameterization
(ISO /IEC 8824-4..2002, IDT)
Information security technology - Public key infrastructure - Digital certificate format GB/T
Information Technology Security Technology Password Terminology (National Password Authority)
3 terms and definitions
The following terms and definitions apply to this section.
3.1
CA
Responsible for the creation and distribution of certificates, trusted by the authority of the user. The user can select the institution to create a key for it.
3.2
The public key owner information, the public key, the issuer information, the validity period, and the one that are digitally signed by the authoritative certification authority
Some of the extended information of the digital file.
3.3
By a certificate authority to another certificate certification body issued by the digital certificate, a certificate certification body can also sign for their own
Made a digital certificate, which is a self-signed digital certificate.
|