GM/T 0070-2019 in English

Interpretation of the core content of the standard

This standard systematically constructs the technical framework for the application of electronic insurance policy passwords for the first time, and explicitly requires the use of national secret algorithms such as SM2, SM3, and SM4 to achieve security protection for the entire process of insurance application, underwriting, insurance underwriting, and claims settlement. Among them, the technical requirements for digital signature verification and electronic signature are the key to ensuring the legal effectiveness of electronic insurance policies.

Comparison Table of Cryptographic Technology Applications

Key Technology Implementation Points

Industry application recommendations

1. System transformation priority: Prioritize the SM2 signature verification function in the electronic policy issuance process
2. CA selection requirements: Select a CA organization with electronic certification service qualifications, and the certificate format must comply with GB/T20518
3. Compliance time node: Newly developed systems should directly comply with the standard, and existing systems must be transformed within 2 years

Technology evolution analysis

Compared with early industry practices, this standard has three major breakthroughs:
1) Algorithm localization: Fully adopt SM series algorithms to replace RSA/SHA1
2) Improvement of the chain of evidence: Requires the collection of multi-dimensional data such as signature handwriting and biometrics
3) Full process coverage: Password protection requirements are defined for each link from insurance application to expiration