T/GHDQ 79-2021 The security technical requirements for smart connected vehicle password module

Scope

Scope: This document specifies the system architecture, system functions, system design, business processes, and technical requirements for cryptographic algorithms, cryptographic devices, and cryptographic service interfaces used in the construction of intelligent connected vehicles. This document is applicable to the design, construction, operation, and management of cryptographic modules based on cryptographic technology in the field of intelligent connected vehicles, and standardizes the application of cryptographic modules in the field of intelligent connected vehicles. Main technical content: This technical requirement is primarily based on the national standard GB/T 37092 "Information Security Technology - Security Requirements for Cryptographic Modules", combined with the actual application needs of intelligent connected vehicles in China and the practical experience of product manufacturers, to define the security functions that cryptographic modules should carry in the field of intelligent connected vehicles and the security technical requirements of the modules themselves. In the definition of security functions, combined with the business scenarios of intelligent connected vehicles, the cryptographic modules may carry functions such as key pair generation, certificate lifecycle management, identity authentication, digital signature/verification, encryption/decryption, etc. In the security technical requirements of the modules themselves, firstly, the security level of the cryptographic modules is defined. After the security level is clearly defined, its own security requirements are defined from the aspects of general requirements, module specifications, interfaces, software and firmware security, operating environment, and sensitive security parameter management, etc.

Development Information

Related Standards