LD/T 01.3-2022 in English
VALIDHuman Resources and Social Security Electronic Seal System Part 3:Technical Specification of the Seal Signature
- Issued on:2022-03-23
- Implemented on:2022-06-01
- File Format:PDF
- Delivery:Via email within 1~3 business days
$321.00
| Standard No: | LD/T 01.3-2022 |
| Document status: | VALID |
| Title in English: | Human Resources and Social Security Electronic Seal System Part 3:Technical Specification of the Seal Signature |
| Title in Chinese: | 人力资源社会保障电子印章体系 第3部分：签章技术规范 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 1~3 business days |
| Issued on: | 2022-03-23 |
| Implemented on: | 2022-06-01 |
| ICS Classification: | 35.040-Character sets and information coding |
| Chinese Classification: | L80-Data encryption |
| Professional Classification: | LD-Labor and Safety |
| Related Keywords: | social security electronic seal system part
social security electronic seal system electronic seal electronic signature data structure seal signature introduction analysis |
| Related Topics: | seal
social Security ld/t signature Electronic seal Electronic seal |
本文件规定了人力资源社会保障电子印章系统的数据格式、生成流程和验证流程。
本文件适用于人力资源社会保障电子印章系统的建设、使用和各地区人力资源社会保障电子印章系统的接入。
Introduction
Analysis of the core content of the standard
As the third part of the Human Resources and Social Security Electronic Seal System, this specification focuses on:
- Electronic signature data structure (including 7 major elements such as version number, electronic seal, and signing time)
- Application specification of SM2/SM3 algorithm in the signing process
- Technical consistency requirements for docking with the national government service platform
Comparison of key technical indicators
| Dimensions | Requirements of this specification | GB/T 38540-2020 | ZWEW C 0119-2018 |
|---|---|---|---|
| Signature Algorithm | SM2 | SM2/RSA | SM2 |
| Hash Algorithm | SM3 | SM3/SHA-256 | SM3 |
| Timestamp Requirements | Optional | Mandatory | Optional |
| Certificate Encoding Format | DER | Unrestricted | DER |
In-depth Analysis of the Signature Process
The signing process specified in Chapter 7 of the standard includes 9 key steps:
- Verification of the validity of the electronic seal (need to check the certificate trust chain, validity period, etc.)
- Original text preprocessing (define the signature protection scope according to propertyInfo)
- SM3 hash operation to generate the original text summary value
- ASN.1 format data assembly
- SM2 algorithm digital signature generation
Typical application scenario: During the issuance of social insurance electronic certificates, the system needs to verify in real time whether the validity period of the electronic seal of the handling personnel covers the business handling time.
Technical points of seal verification
Six verification levels of seal verification process:
- Format verification: Check ASN.1 structure compliance
- Certificate chain verification: Including CRL check, OCSP query
- Time validity verification: Triple time verification (certificate validity period, signing time, timestamp)
Special note: When the certificate is revoked after signing, the certificate status at the time of signing must be verified through the timestamp service.
Implementation Suggestions
Special attention should be paid to the system construction phase:
- Use cryptographic equipment that complies with GM/T 0015-2012 to implement the SM2 algorithm
- Timestamp services must meet the requirements of GB/T 20520-2006
- During the development and testing phase, abnormal scenarios such as certificate expiration and revocation should be simulated
Special note to the standard: Some of the content of this document may involve patented technology, and intellectual property evaluation should be conducted before implementation.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
LD/T 07-2022 in English
Specification for human resources social security data center and network system operation monitoring
2022-09-30 -
LD/T 04-2022 in English
Specification for human resources and social security network security monitoring and emergency disposal
2022-06-01 -
LD/T 02.1-2022 in English
Specifications for human resources and social security electronic authentication system-Part 1: Architecture specification
2022-06-01 -
LD/T 01.4-2022 in English
Human Resources and Social Security Electronic Seal System Part 4:System Interface Specification
2022-03-23 -
LD/T 08-2022 in English
Specification for disaster recovery center construction and operation and maintenance management in human resources and social security
2022-09-30 -
LD/T 03-2022 in English
Specification for human resources and social security electronic certification service management
2022-06-01 -
LD/T 02.2-2022 in English
Specifications for human resources and social security electronic authentication system-Part 2: Technology specification for electronic authentication system
2022-06-01 -
LD/T 09-2022 in English
Specification for human resources and social security information system operation and maintenance platform construction
2022-09-30 -
LD/T 01.2-2022 in English
Human Resources and Social Security Electronic Seal System Part 2:Technical Specification of the Seal
2022-03-23
