T/CBA 211-2021 Active Group standards

T/CBA 211-2021 Bank Letter Confirmation Service Platform Encryption System

Publish Date: 2021-11-06 Implement Date: 2021-11-06 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/CBA 211-2021

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Finance, insurance

ICS Name: Terminology (principles and coordination and cooperation)

Publish Date: 2021-11-06

Implement Date: 2021-11-06

Scope

Main technical content: 5.1 Platform Key Establishment The platform key pair is established by the bank's letter of attestation service platform and is only applied to the application system access method. The establishment process is as follows: a) A random number is generated using a reliable method to ensure that the generation rule of the random number cannot be known by other parties. b) The platform key pair is generated in accordance with the requirements of GB/T 35276-2017 section 9.1. c) The private key of the platform key pair is stored in a secure medium. d) The public key of the platform key pair is sent to the accessing party of the bank's letter of attestation service platform via email or other accessible methods. 5.2 Accessing Party Key Pair All accessing party key pairs of the bank's letter of attestation service platform are established in accordance with the following requirements: a) According to the actual business scenario, the accessing party can be divided into a sender or a receiver. b) The key pair can be generated using the SDK development toolkit provided by the letter of attestation service platform, or by independently developing an algorithm that meets the requirements of GB/T 32918. For applications that independently develop an algorithm meeting the requirements of GB/T 32918, it is necessary to ensure that the generation rule of the random number cannot be known by other parties. c) The accessing party key pair is generated in accordance with the requirements of GB/T 35276-2017 section 9.1. d) The private key of the accessing party key pair is not allowed to be stored in plaintext on the computer's hard drive. It should be stored in a secure medium. e) When conditions permit, the private key of the accessing party key pair should be decomposed into two or more separate key components, which are stored in separate secure media, and control measures such as separate storage and access management should be im