GB/T 18237.1-2000 in English

《GB/T 18237.1-2000信息技术 开放系统互连 通用高层安全 第1部分:概述、模型和记法》由TC28（全国信息技术标准化技术委员会）归口，TC28SC6（全国信息技术标准化技术委员会数据通信分会）执行，主管部门为国家标准化管理委员会。
本系列标准定义了一组用于辅助在OSI应用中提供安全服务的通用设施。它们包括：a) 一组记法工具，这组工具支持抽象语法规范中的选择字段保护需求的规范，并支持安全交换和安全变换规范；b) 应用服务素（ASE）的服务定义、协议规范和PICS形式表，它们支持在OSI的应用层内提供安全服务；c) 安全传送语法的规范和PICS形式表，这些语法与支持应用层中的安全服务的表示层相关。

Scope

This series of standards defines a set of common facilities used to assist in providing security services in OSI applications. They include: a) a set of notational tools that support the specification of select field protection requirements in abstract syntax specifications, and support security exchange and security transformation specifications; b) service definition, protocol specification for Application Service Elements (ASE) and the PICS proforma, which support the provision of security services within the application layer of OSI; C) the specification of the security transfer syntax and the PICS proforma, which are associated with the presentation layer supporting security services in the application layer. 2 This standard defines the following: a) a general model of security exchange protocol functions and security transformations based on the concepts described in the OSI high-level security model (GB/T 17965); b) a set of notation tools that support abstraction The selection field in the syntax specification protects the specification of requirements and supports the specification of security exchanges and security transformations; C) a set of informative guidelines on the application aspects of the generic high-level security facilities covered by this series of standards. 3 This standard does not define the following: a) A complete set of high-level security facilities that may be required by other standards; b) A complete set of security facilities suitable for specific applications; C) Mechanisms used to support security services. 4 The security exchange model and supporting notation are intended to be used both as the basis for defining the security exchange service elements in the various parts of this series of standards, and for any other ASE that wishes to introduce security exchange into its own specification.