JR/T 0089.2-2012 in English
VALIDChina Financial Mobile Payment-Secure Element-Part 2:Management Specification for Multiple Applications
- Issued on:2012-12-12
- Implemented on:2012-12-12
- File Format:PDF
- Delivery:Via email within 1~3 business days
$233.00
| Standard No: | JR/T 0089.2-2012 |
| Document status: | VALID |
| Title in English: | China Financial Mobile Payment-Secure Element-Part 2:Management Specification for Multiple Applications |
| Title in Chinese: | 中国金融移动支付 安全单元 第2部分：多应用管理规范 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 1~3 business days |
| Issued on: | 2012-12-12 |
| Implemented on: | 2012-12-12 |
| Professional Classification: | JR-Finance |
| Related Keywords: | financial management security domain
financial security domain financial authentication security domain financial certification security domain financial security domain configuration typical configuration case |
| Related Topics: | mobile payment
Mobile payment information security jr/t+0074-2012 financial directory jr/t 0071-2012 China Mobile China Gold jr/t0074-2012 iec62443-3-2 corresponds to China JR/t China Financial Mobile Payment jr/t 0099-2012 |
Introduction
Analysis of the standard core framework
| Technical modules | Core requirements | Implementation points |
|---|---|---|
| Multi-application architecture | Must include PAMID, financial security domain, and directory management application | Support two management modes: issuer-led/public service platform-led |
| Security domain classification | Issuer security domain, supplementary security domain, authorized manager security domain | Financial certification security domain (FCSD) needs to support SCP10 security channel |
| Life cycle management | 5 SE states + 4 application states | State transition requires security authentication |
Key technology implementation requirements
1. PAMID identification system
As the only ID card of SE in the financial network, it must meet the following requirements:
- Structure: issuer code (4 digits) + SE type code (2 digits) + serial number (10 digits)
- Storage: physical tamper-proof area of chip
- Management: unified allocation and filing of public service platform
2. Financial Security Domain Configuration
- Financial Authentication Security Domain (FCSD): Stores SM2 key pairs and digital certificates
- Financial Management Security Domain (FMSD): Has DAP verification authority
- Main security domain: controls space allocation strategy (minimum unit 4KB)
Secure Communication Protocol Requirements
| Protocol Type | Applicable Scenarios | Encryption Algorithm |
|---|---|---|
| SCP02 | Security Domain Initialization | 3DES+MAC Verification |
| SCP10 | Transaction Communication | SM4+SM3 |
Implementation Suggestions
- SE Selection Verification: The concurrent processing capability of multiple applications needs to be tested (≥8 payment applications)
- Key Management: The financial security domain must use HSM to generate keys
- Lifecycle control: The TERMINATED state requires physical destruction of the security chip
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
JR/T 0095-2012 in English
China Financial Mobile Payment-Specification for Application Security
2012-12-12 -
JR/T 0156-2017 in English
Mobile Terminal Payment Trusted Environment Specification (Draft for Approval)
2017-12-12 -
JR/T 0025.9-2010 in English
China Financial Integrated Circuit Card Specifications-Part 9:Electronic Purse Extended Application Guide
2010-04-30 -
JR/T 0061-2011 in English
Terms for Bankcard
2011-06-10 -
JR/T 0245-2021 in English
Connectivity technical specification for bar code payment
2021-12-20 -
JR/T 0069-2012 in English
Code for Business of Credit Enhancement Organization
2012-08-21 -
JR/T 0131-2015 in English
Specification on computer room power units of the financial information system
2015-12-10 -
JR/T 0281-2024 in English
Banking software test environment management specification
2024-01-15 -
JR/T 0184-2020 in English
Financial distributed ledger technology security
2020-02-05 -
JR/T 0093.5-2012 in English
China Financial Mobile Payment-Remote Payment Applications-Part 5:Technical Specification for Short Message Service (SMS) Payment
2012-12-12
