T/GHDQ 85-2021 The security technical requirements for the smart connected vehicle certification system
T/GHDQ 85-2021 The security technical requirements for the smart connected vehicle certification system
Basic Information
Scope
Scope: This document specifies the system architecture, system functions, system design, certificate format, certificate revocation list format, certificate operation process, and the technical requirements for cryptographic algorithms, cryptographic devices, and cryptographic service interfaces used in the construction of the certificate authentication system for smart connected vehicles. It also proposes security requirements for the operation and management of the certificate authentication system. This document is applicable to guiding the design, construction, operation, and management of the certificate authentication system for smart connected vehicles by third-party certification bodies, and standardizing the application of the certificate authentication system in the field of smart connected vehicles. Main technical content: This document partially references the National Standard of the People's Republic of China GB/T 25056-2018 "Information Security Technology - Cryptographic and Related Security Techniques for Certificate Authentication Systems". Compared with GB/T 25056-2018, in addition to structural adjustments and editorial changes, the main changes are as follows: a) Adding an introduction section; b) Adding concepts and terms related to smart connected vehicles; adding abbreviations related to smart connected vehicles; c) Optimizing the system logical structure in the original Chapter 5.1, with the logical diagram clearly showing the belonging areas, division of labor, and relationships among various subsystems, and adding master and slave LDAP subsystems; d) Optimizing the system functions in the original Chapter 5.2, further clarifying the responsibilities and function divisions of various subsystems, and adding administrator roles corresponding to different functions; e) Optimizing the management of existing certificate types and pre-setting some commonly used templates to facilitate the classified management of certificates applied by differe