T/GDFCA 037-2022 Active

Scope: This standard introduces the terms and definitions, guidelines, test methods, and test content for the security testing of food traceability systems based on blockchain technology. This standard applies to the security testing of food traceability systems based on blockchain technology. Main technical content: Considering the diversity of food traceability system businesses, this standard only specifies the minimum security indicators for the system. a) Ledger data security: Encrypt and transmit privacy-sensitive ledger data, and provide integrity verification. b) Cryptographic algorithm security: Use symmetric, asymmetric, and digest encryption algorithms recognized by national secret management authorities. c) Consensus algorithm security: Provide formal verification of consensus algorithms and code audit reports, and ensure that all nodes participating in consensus can achieve consistent results within a specified timeframe. d) Smart contract security: Have control mechanisms for user access, inter-smart contract access, and external data access. e) Network security: Have authentication functions and ensure communication integrity and confidentiality. f) Application security: Have user identity authentication mechanisms, access control strategies, intrusion prevention, security audits, and malicious code prevention functions, and guarantee the integrity and confidentiality of application data.