DB32/T 3514.6-2019 电子政务外网建设规范 第6部分：安全接入平台技术要求

ICS35.240.01

L67

DB32

江苏省地方标准

DB32/T3514.6—2019

电子政务外网建设规范

第6部分：安全接入平台技术要求

ConstructionSpecificationsofE-GovernmentNetwork

Part6:thetechnicalrequirementsofnetworksecurityaccessplatform

2019-01-12发布2019-01-30实施

江苏省市场监督管理局发布

DB32/T3514.6—2019

目  次

前言.....................................................................................................................................................................IV

1范围.................................................................................................................................................................1

2规范性引用文件.............................................................................................................................................1

3术语和定义.....................................................................................................................................................1

4缩略语.............................................................................................................................................................3

5总体要求.........................................................................................................................................................3

6基础框架.........................................................................................................................................................4

6.1安全接入体系.........................................................................................................................................4

6.2平台架构.................................................................................................................................................4

6.3功能框架.................................................................................................................................................5

7基本要求.........................................................................................................................................................7

7.1统一入口.................................................................................................................................................7

7.1.1WEB门户..........................................................................................................................................7

7.1.2统一客户端.....................................................................................................................................7

7.1.3网关接入.........................................................................................................................................7

7.2VPN网关集群..........................................................................................................................................7

7.2.1网关要求.........................................................................................................................................7

7.2.2集群要求.........................................................................................................................................8

7.2.3传输加密.........................................................................................................................................8

7.2.4身份认证.........................................................................................................................................8

7.2.5权限控制.........................................................................................................................................8

7.3统一认证平台.........................................................................................................................................9

7.4互联网接入终端.....................................................................................................................................9

7.5管理与审计.............................................................................................................................................9

7.6安全防护...............................................................................................................................................10

7.6.1网络访问控制...............................................................................................................................10

7.6.2入侵检测与防御...........................................................................................................................10

7.6.3防病毒...........................................................................................................................................10

7.7移动终端安全.......................................................................................................................................10

7.7.1通用配置.......................................................................................................................................10

7.7.2数字证书.......................................................................................................................................10

7.7.3VPN客户端....................................................................................................................................11

7.7.4MDM客户端....................................................................................................................................11

7.7.5MAM客户端....................................................................................................................................11

7.7.6MCM客户端....................................................................................................................................11

I

DB32/T3514.6—2019

7.7.7移动安全应用支撑客户端...........................................................................................................11

7.7.8身份鉴别.......................................................................................................................................12

7.7.9数据安全存储...............................................................................................................................12

7.7.10安全防护.....................................................................................................................................12

7.7.11运行环境隔离.............................................................................................................................12

7.8信道安全...............................................................................................................................................12

7.9接入安全...............................................................................................................................................12

7.9.1接入认证网关...............................................................................................................................12

7.9.2MDM平台........................................................................................................................................13

7.9.3移动安全应用支撑平台...............................................................................................................13

7.10服务端安全.........................................................................................................................................14

7.10.1MAM平台......................................................................................................................................14

7.10.2MCM平台......................................................................................................................................14

7.11IPv6的支持与过渡要求....................................................................................................................14

附录A（资料性附录）接入模式及接入流程.............................................................................................15

附录B（资料性附录）典型部署案例..........................................................................................................17

II

DB32/T3514.6—2019

前  言

DB32/T3514-2018《电子政务外网建设规范》分为八个部分：

——第1部分：网络平台；

——第2部分：IPv4地址、路由规划；

——第3部分：IPv4域名规划；

——第4部分：安全实施指南；

——第5部分：安全综合管理平台技术要求与接口规范；

—