T/HBCCIA 0001-2024 Technical Guidelines for the Application of Cryptography in Government Cloud Services

Scope

Main technical content: This document is based on the standard GB/T 39786 "Information Security Technology - Basic Requirements for Cryptographic Applications in Information Systems", and in accordance with the general cryptographic application requirements of government cloud services, it standardizes and establishes a technical guidance document for cryptographic applications in government cloud services. This document aims to guide the establishment of a standardized cryptographic protection system for government cloud services, support the compliant and rational use of cryptographic resources by cloud platforms and cloud tenant application systems, and meet the relevant requirements for the security assessment of commercial cryptographic applications. This document describes the cryptographic application requirements of cloud platforms and cloud tenants from the perspectives of physical and environmental security, network and communication security, device and computing security, and application and data security, and designs the cryptographic application architecture of government cloud services from the perspective of the business architecture of government cloud services, including the cryptographic applications of various components in the business architectures of both the cloud platform and the cloud tenant.

Development Information

Related Standards