T/ZSA 67.4-2019 Mobile intelligent terminal password module technical framework Part 4: Key multi-end collaborative computing protection technology architecture
T/ZSA 67.4-2019 Mobile intelligent terminal password module technical framework Part 4: Key multi-end collaborative computing protection technology architecture
Basic Information
Scope
Scope: This part of T/ZSA 67-2019, "Technical Framework for Cryptographic Modules in Mobile Intelligent Terminals", specifies the technical architecture of key multi-terminal collaborative computing protection in mobile intelligent terminals, the main workflow, and the specific requirements for each security domain to meet the standards of GM/T 0028-2014. This specification is a specific expansion and supplementation of GM/T 0028-2014 for implementing cryptographic modules in mobile intelligent terminals. It is suitable for guiding cryptographic module manufacturers in designing and implementing cryptographic modules for mobile intelligent terminals, and can also be used as a reference for mobile intelligent terminals that use cryptographic modules. Main technical content: The security of cryptographic technology not only depends on the security of the algorithm itself, but also on the correct implementation of the algorithm and the reliable protection of security parameters. In the environment of open mobile networks and portable mobile terminal systems, how to safely design, implement, and use cryptographic modules, and how to protect sensitive security parameters have become the core issues in the design and implementation of cryptographic modules for mobile intelligent terminals. To solve the problem of the lack of a reliable key protection environment in mobile intelligent terminals, a key multi-terminal collaborative computing mechanism is introduced, where two or three terminals collaborate to generate the user's SM2 private key, which is independently stored by each party. This mechanism collaboratively completes cryptographic operations such as digital signature, ensuring the security of the user's private key in mobile intelligent terminals and meeting the requirements of the GM/T 0028-2014 standard.