标准号:ISO 15782-1-2003
实施状态:作废
中文名称:金融业务的证书管理.第1部分:公共密钥证书
英文名称:Certificate management for financial services - Part 1: Public key certificates
发布日期:2003-06
被替代标准:ISO 15782-1-2009
代替标准:ISO/FDIS 15782-1-2003
起草单位:ISO/TC 68
标准简介:This part of ISO 15782 defines a certificate management system for financial industry use for legal and natural persons that includes
— credentials and certificate contents,
— certification authority systems, including certificates for digital signatures and for encryption key management,
— certificate generation, distribution, validation and renewal,
— authentication structure and certification paths,
— revocation and recovery procedures, and
— extensions to the definitions of public key certificates and certificate revocation lists.
This part of ISO 15782 also recommends some useful operational procedures (e.g. distribution mechanisms, acceptance criteria for submitted credentials).
Implementation of this part of ISO 15782 will also be based on business risks and legal requirements. This part of ISO 15782 does not include
— the protocol messages used between the participants in the certificate management process,
— requirements for notary and time stamping,
— certificate policy and certification practices requirements,
— requirements for trusted third parties, or
— Attribute Certificates.
While this part of ISO 15782 provides for the generation of certificates that could include a public key used for encryption key management, it does not address the generation or transport of keys used for encryption.
Implementers wishing to comply with ISO/IEC 9594-8 | ITU-T Recommendation X.509 can utilize the certificate structures defined by that International Standard. Those wishing to implement compatible certificate and certificate revocation structures but without the overhead associated with the X.500 series can utilize the ASN.1 structures defined in Annex A.
文件格式:PDF
文件大小:1.91MB
文件页数:104
(以上信息更新时间为:2019-11-23)
ISO 15782-1-2003 金融业务的证书管理.第1部分_公共密钥证书.pdf
(1.91 MB)
|
|