T/EMCG 001.5-2019 Mobile Smart Device Password Module Technical Framework Part 5: Security Chip-based Technical Architecture
T/EMCG 001.5-2019 Mobile Smart Device Password Module Technical Framework Part 5: Security Chip-based Technical Architecture
Basic Information
Scope
Scope: This part of T/ZISIA-EMCG 001-2019, "Technical Framework for Cryptographic Modules in Mobile Smart Terminals", specifies the technical architecture of cryptographic modules (CMMST-BSC) based on security chips used in mobile smart terminals (MST). It presents the security principles and safeguard measures of the solution, describes the components of the technical architecture, provides examples of the main workflows, and describes the 11 security domains specified in GM/T 0028-2014. This specification is applicable to guiding cryptographic module manufacturers in designing and implementing cryptographic modules for mobile smart terminals, and can also be used as a reference for using cryptographic modules in mobile smart terminals. Main technical contents: 1. Overview 2. Technical Architecture 2.1 MST-CC SDK 2.2 Cryptographic Function TA 2.3 Security Chip 2.4 Physical Protection Components of Cryptographic Modules 3. Examples of Main Workflows 4. Specifications of Cryptographic Modules 5. Interface of Cryptographic Modules 6. Roles, Services, and Authentication 7. Software/Firmware Security 8. Requirements for the Operating Environment 9. Physical Security 10. Non-Intrusive Security 11. Management of Sensitive Security Parameters 12. Self-Test 13. Lifecycle Assurance 14. Mitigation of Other Attacks Appendix AA.1 Application Requirements A.2 Application Platform A.3 Application of Cryptographic Modules A.4 Application of Certificate Management A.5 Application of Communication Encryption