T/CHEAA 0001.2-2019 Smart Home Cloud Connectivity Part 2: Information Security Capabilities Requirements

Scope

Scope: This section stipulates the information security capability requirements for cloud-to-cloud interconnectivity interfaces and related elements between various cloud platforms (hereinafter referred to as "cloud platforms") of associated vendors engaged in cloud-to-cloud interconnectivity business in China, as well as the management requirements for information security incidents, relevant standards and technical regulations, and special requirements for user data and privacy protection. This section does not address the security and privacy requirements for non-cloud-to-cloud interconnectivity services on various cloud platforms. Main technical content: In recent years, with an increasing number of household appliances connected to the Internet and the Internet of Things, many appliance manufacturers' smart cloud platforms have transitioned from private to open and shared, and the associated information security risks have also expanded accordingly. Therefore, it is essential for vendors engaged in cloud-to-cloud interconnectivity to reach consensus on information security requirements. This section addresses the information security risks faced by appliance cloud-to-cloud interconnectivity, proposing information security capability requirements for cloud platform interfaces implemented in cloud-to-cloud interconnectivity, collaborative management mechanisms for security incidents, domestic and international standards and technical regulations that should be met or referenced, and regulations for user data and privacy protection. The aim is to assist enterprises engaged in cloud-to-cloud interconnectivity in establishing consistent information security norms, safeguarding both parties' interests, and curbing security risks arising from shared operations.

Development Information

Related Standards