|
US$449.00 ยท In stock Delivery: <= 4 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 19771-2025: Cybersecurity technology - Public key infrastructure - Specification for minimum interoperability for PKI components Status: Valid GB/T 19771: Evolution and historical versions
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| GB/T 19771-2025 | English | 449 |
Add to Cart
|
4 days [Need to translate]
|
Cybersecurity technology - Public key infrastructure - Specification for minimum interoperability for PKI components
| Valid |
GB/T 19771-2025
|
| GB/T 19771-2005 | English | 1879 |
Add to Cart
|
10 days [Need to translate]
|
Information technology -- Security technology -- Public key infrastructure -- Minimum interoperability specification for PKI components
| Valid |
GB/T 19771-2005
|
PDF similar to GB/T 19771-2025
Basic data | Standard ID | GB/T 19771-2025 (GB/T19771-2025) | | Description (Translated English) | Cybersecurity technology - Public key infrastructure - Specification for minimum interoperability for PKI components | | Sector / Industry | National Standard (Recommended) | | Classification of Chinese Standard | L80 | | Classification of International Standard | 35.030 | | Word Count Estimation | 22,295 | | Date of Issue | 2025-08-01 | | Date of Implementation | 2026-02-01 | | Older Standard (superseded by this standard) | GB/T 19771-2005 | | Issuing agency(ies) | State Administration for Market Regulation, Standardization Administration of China |
GB/T 19771-2025: Cybersecurity technology - Public key infrastructure - Specification for minimum interoperability for PKI components ---This is an excerpt. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.), auto-downloaded/delivered in 9 seconds, can be purchased online: https://www.ChineseStandard.net/PDF.aspx/GBT19771-2025
ICS 35.030
CCSL80
National Standard of the People's Republic of China
Replaces GB/T 19771-2005
Cybersecurity Technology Public Key Infrastructure
Minimum Interoperability Specifications for PKI Components
Released on August 1, 2025
Implementation on February 1, 2026
State Administration for Market Regulation
The National Standardization Administration issued
Table of Contents
Preface III
1 Scope 1
2 Normative references 1
3 Terms and Definitions 1
4 Abbreviations 2
5 Minimum interoperability basic functional requirements 3
5.1 Overview 3
5.2 CA System 3
5.3 RA System 4
5.4 Certificate Holder 5
5.5 Certificate Verifier 5
5.6 Cryptographic Algorithms 6
6 Interoperability Transaction Data Format Requirements 6
6.1 General Requirements 6
6.2 Registration Request 6
6.3 Certificate Key Update 10
6.4 Revocation Request11
6.5 Accessing the Database 13
7 Test and evaluation methods 13
7.1 General test evaluation method 13
7.2 Minimum interoperability basic function test evaluation method 13
7.3 Interoperable Data Format Testing and Evaluation Methods 15
Preface
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1.Structure and drafting rules for standardization documents"
Drafting.
This document replaces GB/T 19771-2005 "Information Technology Security Technology - Minimum Interoperability Specifications for Public Key Infrastructure (PKI) Components"
Compared with GB/T 19771-2005, in addition to structural adjustments and editorial changes, the main technical changes are as follows.
a) The scope of the document has been changed, the standardization objects and the aspects covered have been redefined, and the applicable
Use boundaries (see Chapter 1, Chapter 1 of the.2005 edition);
b) Changed the basic functional requirements of the four components of PKI (see Chapter 5, Chapter 5 of the.2005 edition), added BYOD request
Functional requirements for certificates (see 5.3.2, 5.4.2), minimum steps for verifying certificates (see 5.2.2), and requirements for commercial
Support for cryptographic algorithms (see 5.6);
c) Changed the requirements for the interoperability transaction data format, including the data structure of digital certificates, certificate extensions, and the format of certificate revocation lists.
The format requirements are modified to comply with GB/T 20518-2018 (see 6.1, 6.2, 6.3 of the.2005 edition); the PKI transaction message
The requirements for the format and content have been modified to comply with GB/T 19714-2025 (see 6.1, 6.5 of the.2005 edition); the PKI transaction
Message content (see Chapter 6, 6.6 of the.2005 edition);
d) Added test and evaluation methods for CA system, RA system, certificate holder and certificate verifier functions, and added interoperability data.
According to the format test evaluation method (see Chapter 7);
e) Deleted Normative Appendix A, Normative Appendix B, Normative Appendix C, Normative Appendix D (see Appendix A, Appendix D of the.2005 edition)
B, Appendix C, Appendix D).
This document is proposed and coordinated by the National Cybersecurity Standardization Technical Committee (SAC/TC260).
This document was drafted by. University of Chinese Academy of Sciences, Beijing Digital Certification Co., Ltd., the Third Research Institute of the Ministry of Public Security, and the Software Research Institute of the Chinese Academy of Sciences.
Software Research Institute, Changchun Jida Zhengyuan Information Technology Co., Ltd., Anhui Xinke Gongchuang Information Security Evaluation Co., Ltd., Tsinghua University, Guangdong
Provincial Electronic Commerce Certification Co., Ltd., Shenzhen Electronic Commerce Security Certificate Management Co., Ltd., Asia Information Technology (Shanghai) Co., Ltd.,
China Science Information Security Common Technology National Engineering Research Center Co., Ltd., China Unicom Online Information Technology Co., Ltd., Beijing Zhongguancun Laboratory,
Qi'anxin Wangshen Information Technology (Beijing) Co., Ltd., Shaanxi Information Engineering Research Institute, National Information Technology Security Research Center,
Zhongfu Information Co., Ltd., Hangzhou Hikvision Digital Technology Co., Ltd., China Electronics Information Industry Group Co., Ltd. Sixth Research Institute
Research Institute, Changyang Technology (Beijing) Co., Ltd.
The main drafters of this document are. Feng Dengguo, Jing Jiwu, Liu Limin, Zheng Yajie, Chen Yan, Ding Zhaowei, Zhang Jianguo, Kou Chunjing, Zhang Liwu,
Jia Keting, Zhang Yan, Qin Lingyue, Li Qiang, Chen Shule, Zheng Huitao, Wei Yicai, Hu Jianxun, Liang Bin, Zhao Boxin, Meng Jiaying, An Jincheng, Zhao Xiaorong,
Liang Li, Chen Teng, Wang Bin, Wang Long, and Zhao Hua.
The previous versions of this document and the documents it replaces are as follows.
---First published in.2005 as GB/T 19771-2005;
---This is the first revision.
Cybersecurity Technology Public Key Infrastructure
Minimum Interoperability Specifications for PKI Components
1 Scope
This document specifies the minimum interoperability requirements and data format requirements for public key infrastructure components, and describes the test and evaluation
method.
This document applies to the design, development, testing and application of PKI in activities such as electronic signatures, electronic seals, and identity management.
2 Normative references
The contents of the following documents constitute the essential clauses of this document through normative references in this document.
For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to
This document.
GB/T 15852.2 Network security technology - Message authentication code - Part 2.Mechanism using specially designed hash functions
GB/T 19714-2025 Network Security Technology Public Key Infrastructure Certificate Management Protocol
GB/T 20518-2018 Information Security Technology Public Key Infrastructure Digital Certificate Format
GB/T 25056-2018 Information Security Technology Certificate Authentication System Password and Related Security Technical Specifications
GB/T 32905 Information Security Technology SM3 Cryptographic Hash Algorithm
GB/T 32907 Information Security Technology SM4 Block Cipher Algorithm
GB/T 32918.2 Information Security Technology SM2 Elliptic Curve Public Key Cryptography Algorithm Part 2.Digital Signature Algorithm
GB/T 37092 Information security technology - Security requirements for cryptographic modules
GB/T 43694 Network Security Technology Certificate Application Integrated Service Interface Specification
GM/Z0001-2013 Cryptographic Terminology
3 Terms and Definitions
The terms and definitions defined in GB/T 25056-2018, GM/Z0001-2013 and the following apply to this document.
3.1
An element of the PKI system that is used to carry out certificate-related activities.
3.2
digital certificatedigitalcertificate
The certificate authority confirms the user's public key and identity information and signs the data with the private key.
Note. Also called public key certificate.
3.3
signaturecertificate
A digital certificate used to authenticate the signing public key.
[Source. GM/Z0001-2013, 2.90]
Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 19771-2025_English be delivered?Answer: Upon your order, we will start to translate GB/T 19771-2025_English as soon as possible, and keep you informed of the progress. The lead time is typically 2 ~ 4 working days. The lengthier the document the longer the lead time. Question 2: Can I share the purchased PDF of GB/T 19771-2025_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 19771-2025_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to [email protected]. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. Question 5: Should I purchase the latest version GB/T 19771-2025?Answer: Yes. Unless special scenarios such as technical constraints or academic study, you should always prioritize to purchase the latest version GB/T 19771-2025 even if the enforcement date is in future. Complying with the latest version means that, by default, it also complies with all the earlier versions, technically.
|