T/CCUA 028-2024 Process industrial enterprises, industrial internet data security assurance, and password application requirements
T/CCUA 028-2024 Process industrial enterprises, industrial internet data security assurance, and password application requirements
Basic Information
Scope
Scope: This standard specifies the application principles, application framework, general requirements, technical requirements, and management requirements for the application of cryptography in industrial internet data of process industry enterprises. This standard is applicable to guiding the planning, construction, operation, and evaluation of cryptography applications for data security in process industry enterprises' industrial internet. Main technical content: This document proposes technical requirements for cryptography applications from five stages of the data life cycle in process industry enterprises' industrial internet: data collection, data transmission, data storage, data processing, and data exchange, as well as strategy management throughout the data life cycle to ensure the authenticity of network entity identities, the confidentiality and integrity of important data, and the non-repudiation of operational behaviors. It also proposes management requirements for cryptography applications from five aspects: management system, personnel management, construction and operation, emergency response, and application evaluation, providing management-level cryptography application security guarantees for data security in process industry enterprises' industrial internet.