SF/T 0033-2019 in English
VALIDConstruction and management specification for notarization data center
- Issued on:2019-05-05
- Implemented on:2019-05-20
- File Format:PDF
- Delivery:Via email within 1~3 business days
$272.00
| Standard No: | SF/T 0033-2019 |
| Document status: | VALID |
| Title in English: | Construction and management specification for notarization data center |
| Title in Chinese: | 公证数据中心建设和管理规范 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 1~3 business days |
| Issued on: | 2019-05-05 |
| Implemented on: | 2019-05-20 |
| ICS Classification: | 35.240.01-Applications of information technology in general |
| Chinese Classification: | A16- |
| Professional Classification: | SF- |
| Related Keywords: | first data center construction specification
computer resource pools security system construction resource pool construction requirements quarterly security inspection system construction notarization data center introduction analysis |
| Related Topics: | Analytical Test Center Management
have data in mind Data center size Principles of Zhongtai Construction Data center monitoring and management Supercomputing center management Public Security Bureau Supervision Center sf/t 0030 yy/t 0033-2019 |
本标准规定了公证数据中心建设的总体要求、总体架构及要求、机房建设要求、运维制度与安全管理制度。
本标准适用于司法行政公证管理部门、公证协会及各公证机构数据中心建设。
Introduction
Analysis of the core content of the standard
As the first data center construction specification in the notarization field of the judicial administration industry, this standard incorporates blockchain technology into the resource pool construction requirements for the first time, and explicitly requires that the security protection level must reach the third level of GB/T 22239-2008. The implementation of the standard is of milestone significance in promoting the digital transformation of the notarization industry.
Key points of architecture design
| Resource pool type | Core components | Technical requirements | Innovation points |
|---|---|---|---|
| Computer resource pool | Blade server + rack server | ≥3 Gigabit network ports per physical server | Support blockchain node deployment |
| Storage resource pool | SAN+NAS dual architecture | ≥2 groups of virtualization devices | Social public/central application data isolation |
| Network resource pool | Dual-network dual-plane structure | Bandwidth ≥ 100MB | Quadruple virtualization partitions |
Key technology implementation
1. Blockchain application requirements
Article 5.4.4 of the standard clearly requires: Software blockchain solutions shall be deployed on high-performance servers, and cryptographic calculations shall be used to ensure the immutability of notarized data. Typical application scenarios include:
- Hash value of electronic notarial certificate is stored on the chain
- Trusted verification of cross-institutional data exchange
- Notarization timestamp service
2. Implementation of Level 3 Security Protection
According to Article 4.6 and Article 5.6.6 of the standard, it is necessary to establish the following:
· Intrusion prevention system (IPS) and anti-virus gateway
· Quarterly security inspection system
Construction and implementation suggestions
Phase-based implementation path
- Infrastructure layer: Constructed according to Class B computer room standards and equipped with a network KVM system
- Resource pool deployment: Prioritize the virtualization transformation of computer resource pools
- Security system construction: Implement interface security authentication through PKI+CA
Avoidance of common problems
Pay special attention in practice:
- Avoid excessive virtualization of a single physical server (standard 5.2.2b)
- Storage area networks must be configured with redundant fiber switches (standard 5.3.3)
- Operation and maintenance audit systems must be deployed independently (standard 7.5.5)
Standard evolution analysis
Compared with traditional data center specifications, this standard highlights three major innovations:
| Technical dimension | Introducing blockchain as an optional resource pool |
| Management dimension | Establish notary-featured SaaS security requirements |
| Service dimension | Clear remote security duty service requirements |
The next revision suggestion focuses on cloud native architecture adaptation and quantum encryption technology application.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
SF/T 0076-2020 in English
Technical specification for digital evidence preservation
2020-05-29 -
SF/T 0091-2021 in English
Technical specification for electronic data of notarization preservation
2021-08-31 -
SF/T 0035-2019 in English
Technical specifications for notarization information resource sharing platform
2019-05-05 -
SF/T 0034-2019 in English
Notarization data requirements and specifications
2019-05-05
