T/EMCG 001.3-2019 Active Group standards

T/EMCG 001.3-2019 Mobile Smart Terminal Password Module Technical Framework Part 3: Key Encryption Server Protection Technical Architecture

Publish Date: 2019-06-20 Implement Date: 2019-08-01 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/EMCG 001.3-2019

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Data encryption

ICS Name: Terminology (principles and coordination and cooperation)

Publish Date: 2019-06-20

Implement Date: 2019-08-01

Scope

Scope: This standard applies to cryptographic modules in mobile terminals that adopt key encryption server-side protection technologies. It specifies their technical framework and workflow, based on the specifications of cryptographic modules defined in GM/T 0028-2014, including cryptographic module interfaces, roles, services, and authentication, software/firmware requirements, operating environment requirements, physical security of cryptographic modules, non-intrusive security, sensitive data management, self-testing, lifecycle assurance, and mitigation of other attacks. It also provides specific specifications and application examples. This standard is a detailed expansion and supplementation of GM/T 0028-2014 for implementing cryptographic modules on mobile intelligent terminals. It is applicable to guiding cryptographic module manufacturers in designing and implementing cryptographic modules for mobile intelligent terminals. It can also serve as a reference for users who use cryptographic modules. Main technical content: 1. Overview 1.1 Principle of the solution 1.2 Security risks 1.3 Security measures 2. Technical architecture 3. Main workflow 4. Cryptographic module specifications 5. Cryptographic module interfaces 6. Roles, services, and authentication 7. Software/firmware security 8. Operating environment 9. Operating system requirements for modifiable operating environments 10. Physical security of cryptographic modules 11. Non-intrusive security 12. Management of sensitive security parameters 13. Self-testing 14. Lifecycle assurance 15. Mitigation of other attacks