GB/T 21082.4-2007 in English

《GB/T 21082.4-2007银行业务 密钥管理（零售） 第4部分: 使用公开密钥密码的密钥管理技术》由TC180（全国金融标准化技术委员会）归口，主管部门为中国人民银行。
本部分详细描述了在零售银行业务环境下对公开密钥密码系统密钥的使用和保护技术。它适用于任何在密钥生命周期内负责执行密钥保护程序的组织。

Scope

This part of GB/T 21082 describes in detail the use and protection techniques of public key cryptosystem keys in the retail banking environment. It applies to any organization responsible for enforcing key protection procedures throughout the key lifecycle. The technology described in this part of GB/T 21082 conforms to the principles described in ISO 11568-1. Note: The details of the protection required to protect public-key cryptosystems at each stage of the key life cycle are described in ISO 11568-1. Public key cryptosystems include asymmetric cryptography, digital signature systems and public key distribution systems. While this section primarily describes techniques for applying these systems to key management, some of these techniques are equally applicable to the secure management of data. The techniques described in this section focus on general public-key cryptosystems. Specific standards specific to a particular system are given in the appendix. Algorithms and the approval procedures for algorithms that are approved for use with the techniques described in this section shall be governed by the relevant agencies of the State Cryptography Administration. Appendix A outlines the standardization of public key certificate management. Appendix 8 describes attribute certificates, a technology that enhances the functionality of public key certificates. Appendix C presents the three public-key cryptosystems mentioned above.