T/ZSA 67.2-2019 Mobile Smart Device Password Module Technical Framework Part 2: Key Encryption and Local Protection Technical Architecture

Scope

Scope: This part of T/ZSA 67-2019, "Technical Framework for Cryptographic Modules in Mobile Smart Terminals", specifies the technical architecture of the Cryptographic Module for Mobile Smart Terminals (CMMST-KELP) used for local protection of key encryption in mobile smart terminals (MST). It provides the security principles and safeguard measures of the solution, describes the components of the technical architecture, examples of the main workflow, and a description of the 11 security domains specified in GM/T 0028-2014. Finally, it provides application examples. This standard is a specific expansion and supplementation of GM/T 0028-2014 for implementing cryptographic modules in mobile smart terminals. It is suitable for guiding cryptographic module manufacturers in the design and implementation of cryptographic modules for mobile smart terminals. It can also be used as a reference for mobile smart terminals that use cryptographic modules. Main technical content: In the environment of open mobile networks and portable mobile terminal systems, how to protect sensitive security parameters has become the core issue in the design and implementation of cryptographic software modules for mobile smart terminals. Encrypting and storing sensitive security parameters in mobile smart terminals is the main method to ensure the security of software cryptographic modules. However, if the encryption key is easily obtained illegally or the quality of the key does not meet the requirements, it will pose a threat to the security of sensitive security parameters. Therefore, this standard controls the safe generation and use of the master key to ensure the security of the encryption key for sensitive security parameters.

Development Information

Same series standard

Related Standards