GB/T 21078.3-2011

Active

Banking - Personal identification number (PIN) management and security - Part 3: Guidelines for PIN handling in open networks

银行业务个人识别码的管理与安全第3部分：开放网络中PIN处理指南

Standard Type

GBT

ICS

35.240.40

CCS

A11

Status

Active

Issue Date

2011-12-30

Implementation

2012-02-01

Centralized Committee

中国人民银行

Issuing Authority

中华人民共和国国家质量监督检验检疫总局、中国国家标准化管理委员会

Application Summary AI generated

This standard provides guidelines for the secure handling of Personal Identification Numbers (PINs) in open network environments, such as e-commerce transactions conducted over the internet. It is applied by financial institutions and payment service providers to define security requirements for PIN entry, transmission, and storage when the communication channel is not fully controlled by the bank. The standard ensures PIN integrity and confidentiality in scenarios like online banking or card-not-present transactions where traditional closed-loop security measures are absent.

Related Standards

GB/T 21078.2-2011 Banking—Personal identification number management and security—Part 2: Requirements for offline PIN handling in ATM and POS systems GB/T 21079.1-2011 Banking -- Secure cryptographic devices (retail) -- Part 1: Concepts, requirements and evaluation methods GA/T 947-2011 Portable video/audio recording equipment for the individual enforcing policeman GA/T 737-2011 Basic data items of security service supervision GB/T 27702-2011 Information and documentation--Information retrieval(Z39.50)--Application service definition and protocol specification GB/T 19688.4-2005/ISO 8459-4:1998 Information and documentation - Bibliographic data element directory - Part 4: Circulation applications GB/T 19688.2-2005/ISO 8459-2:1992 Information and documentation - Bibliographic data element directory - Part 2: Acquisitions applications GB/T 18769-2003 Electronic transaction specification for bulk stock

Transparency note: The application summary and key sentences on this page were automatically generated by AI from the standard's original text. This content has not been human-verified and should not be used for compliance or regulatory purposes. Always refer to the official standard document from the issuing authority.