T/SDBDA 15-2021 Active Group standards

T/SDBDA 15-2021 Safety Management Specification for Agricultural Technology Promotion Information Application Demonstration Platform

Publish Date: 2021-04-09 Implement Date: 2021-04-09 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/SDBDA 15-2021

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Economic and cultural

ICS Name: Integrated Information Technology (IT)

Publish Date: 2021-04-09

Implement Date: 2021-04-09

Scope

Main Technical Content: 4 Abbreviations The following abbreviations apply to this document. ID (Identifer) ISS (Internet Information Services) 5 Security Management Requirements Data transmission security management: Data encryption is used during data transmission, and IIS's built-in security encryption measures can also be employed. Application system security management 5.2.1 Authentication When logging into the application system, the user's ID should be authenticated. Support for a single authentication method or a combination of multiple authentication methods is allowed. Authentication methods include but are not limited to: a) Static passwords; b) Dynamic passwords; c) Digital certificates. 5.2.2 System Authorization Platform system authorization should be handled by administrators. Authorization management includes three elements: authorization subject, authorization object, and authorization relationship. The application system should set authorization policies. a) Authorization subject: 1) A user's ID, a group of user IDs, or a combination of the two; 2) Temporary user IDs created by administrators for temporary authorization. b) Authorization object: - Platform system; - Platform system groups; - Access permissions; - A combination of the three. c) Authorization relationship: - Support for any authorization subject to authorize any authorization object. - Support for long-term authorizations with fixed validity periods and one-time temporary authorizations. d) Authorization policies: - Time-based policies (including time periods and intervals, down to seconds); - IP-based policies (including single IP addresses, IP address ranges, and multiple IP address ranges); - Command-based policies (including instructions, command parameters, and execution frequency). e) Temporary or critical operations on the application system require administrator approval before maintenance and operation. 5.2.3 Info