MH/T 3032-2023 in English

VALID

Specification of civil aviation unified authentication interface

Issued on:2023-07-21
Implemented on:2023-08-01
File Format:PDF
Delivery:Via email within 1~3 business days

Price(USD)： $900.00
$873.00

Standard No:	MH/T 3032-2023
Document status:	VALID
Title in English:	Specification of civil aviation unified authentication interface
Title in Chinese:	民航统一认证接口规范
Language:	English
File Format:	Electronic (PDF)
Delivery:	Via email within 1~3 business days
Issued on:	2023-07-21
Implemented on:	2023-08-01
ICS Classification:	35.240.60-IT applications in transport and trade
Chinese Classification:	L67-Computer application
Professional Classification:	MH-Civil Aviation
Related Topics:	mh/t Irregular and unified EU mask certification Interface authentication

本文件规定了中国民用航空局各政务信息系统对接民航局信息中心统一认证平台（包括认证Authentication、授权Authorization、账号Accounting、审计Auidt,简称AA）和面向社会公众（自然人或法人）的统一身份认证系统（包括认证Authentication、授权Authorization,简称2A）的接入模式、接入流程和接口定义。
本文件适用于民航各政务信息系统之间，以及民航各政务信息系统与国家政务服务平台间统一认证的应用过程。

Introduction

Standard Framework and Technology Evolution

Authentication Type	4A Platform	2A System
Core Functions	Authentication+Authorization+Account+Audit	Authentication+Account Management
Applicable Scenarios	Single Sign-On within Government System	Social Public Service Access
Interconnection Mode	Bill Verification Mode	Unified/Collaborative Dual Mode

Core interface technical specifications

4A platform docking key points

Ticket verification mechanism: AES encrypted pname parameter transmission, including MAIN_ID, loginName and other key fields
Data synchronization method: REST API+JSON POST lightweight transmission
Typical interface:
1. Ticket verification service (/9name)
2. Two-way username and password authentication
3. SMS verification code service

2A system innovative features

Trust transfer technology realizes cross-system identity recognition, supporting:

• Unified mode	Centralized user management
•
Natural person primary	Name+ID number+Validity period	simpleTwoPattern()
Natural person intermediate	Portrait comparison+ID card information	simpleTwoPatternWithPicture()
Corporate legal person	Uniform credit code+Legal representative	verifyEnterpriseInfo()

Implementation Suggestions

System Connection Path

Environment Preparation: Configure whitelist IP and obtain assigned system code
SDK Integration: Initialize TacsHttpClient and specify the certificate path
Exception Handling: Focus on TacsException and return code verification

Security Precautions

The validity period of the ticket is controlled within 5 minutes
Base64-encoded portrait data is required for intermediate verification of natural persons
Hash function services must be used to desensitize sensitive information

More samples: DL/T 368-2010 DL/T 5154-2012 YD/T 3934-2021

Sample only — not a preview of MH/T 3032-2023