GB/T 27913-2011 Public key infrastructure for financial services—Practices and policy framework
GB/T 27913-2011 Public key infrastructure for financial services—Practices and policy framework
Basic Information
Scope
This standard specifies the management of PKI through certificate policies and certification practice statements, as well as the requirements framework for the use of public key certificates in the financial services industry. It also defines the control objectives and control procedures for risk management.
This standard applies to PKI systems in open, closed, and contractual environments, and further defines the operations of the business based on the control objectives of the information systems in the financial services industry. The purpose of this standard is to assist implementers in defining PKI operations that support multiple certificate policies, including the use of digital signatures, remote authentication, and digital encryption.
This standard makes it easier to implement PKI-controlled operations in contractual environments that meet the requirements of the financial services industry. Although this standard is primarily aimed at contractual environments, it does not exclude the application of the document to other environments. In the document, the term "certificate" refers to public key certificates. Attribute certificates are not within the scope of this standard.
The target of this standard is to address the diverse needs of multiple users, so each type of user will focus on different content.
Business managers and analysts are those who need to use PKI technology in their business operations, and they should pay attention to Chapters 1 to 6.
Technical designers and implementers are those who write their certificate policies and certification practice statements, and they should pay attention to Chapters 6 to 8, as well as Appendices A to F.
Operation managers and auditors are those who are responsible for the daily operation of PKI systems and conduct consistency checks according to this standard, and they should pay attention to Chapters 6 to 8.