YDT3499-2019 互联网码号资源公钥基础设施（RPKI）安全运行技术要求 证书策略与认证业务框架.pdf

ICS33.100固05

L79

f标〉

和

华人信行

YD／τ3499-2019

有马有串CRPKI)

飞向~T古董

叫证~费桂架

官echnical时嘻时时直直直e直直饵ofsec留置eope矿atio直服ofresourcep回blickey

i盟命a霞在旷陋就醒时（RP区。回Ce直吃ificatepolicya盟dce宜生班ca髓。盟萨宫actice

如a.1直iework

2019→←11君主布2020咱←01实施

中华人民共奉国国工业新信息化部发布

YD厅3499-2019

目；欠

1范围……………1

2规范性引用文件……1

3术语、定义和缩略语…………1

4证书认证业务框架………3

4.3证书使用………………························……………4

4.4政策管理·························………4

5发布与资料库责任5

5.2证书信息的发布5

5.3发布的时间或频率··································································………5

5.4资料库访问控制··························

6识别和鉴另IJ…·

6.1命名5

6.2初始身份确认…6

6.3密钥更替请求的识别与鉴别7

6.4撤销请求的识别与鉴别…7

7证书生命周期操作要求………··……8

7.3证书签发………··············………8

7.4证书接受···································……···············……………8

7.5密钥对和证书使用9

7.7证书密铝更替………10

7.8证书修改………11

7.9证书撤销和挂起……··………12

7.10证书状态服务…………13

8设施、管理和操作控制…13

8.1物理控制．．．．

YD厅3499-2019

8.2程序控制……13

8.3人员控制·····························……13

8.4审计日志程序…14

8.5密钥更替…14

8.6损害与灾难恢复…14

9技术安全控制……··．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．．