JR/T 0167-2020 in English
VALIDFinancial application specification of cloud computing technologySecurity technical requirements
- Issued on:2020-10-16
- Implemented on:2020-10-16
- File Format:PDF
- Delivery:Via email within 5 business days
$437.00
本文件规定了金融领域云计算技术应用的安全技术要求，涵盖基础硬件安全、资源抽象与控制安全、应用安全、数据安全、安全管理功能、安全技术管理要求、服务能力要求等内容。
适用于金融领域的云服务提供者、云服务使用者、云服务合作者等。
Introduction
Core changes in the standard revision
| Dimensions | 2018 version | New requirements for the 2020 version |
|---|---|---|
| Audit requirements | Frequency not specified | At least 2 security audits per year (7.2.4) |
| Emergency management | Basic plan | 2 drills + rolling updates per year (11.4.5) |
| Data migration | Not involved | Domestic storage + cross-border assessment (9.5) |
Three-level requirement system of security framework
Basic hardware security case: When a bank deployed a private cloud, it adopted a dual power supply + physical isolation design, which complied with the "power supply system separation safety distance" and "special equipment for the financial industry" clauses in the 6.1 extended requirements.
- Basic requirements: General specifications (such as network partition isolation)
- Extended requirements: Group cloud dedicated (such as dedicated line access)
- Enhanced requirements: Forward-looking technologies (such as key full life cycle management)
Key technology implementation points
Data security "Five-dimensional protection"
| Phase | Control measures | Compliance basis |
|---|---|---|
| Transmission | HTTPS+dedicated line encryption | Clause 9.3 |
| Storage | Support for three-party key management | Clause 9.4 |
Financial cloud service selection recommendations
- Verify whether the computer room power system complies with the JR/T 0131 dual power supply standard
- Requires proof of operation without major safety accidents in the past three years (Clause 12.4)
- The contract specifies the obligation to assist in data migration (Clause 11.3.5)
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
JR/T 0323-2024 in English
Digital Finance Remote Audio-Video Mobile Banking Technology Specification
2024-12-11 -
JR/T 0078-2014 in English
Interbank Market Data Interface
2014-01-16 -
JR/T 0237-2021 in English
Overall technical requirements for financial big data platforms
2021-12-29 -
JR/T 0288-2023 in English
Technical Specifications for Bank Electronic Vouchers
2023-07-25 -
JR/T 0025.5-2010 in English
China financial integrated circuit card specifications.Part 5:Debit/credit application card specification
2010-04-30
