T/ZSA 67.3-2019 Active Group standards

T/ZSA 67.3-2019 Mobile intelligent terminal password module technology framework Part 3: Key encryption service server protection technical architecture

Publish Date: 2019-12-31 Implement Date: 2020-03-01 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/ZSA 67.3-2019

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Information processing technology

ICS Name: Integrated Information Technology (IT)

Publish Date: 2019-12-31

Implement Date: 2020-03-01

Scope

Scope: This standard applies to cryptographic modules of mobile terminals that adopt key encryption server-side protection technology, and specifies their technical framework and workflow. It is based on the specifications of cryptographic modules in GM/T 0028-2014, including cryptographic module interfaces, roles, services and authentication, software/firmware requirements, operating environment requirements, physical security of cryptographic modules, non-intrusive security, sensitive data management, self-testing, life cycle assurance, and mitigation of other attacks, etc. It provides specific specifications and application examples. This standard is a specific expansion and supplement to GM/T 0028-2014 for implementing cryptographic modules on mobile intelligent terminals, and is suitable for guiding cryptographic module manufacturers in designing and implementing cryptographic modules for mobile intelligent terminals. It can also be used as a reference for users who use cryptographic modules. Main technical content: In the environment of open mobile networks and portable mobile terminals, how to safely design, implement, and use cryptographic modules, and how to protect sensitive security parameters have become the core issues in the design and implementation of cryptographic modules for mobile intelligent terminals. Encrypting and storing sensitive security parameters in mobile intelligent terminals is the main method to address the security of software cryptographic modules. To prevent the loss of encryption keys or encrypted key data from posing a threat to the security of sensitive security parameters, this standard adopts the method of binding the personal feature data of mobile terminal users with encryption keys and storing the encrypted key ciphertext on the server side to ensure the security of sensitive security parameters of cryptographic modules.