GB/T 17903.3-2008 in English

《GB/T 17903.3-2008信息技术 安全技术 抗抵赖 第3部分: 采用非对称技术的机制》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
抗抵赖服务旨在生成、收集、维护、利用和验证有关已声称事件或动作的证据，以解决有关该事件或动作的已发生或未发生的争议。本部分使用非对称技术规定了用于提供一些特定的、与通信有关的抗抵赖服务机制。

Scope

Non-repudiation services are designed to generate, collect, maintain, utilize and verify evidence about a generated event or action in order to resolve disputes about that event or action having occurred or not occurred. This section specifies mechanisms for providing some specific communication-related non-repudiation services using asymmetric techniques. The non-repudiation mechanism can provide the following four non-repudiation services: a) origination non-repudiation; b) delivery non-repudiation; c) submission non-repudiation; d) transmission non-repudiation. The non-repudiation mechanism involves the exchange of non-repudiation tokens specified by various non-repudiation services. A non-repudiation token consists of a digital signature and additional data. Non-repudiation tokens can be stored as non-repudiation information for later use in case of disputes. Depending on the effective non-repudiation strategy for a specific application and the legal environment in which the application operates, the non-repudiation information may include the following additional information: a) Evidence including credible timestamps provided by timestamp agencies; b) Notaries provided evidence to assure that an action or event was performed or participated in by one or more entities. Non-repudiation can only be effective within a specific application and its legal environment, within the scope of a clearly defined security policy.