T/SSIA 0002-2018 Blockchain technology security general specification

Scope

Scope: This specification applies to the design, development, maintenance, and testing of blockchain technologies. Main technical content: On December 15, 2016, the State Council issued the "Thirteenth Five-Year Plan for National Informatization", which for the first time included "blockchain" alongside other new technologies such as the Internet of Things, cloud computing, big data, artificial intelligence, machine deep learning, and biotechnology in the plan. It proposed to leverage these new technologies to drive the evolution of cyberspace from human-to-human connectivity to everything-to-everything connectivity, achieving digitalization, networking, and intelligent services. Therefore, "blockchain", as a new technology supported by the state, will be widely applied in smart city construction. While blockchain technology is gaining widespread adoption, attention must be paid to the security risks posed by its application. Based on an in-depth analysis of the security risks inherent in blockchain technology, this specification sets forth general security requirements for open-architecture blockchain technologies, which are of great significance for promoting the healthy development of blockchain technology and ensuring its secure application. This specification proposes corresponding technical security requirements based on the different layers of the blockchain technology architecture. At the same time, in accordance with the principle of appropriate protection, based on the sensitivity of the information involved in blockchain applications and the importance of their business functions, this specification uses terms such as "should" and "may" to distinguish between basic requirements and enhanced requirements, in order to meet the security needs of different blockchain applications. This specification is divided into eight chapters. It should be noted that Chapter 5 proposes blockchain security risks and response requirements, while Chapters 6 to 9 elaborate o

Development Information

Related Standards