T/ZSA 67.1-2019 Mobile Smart Device Password Module Technical Framework Part 1: General Principles
T/ZSA 67.1-2019 Mobile Smart Device Password Module Technical Framework Part 1: General Principles
Basic Information
Scope
Scope: This part of T/ZSA 67-2019, "Technical Framework for Cryptographic Modules in Mobile Smart Terminals", defines the scope of mobile smart terminals (MST) and cryptographic modules for mobile smart terminals (CMMST); lists the cryptographic application scenarios of MST and the security threats of CMMST, and clarifies the security objectives that CMMST must achieve in design and implementation; and provides the security model and security assurance of CMMST. This part is an overview of the background and principles of other parts of T/ZSA 67-2019, and is suitable for guiding the preparation of other parts of T/ZSA 67-2019. Main technical content: In the application of mobile Internet technology, cryptographic technology is used to prevent data leakage and tampering, and to achieve entity authentication and behavioral resistance to tampering. However, improper use of cryptographic technology can render its security function ineffective and affect the security of the application system. The security of cryptographic technology depends on the correct implementation of algorithms and the protection of sensitive security parameters of cryptographic modules. In the environment of open mobile networks and portable mobile terminal systems, how to design, implement, and use cryptographic modules, and how to protect sensitive security parameters have become the core issues in the design and implementation of cryptographic modules for mobile smart terminals. T/ZSA 67-2019, "Technical Framework for Cryptographic Modules in Mobile Smart Terminals", specifies several cryptographic module technical architectures used in mobile smart terminals (MST).