Circular No. 39/2017/TT-BTTTT dated December 15, 2017 of the Ministry of Information and Communications on promulgating the List of technical standards for application of information technology in regulatory authorities

  • Summary
  • Content
  • Status
  • Vietnamese
  • Download
Save

Please log in to use this function

Send link to email

Please log in to use this function

Error message
Font size:

ATTRIBUTE

Circular No. 39/2017/TT-BTTTT dated December 15, 2017 of the Ministry of Information and Communications on promulgating the List of technical standards for application of information technology in regulatory authorities
Issuing body: Ministry of Information and CommunicationsEffective date:
Known

Please log in to a subscriber account to use this function.

Don’t have an account? Register here

Official number:39/2017/TT-BTTTTSigner:Truong Minh Tuan
Type:CircularExpiry date:Updating
Issuing date:15/12/2017Effect status:
Known

Please log in to a subscriber account to use this function.

Don’t have an account? Register here

Fields:Information - Communications

SUMMARY

Technical standards for application of information technology in regulatory authorities

To ensure continuous and synchronous connection, on December 15, 2017, the Ministry of Information   issues the Circular No. 39/2017/TT-BTTTT.  

The List of technical standards for application of information technology in regulatory authorities attached to this Circular includes recommended and compulsory technical standards for application of information technology in regulatory authorities on connection, data integration, information access, information security...

Accordingly, in access to information of document, this Technical standards state that the Microsoft Word open document format (.docx) is recommended and the Plain Text (.txt) format: for unstructured documents and the Rich Text (.rtf) format v1.8, v1.9.1: for cross-platform document interchange are compulsory… In Data compression, the standard Zip (.zip) and GNU Zip (.gz) version 4.3 are compulsory.

Within 01 year from the effective date of this Circular, operating IT systems of regulatory authorities shall be reviewed and a transformation and upgrade plan or roadmap should be developed in accordance with this Circular.

This Circular takes effect on July 01, 2018.

For more details, click here.
Download files here.
LuatVietnam.vn is the SOLE distributor of English translations of Official Gazette published by the Vietnam News Agency
Effect status: Known

 THE MINISTRY OF INFORMATION AND COMMUNICATIONS

CircularNo. 39/2017/TT-BTTTT datedDecember 15, 2017 of the Ministry of Information and Communicationsonpromulgating the List of technical standards for application of information technology in regulatory authorities

Pursuant tothe Law on Information Technologydated June 29, 2006;

Pursuant to the Government’s Decree No.64/2007/ND-CPdated April 10, 2007 on application of information technology in operation ofregulatory authorities;

Pursuant to the Government’s Decree No. 102/2009/ND-CP datedApril 06, 2009onmanagement of and investment in application ofinformation technologyusing the state budget;

Pursuant to the Government’s Decree No. 17/2017/ND-CP datedFebruary 17, 2017 definingfunctions, tasks, entitlements and organizational structureof theMinistry of Information and Communications;

At the request of the Director of the Department of Science and Technology,

TheMinister of Information and Communicationshereby promulgates a Circular on the List of technical standards for application of information technology in regulatory authorities.

Article 1.A list of technical standards for application of information technology in regulatory authorities(hereinafter referred to as “the List”) is promulgated together with this Circular.

Article 2.This List includes compulsory standards and recommended standards applied to IT systems of regulatory authorities to ensure continuous and synchronous connection and the ability to safely and conveniently share and exchange information between regulatory authorities and between regulatory authorities and organizations/individuals.

This List is also applied to form a basis for making investment in IT and renting IT services using the state budget.

Article 3.Within 01 year from the effective date of this Circular, operating IT systems of regulatory authorities shall be reviewed and a transformation and upgrade plan or roadmap should be developed in accordance with this Circular.

Article 4.The Department of Science and Technology shall take charge and cooperate with relevant units in reviewing and updating the List specified in this Circular.

The Authority of Information and Technology Application shall provide guidelines for the application of technical standards on the List specified in this Circular.

Article 5.This Circular takes effect on July 01, 2018 and replaces the Circular No.22/2013/TT-BTTTTdated December 23, 2013 of the Minister of Information and Communications.

Article 6.Chief of Office, Director of Department of Science and Technology, Director ofAuthority of Information and Technology Application, heads of affiliates of the Ministry ofInformation and Communicationsand Directors of Departments ofInformation and Communicationsof provinces and central-affiliated cities, and relevant organizations and individuals are responsible for the implementation of this Circular./.

The Minister

Truong Minh Tuan 


THE LIST

OF TECHNICAL STANDARDS FOR APPLICATION OF INFORMATION TECHNOLOGY IN REGULATORY AUTHORITIES
(Promulgated together with
the Circular No.39/2017/TT-BTTTT dated December15, 2017of the Minister of Information and Communications)

No.

Type of standard

Standardcode

Full name of standard

Form of application

1

Connection standards

1.1

Hypertext transfer

HTTP v1.1

Hypertext Transfer Protocol version 1.1

Compulsory

HTTP v2.0

Hypertext Transfer Protocol version 2.0

Recommended

1.2

File transfer

FTP

File Transfer Protocol

Compulsory application of one or both standards

HTTP v1.1

Hypertext Transfer Protocol version 1.1

HTTP v2.0

Hypertext Transfer Protocol version 2.0

Recommended

WebDAV

Web-based Distributed Authoring and Versioning

Recommended

1.3

Audio/ image streaming and transport

RTSP

Real-time Streaming Protocol

Recommended

RTP

Real-time Transport Protocol

Recommended

RTCP

Real-time Control Protocol

Recommended

1.4

Data access and sharing

OData v4

Open Data Protocol version 4.0

Recommended

1.5

Mail transfer

SMTP/ MIME

Simple Mail Transfer
Protocol/Multipurpose
Internet Mail Extensions

Compulsory

1.6

Provision of internet message access service

POP3

Post Office Protocol version 3

Compulsory application of both standardsto the server

IMAP 4rev1

Internet Message Access Protocol version 4 revision 1

1.7

Directory access

LDAP v3

Lightweight Directory Access Protocol version 3

Compulsory

1.8

Domain name service

DNS

Domain Name System

Compulsory

1.9

Connection-oriented transport

TCP

Transmission Control Protocol

Compulsory

1.10

Connectionlesstransport

UDP

User Datagram Protocol

Compulsory

1.11

LAN/WAN internetwork

IPv4

Internet Protocol version 4

Compulsory

IPv6

Internet Protocol version 6

Compulsory application of this standard toInternet-connected equipment

1.12

Wireless Local Area Network

IEEE 802.11g

Institute of Electrical and Electronics Engineers Standard (IEEE) 802.11g

Compulsory

IEEE 802.11n

Institute of Electrical and Electronics Engineers Standard (IEEE) 802.11n

Recommended

1.13

Wireless Internet access

WAP v2.0

Wireless Application Protocol version 2.0

Compulsory

1.14

SOAP web service

SOAP v1.2

Simple Object Access Protocol version 1.2

Compulsory application of one, twoorthreestandards

WSDL V2.0

Web Services Description Language version 2.0

UDDI v3

Universal Description, Discovery and Integration version 3

1.15

RESTfulweb service

RESTful web service

Representational state transfer

Recommended

1.16

Web services specifications

WS BPEL v2.0

Web Services Business Process Execution Language Version 2.0

Recommended

WS-I Simple SOAP Binding Profile Version 1.0

Simple SOAP Binding Profile Version 1.0

Recommended

WS- Federation v1.2

Web Services Federation Language Version 1.2

Recommended

WS- Addressing v1.0

Web Services Addressing 1.0

Recommended

WS-Coordination Version 1.2

Web Services Coordination Version 1.2

Recommended

WS-Policy v1.2

Web Services Coordination Version 1.2

Recommended

OASIS Web Services Business Activity Version 1.2

Web Services Business Activity Version 1.2

Recommended

WS- Discovery Version 1.1

Web Services Dynamic Discovery Version 1.1

Recommended

WS- MetadataExchange

Web Services Metadata Exchange

Recommended

1.17

Network time service

NTPv3

Network Time Protocol version 3

Compulsory application of oneof the twostandards

NTPv4

Network Time Protocol version 4

2

Data integration standards

2.1

Extensible Markup Language

XML v1.0(5thEdition)

Extensible Markup Language version 1.0 (5thEdition)

Compulsory application of one of the two standards

XML v1.1(2ndEdition)

Extensible Markup Language version 1.1

2.2

Electronic Business Extensible Markup Language

ISO/TS 15000:2014

Electronic Business
Extensible Markup
Language (ebXML)

Compulsory

2.3

XML Schema Definition

XML Schema V1.1

XML Schema version 1.1

Compulsory

2.4

Data transformation

XSL

Extensible Stylesheet Language

Compulsory application of the latest version

2.5

Object modelling

UML v2.5

Unified Modelling Language version 2.5

Recommended

2.6

Resource description

RDF

Resource Description Framework

Recommended

OWL

Web Ontology Language

Recommended

2.7

Character set demonstration

UTF-8

8-bit Universal Character Set (UES)/Unicode Transformation Format

Compulsory

2.8

Geographic information exchange format

GML v3.3

Geography Markup Language version 3.3

Compulsory

2.9

Geographic informationaccess and update

WMS v1.3.0

OpenGIS Web Map Service version 1.3.0

Compulsory

WFS v1.1.0

Web Feature Service version 1.1.0

Compulsory

2.10

XMLmetadata interchangespecification

XMIv2.4.2

XML Metadata Interchange version 2.4.2

Recommended

2.11

Metadata registries(MDR)

ISO/IEC 11179:2015

Metadata registries - MDR

Recommended

2.12

Dublin Core metadata element set

ISO 15836- 1:2017

Dublin Core metadata element set

Recommended(*)

2.13

JavaScript Object Notation (JSON) Data Interchange Format

JSON RFC 7159

JavaScript Object Notation

Recommended

2.14

Business Process Modelling Language

BPMN 2.0

Business Process Model and Notation version 2.0

Recommended

3

Information access standards

3.1

Web content

HTML v4.01

Hypertext Markup Language version 4.01

Compulsory

WCAG 2.0

W3C Web Content Accessibility Guidelines (WCAG) 2.0

Recommended

HTML 5

Hypertext Markup Language version 5

Recommended

3.2

ExtensibleWeb content

XHTMLv1.1

Extensible Hypertext Markup Language version 1.1

Compulsory

3.3

User interface

CSS2

Cascading Style Sheets Language Level 2

Compulsory application of one of thethreestandards

CSS3

Cascading Style Sheets Language Level 3

XSL

Extensible Stylesheet Language version

3.4

Document

(.txt)

Plain Text (.txt) format:for unstructured documents

Compulsory

(.rtf) v1.8,v1.9.1

Rich Text (.rtf)formatv1.8,v1.9.1: for cross-platform document interchange

Compulsory

(.docx)

Microsoft Wordopendocumentformat(.docx)

Recommended

(.pdf) v1.4, v1.5, v1.6, v1.7

Portable Document (.pdf) format v1.4, v1.5, v1.6, v1.7: for read-only documents

Compulsory application of one, two or three standards

(.doc)

Microsoft Worddocumentformat(.doc)

(.odt) v1.2

Open Document Text (.odt) v1.2

3.5

Spreadsheets

(.csv)

Commaseparated Variable/Delimited (.csv)format: for  exchanging data between different applications

Compulsory

(.xlsx)

Microsoft Excelopen XML spreadsheetfile format(.docx)

Recommended

(.xls)

Microsoft Excel spreadsheet file format (.xls)

Compulsory application of one or both standards

(.ods) v1.2

Open DocumentSpreadsheets file format(.ods) v1.2

3.6

Demonstration

(.htm)

Hypertext Document (.htm)format: for presentations exchanged through different types of browser

Compulsory

(.pptx)

Microsoft OpenPowerPoint file format(.pptx)

Recommended

(.pdf)

Portable Document (.pdf) format: forread-onlypresentations

Compulsory application of one, two or three standards

(.ppt)

Microsoft PowerPoint (.ppt) file format

(.odp) v1.2

Open DocumentPresentation(.odp)file formatv1.2

3.7

Graphic image

JPEG

Joint Photographic Expert Group (.jpg)

Compulsory application of one, two,threeor fourstandards

GIF v89a

Graphic Interchange (.gif) version 89a

TIFF

Tag Image File (.tif)

PNG

Portable Network Graphics (.png)

3.8

Georeferenced image

GEO TIFF

Tagged Image File Format for GIS applications

Compulsory

3.9

Moving picture, audio

MPEG-1

Moving Picture Experts Group-1

Recommended

MPEG-2

Moving Picture Experts Group-2

Recommended

MPEG-4

Moving Picture Experts Group-4

Recommended

MP3

MPEG-1 Audio Layer 3

Recommended

AAC

Advanced Audio Coding

Recommended

3.10

Moving picturestream, audiostream

(.asf), (.wma), (.wmv)

Microsoft Windows Media Playerformats(.asf), (.wma), (.wmv)

Recommended

(.ra), (.rm), (.ram), (.rmm)

Real Audio/Real Videoformats(.ra), (.rm), (.ram), (.rmm)

Recommended

(.avi), (.mov), (.qt)

Apple Quicktimeformats(.avi), (.mov),(.qt)

Recommended

3.11

Animation

GIF v89a

Graphic Interchange (.gif) version 89a

Recommended

(.swf)

Macromedia Flashformat(.swf)

Recommended

(.swf)

Macromedia Shockwaveformat(.swf)

Recommended

(.avi), (.qt), (.mov)

Apple Quicktimeformats(.avi),(.qt),(.mov)

Recommended

3.12

Mobile content

WML v2.0

Wireless Markup Language version 2.0

Compulsory

3.13

Character set and encoding

ASCII

American Standard Code for Information Interchange

Compulsory

3.14

Vietnamese character set

TCVN 6909:2001

TCVN 6909:2001 “Information Technology - 16-bit Coded Vietnamese Character Set

Compulsory

3.15

Data compression

Zip

Zip (.zip)

Compulsory application of one or both standards

.gz v4.3

GNU Zip (.gz) version 4.3

3.16

Client-side scripting language

ECMA 262

ECMAScript version 6 (6thEdition)

Compulsory

3.17

Web contentsharing

RSS v1.0

RDF Site Summary version 1.0

Compulsory application of one of the two standards

RSS v2.0

Really Simple Syndication version 2.0

ATOM v1.0

ATOM version 1.0

Recommended

3.18

Network Protocol Standard

JSR 168

Java Specification Requests 168 (Portlet Specification)

Compulsory

JSR286

Java Specification Requests 286 (Portlet Specification)

Recommended

WSRP v1.0

Web Services for Remote Portlets version 1.0

Compulsory

WSRP v2.0

Web Services for Remote Portlets version 2.0

Recommended

4

Informationsecuritystandards

4.1

Email security

S/MIME v3.2

Secure Multi-purpose Internet Mail Extensions version 3.2

Compulsory

OpenPGP

OpenPGP

Recommended

4.2

Transport layer security

SSH v2.0

Secure Shell version 2.0

Compulsory

TLS v1.2

Transport Layer Security version 1.2

Compulsory

4.3

File transfersecurity

HTTPS

Hypertext Transfer Protocol Secure

Compulsory

FTPS

File Transfer Protocol Secure

Recommended

SFTP

SSH File Transfer Protocol

Recommended

4.4

Mailtransfersecurity

SMTPS

Simple Mail Transfer Protocol Secure

Compulsory

4.5

Message access servicesecurity

POP3S

Post Office Protocol version 3 Secure

Compulsory application of one or both standards

IMAPS

Internet Message Access Protocol Secure

4.6

DNS security

DNSSEC

Domain Name System Security Extenssions

Recommended

4.7

Networklayer security

IPsec - IP ESP

Internet Protocol security với IP ESP

Compulsory

4.8

Wireless network security

WPA2

Wi-fi Protected Access 2

Compulsory

4.9

Encryption algorithm

TCVN 7816:2007

Cryptographic technique - Cryptographic algorithms - Data Encryption Algorithm AES

Recommended

3DES

Triple Data Encryption Standard

Recommended

PKCS #1 V2.2

RSA Cryptography Standard - version 2.2

Recommended, usingRSAES-OAEPscheme for encryption

ECC

Elliptic Curve Cryptography

Recommended

4.10

Digitalsignaturealgorithm

PKCS #1 V2.2

RSA Cryptography Standard - version 2.2

Compulsory, using RSASSA-PSS  scheme forsignature

ECDSA

Elliptic Curve Digital Signature Algorithm

Recommended

4.11

Digital signaturehashalgorithm

SHA-2

Secure Hash Algorithms-2

Recommended

4.12

Key transportalgorithm

RSA-KEM

Rivest-Shamir-Adleman - KEM (Key Encapsulation Mechanism) Key Transport Algorithm

Compulsory

ECDHE

Elliptic Curve Diffie Hellman Ephemeral

Recommended

4.13

User authentication solution

SAML v2.0

Security Assertion Markup Language version 2.0

Recommended

4.14

XML message exchange security

XML Encryption Syntax and Processing

XML Encryption Syntax and Processing

Compulsory

XML Signature Syntax and Processing

XML Signature Syntax and Processing

Compulsory

4.15

XML public key management

XKMS v2.0

XML Key Management Specification version 2.0

Recommended

4.16

Personal information securityprotocol

P3P v1.1

Platform for Privacy Preferences Project version 1.1

Recommended

4.17

Public key infrastructure

Recommended

Cryptographic message syntax for signing and encrypting

PKCS#7 v1.5 (RFC 2315)

Cryptographic message syntax for file-based signing and encrypting version 1.5

 

Cryptographic token information syntax

PKCS#15 v1.1

Cryptographic token information syntax version 1.1

Private-key information syntax

PKCS#8 V1.2 (RFC 5958)

Private-Key Information Syntax Standard version 1.2

Cryptographic token interface

PKCS#11v2.20

Cryptographic token interface standard version 2.20

Personal information exchange syntax

PKCS#12 v1.1

Personal Information Exchange Syntax version 1.1

Certificate revocation listformat

RFC 5280

Certificate Revocation List Profile

Digital certificate format

RFC 5280

Public Key Infrastructure Certificate

Certification request syntax

PKCS#10v1.7 (RFC 2986)

Certification Request Syntax Specification version 1.7

On-line Certificate status protocol

RFC 6960

On-line Certificate status protocol

Time stamping protocol

RFC 3161

Time stamping protocol

Time stamping services

ISO/EEC 18014-1:2008

ISO/EEC 18014-2:2009

ISO/EEC 18014-3:2009

ISO/EEC 18014-4:2015

Information technology Security techniques - Time stamping services

Part 1: Framework

Part 2: Mechanisms producing independent tokens

Part 3: Mechanisms producing linked tokens

Part 4: Traceability of time sources

4.18

Web services security

WS-Security v1.1.1

Web Services Security: SOAP Message Security Version 1.1.1

Recommended

4.19

Incident object description exchange format

RFC 7970

The Incident Object Description Exchange Format version 2 (IODEF)

Recommended

 

 


(*)Regarding subjects within thescopeof the Circular No.24/2011/TT-BTTTT, regulations of the Circular No.24/2011/TT-BTTTTshall still apply.

 

Please log in to a subscriber account to see the full text. Don’t have an account? Register here
Please log in to a subscriber account to see the full text. Don’t have an account? Register here
Processing, please wait...
LuatVietnam.vn is the SOLE distributor of English translations of Official Gazette published by the Vietnam News Agency

VIETNAMESE DOCUMENTS

Circular 39/2017/TT-BTTTT DOC (Word)

This utility is available to subscribers only. Please log in to a subscriber account to download. Don’t have an account? Register here

Circular 39/2017/TT-BTTTT PDF (Original)

This utility is available to subscribers only. Please log in to a subscriber account to download. Don’t have an account? Register here

ENGLISH DOCUMENTS

Others
Circular 39/2017/TT-BTTTT DOC (Word)

This utility is available to subscribers only. Please log in to a subscriber account to download. Don’t have an account? Register here

* Note: To view documents downloaded from LuatVietnam.vn, please install DOC, DOCX and PDF file readers
For further support, please call 19006192

SAME CATEGORY

loading