T/ZGTXXH 095-2024 Zero Trust Identity Security Specification

Scope

Main technical content: The main content of this group standard includes the preface, scope, normative reference documents, terms, definitions and abbreviations, overall framework, identity authentication, identity management, dynamic risk assessment, and dynamic access control. Chapter 4 is the overall framework, which mainly includes concepts and the overall framework of IAM. Chapter 5 is identity authentication, which mainly includes authentication methods, authentication scope, authentication strategies, and single sign-on. Chapter 6 is identity management, which mainly includes identity data, security management, identity and credential management, identity policy management, resource management, authorization management, and compliance and audit. Chapter 7 is dynamic risk assessment, which mainly includes risk data collection and risk analysis models. Chapter 8 is dynamic access control, which mainly includes an overview, access policy management, an access control policy engine, and policy execution points. This group standard specifies zero-trust identity security technical specifications, and the requirements for zero-trust identity security can be referenced for implementation. The normative documents listed in this technical requirement are already published standard normative documents. During the preparation of this technical requirement, relevant guidance opinions, technical requirements, and related regulations of major operators and Internet companies were also referenced.

Development Information

Related Standards