LD/T 02.5-2022 in English
VALIDSpecifications for human resources and social security electronic authentication system - Part 5: Specification for digital certificate storage carriers
- Issued on:2022-06-01
- Implemented on:2022-07-01
- File Format:PDF
- Delivery:Via email within 5 business days
$970.00
| Standard No: | LD/T 02.5-2022 |
| Document status: | VALID |
| Title in English: | Specifications for human resources and social security electronic authentication system - Part 5: Specification for digital certificate storage carriers |
| Title in Chinese: | 人力资源社会保障电子认证体系规范 第5部分：数字证书载体规范 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 5 business days |
| Issued on: | 2022-06-01 |
| Implemented on: | 2022-07-01 |
| Superseding: |
LD/T 30.5-2009 Human resources and social security electronic authentication system - Part 5: Specification of digital certificate storage medium
|
| ICS Classification: | 35.040-Character sets and information coding |
| Chinese Classification: | L80-Data encryption |
| Professional Classification: | LD-Labor and Safety |
| Related Topics: | carrier
certificate ld/t Power Certificate Standard system certificate t carrier |
本文件给出了数字证书载体分类，规定了数字证书载体硬件和软件要求。
注:本标准主要规范智能密码钥匙的技术指标，第三代社会保障卡应符合LD/T 32。
本文件适用于人力资源社会保障数字证书载体(智能密码钥匙)的设计、应用开发、使用和检测。
Introduction
Core Changes in the Standard Revision
| Technical Dimensions | 2009 Edition | 2022 Edition |
|---|---|---|
| Algorithm Support | International General Algorithm | Mandatory SM2/SM3/SM4 Domestic Algorithms |
| Operating System Compatibility | Windows Series | Added Support for Domestic Linux Desktop Systems |
| Carrier Classification | Unspecified | Smart Password Key/Social Security Card Dual Carrier |
Digital certificate carrier hardware specifications
Smart password key must meet the following requirements:
- Storage capacity ≥ 128KB, support dual certificate storage
- Working temperature 0-60℃, 100,000 read and write endurance
- SM2 signature speed <10ms/time, SM4 encryption and decryption >1Mbps
Typical case: The metallic silver-white carrier must be marked with a 16-digit serial number, including manufacturer code (first digit), certificate type (third digit), administrative division (4-7 digits) and other information.
Cryptographic Service Interface System
The standard defines 7 categories and 37 API functions. The key functions include:
| Functional module | Core function | Security requirements |
|---|---|---|
| Container management | CreateContainer/ImportCertificate | User PIN authentication |
| ECC operation | GenECCKeyPair/ECCSignData | Private key cannot be exported |
| Session key | GenerateKeyWithECC | Compliant with GB/T 35276 |
Implementation Suggestions
Selection Considerations
- Verify whether the carrier has passed the GB/T 37092 Level 2 security certification
- Detect whether the SM2 signature/verification performance meets the standard
- Confirm that the driver is compatible with domestic systems such as Tongxin UOS
Development Specifications
- Dynamic library naming follows the hrssxxxxyy.dll rule
- PIN code error lock mechanism (10 errors)
- Session key transmission is encapsulated using the ECCCIPHERBLOB structure
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
LD/T 07-2022 in English
Specification for human resources social security data center and network system operation monitoring
2022-09-30 -
LD/T 01.3-2022 in English
Human Resources and Social Security Electronic Seal System Part 3:Technical Specification of the Seal Signature
2022-03-23 -
LD/T 03-2022 in English
Specification for human resources and social security electronic certification service management
2022-06-01 -
LD/T 04-2022 in English
Specification for human resources and social security network security monitoring and emergency disposal
2022-06-01 -
LD/T 02.4-2022 in English
Specifications for human resources and social security electronic authentication system - Part 4: Specification for certificate application interface
2022-06-01 -
LD/T 02.3-2022 in English
Specifications for human resources and social security electronic authentication system-Part 3: Format specifications for digital certificate
2022-06-01 -
LD/T 09-2022 in English
Specification for human resources and social security information system operation and maintenance platform construction
2022-09-30 -
LD/T 02.2-2022 in English
Specifications for human resources and social security electronic authentication system-Part 2: Technology specification for electronic authentication system
2022-06-01 -
LD/T 01.2-2022 in English
Human Resources and Social Security Electronic Seal System Part 2:Technical Specification of the Seal
2022-03-23 -
LD/T 02.1-2022 in English
Specifications for human resources and social security electronic authentication system-Part 1: Architecture specification
2022-06-01
