标准编号:	Cryptographic Techniques 2008
中文名称:	含有密码技术的信息产品政府采购规定
英文名称:	Regulations on Government Procurement of Information Products Containing Cryptographic Techniques
行业分类:	Cr
发布机构:	国家密码管理局、科学技术部、公安部、国家安全部、财政部、信息产业部、商务部、国家保密局、国务院信息化工作办公室
发布日期:	2008-01-08
实施日期:	2008-3-1
标准状态:	valid
翻译语言:	英文

Regulations on Government Procurement of Information Products Containing Cryptographic Techniques 含有密码技术的信息产品政府采购规定 Article 1 With a view to protecting national information security and regulating the procurement activities of information products containing cryptographic techniques in government information system and information systems involving state secrets, the Regulations is hereby formulated in accordance with Government Procurement Law of People’s Republic of China, Law of the People's Republic of China on Guarding State Secrets, National Security Law of the People's Republic of China, Regulations on Administration of Commercial Cipher Codes and relevant laws and regulations. Article 2 The information products containing cryptographic techniques mentioned in the Regulations refer to softwares and hardwares realizing security functions such as information encryption and decryption, certification and authentication, authorization management and access control by cryptographic techniques. Article 3 For the purposes of the Regulations, procurement activities of information products containing cryptographic techniques in government information system and information systems involving state secrets by state organs, institutions and organizations at all levels (hereinafter collectively referred to as the Purchaser) with fiscal funds apply. Article 4 The cryptography administration departments, finance departments and secrecy administration departments at all levels shall, in accordance with their respective responsibilities, supervise and manage the procurement of information products containing cryptographic techniques in government information system and information systems involving state secrets. Other relevant departments of people's governments at all levels shall, in accordance with law, fulfill their management responsibilities to supervise and manage the government procurement activities related to the Regulations. Article 5 The State implements catalog management on procurement of information products containing cryptographic techniques. When purchasing information products containing cryptographic techniques, the Purchaser shall select those in the catalog. Article 6 Specific scope of information products containing cryptographic techniques is determined by the State Cryptography Administration jointly with Ministry of Science and Technology, Ministry of Public Security, Ministry of State Security, Ministry of Finance, Ministry of Information Industry, Ministry of Commerce, National Administration for the Protection of State Secrets and State Council Informatization Office. The Ministry of Finance shall, in conjunction with the State Cryptography Administration, develop a government procurement catalog of information products containing cryptographic techniques within the scope as determined, and then release it within appropriate range and adjust timely.

Article 1 With a view to protecting national information security and regulating the procurement activities of information products containing cryptographic techniques in government information system and information systems involving state secrets, the Regulations is hereby formulated in accordance with Government Procurement Law of People’s Republic of China, Law of the People's Republic of China on Guarding State Secrets, National Security Law of the People's Republic of China, Regulations on Administration of Commercial Cipher Codes and relevant laws and regulations. Article 2 The information products containing cryptographic techniques mentioned in the Regulations refer to softwares and hardwares realizing security functions such as information encryption and decryption, certification and authentication, authorization management and access control by cryptographic techniques. Article 3 For the purposes of the Regulations, procurement activities of information products containing cryptographic techniques in government information system and information systems involving state secrets by state organs, institutions and organizations at all levels (hereinafter collectively referred to as the Purchaser) with fiscal funds apply. Article 4 The cryptography administration departments, finance departments and secrecy administration departments at all levels shall, in accordance with their respective responsibilities, supervise and manage the procurement of information products containing cryptographic techniques in government information system and information systems involving state secrets. Other relevant departments of people's governments at all levels shall, in accordance with law, fulfill their management responsibilities to supervise and manage the government procurement activities related to the Regulations.

国家密码管理局、科学技术部、公安部、国家安全部、财政部、信息产业部、商务部、国家保密局、国务院信息化工作办公室关于印发《含有密码技术的信息产品政府采购规定》的通知 【发布单位】国家密码管理局、科学技术部、公安部、国家安全部、财政部、 信息产业部、商务部、国家保密局、国务院信息化工作办公室 【发布文号】国密局联〔2008〕1号 【发布日期】2008-01-08 【实施日期】2008-03-01 各省、自治区、直辖市密码管理局、科技厅（委）、公安厅（局）、国家安全厅（局）、财政厅（局）、信息产业主管部门、商务主管部门、保密局、信息化领导小组办公室，新疆生产建设兵团密码管理局、科技局、公安局、财务局、商务局、保密局、信息化领导小组办公室： 为规范含有密码技术的信息产品政府采购行为，维护国家信息安全，国家密码管理局、科学技术部、公安部、国家安全部、财政部、信息产业部、商务部、国家保密局、国务院信息化工作办公室联合制定了《含有密码技术的信息产品政府采购规定》。现印发给你们，请认真贯彻执行。 国家密码管理局 中华人民共和国科学技术部 中华人民共和国公安部 中华人民共和国国家安全部 中华人民共和国财政部 中华人民共和国信息产业部 中华人民共和国商务部 国家保密局 国务院信息化工作办公室 二○○八年一月八日 （稿件来源：国家密码管理局提供） 含有密码技术的信息产品政府采购规定 第一条 为保障国家信息安全，规范政府信息系统和涉及国家秘密的信息系统中含有密码技术的信息产品的采购行为，根据《中华人民共和国政府采购法》、《中华人民共和国保守国家秘密法》、《中华人民共和国国家安全法》、《商用密码管理条例》和相关法律法规，制定本规定。 第二条 本规定所称含有密码技术的信息产品，是指采用密码技术实现信息加解密、认证鉴别、授权管理、访问控制等安全功能的软件、硬件。 第三条 各级国家机关、事业单位和团体组织（以下统称采购人），在政府信息系统和涉及国家秘密的信息系统中，使用财政性资金采购含有密码技术的信息产品的活动，适用本规定。 第四条 各级密码管理部门、财政部门、保密管理部门依照各自职责，对政府信息系统和涉及国家秘密的信息系统中含有密码技术的信息产品的采购实施监督管理。 各级人民政府其他有关部门依法履行与本规定政府采购活动有关的监督管理职责。 第五条 国家对含有密码技术的信息产品采购实行目录管理。 采购人采购含有密码技术的信息产品时，应当采购目录中的产品。 第六条 国家密码管理局会同科技部、公安部、国家安全部、财政部、信息产业部、商务部、国家保密局、国务院信息化工作办公室，确定含有密码技术的信息产品的具体范围。 财政部会同国家密码管理局在确定范围内制定含有密码技术的信息产品政府采购目录，在适当范围内公布并适时调整。 第七条 采购人应当在目录产品范围内，采用政府采购法律制度规定的采购方式确定中标或成交供应商，确保采购活动公平、公正和充分竞争。 采购人采购用于涉及国家秘密的信息系统的含有密码技术的信息产品及相关服务，应当通过具有涉密或者密码相关资质的企业采购。 第八条 确需采购未列入目录的含有密码技术的信息产品的，应当同时具备下列条件：（一）通过同级密码管理部门（机构）组织的需求合理性论证；（二）通过公安部、国家安全部、国家保密局、国家密码管理局联合指定的安全评估机构的安全评估；（三）通过国家密码管理局指定的检测机构的检测。 第九条 采购人或其委托的采购代理机构未按本规定要求采购的，由财政部门责令改正；拒不改正的，停止按预算支付资金，由其上级行政主管部门或者有关机关依法给予其直接负责的主管人员和其他直接责任人员处分。 第十条 其他使用财政性资金采购涉及国家安全的含有密码技术信息产品的，参照本规定执行。 第十一条 政府信息系统和涉及国家秘密的信息系统中装备密码产品的，应当按照国家有关密码管理规定执行。涉及信息安全保密产品采购的，按照国家相关管理规定执行。 第十二条 本规定自2008年3月1日起施行。