T/SZSSIA 003-2020 IoT device access control and monitoring system technical requirements
T/SZSSIA 003-2020 IoT device access control and monitoring system technical requirements
Basic Information
Scope
Scope: This document specifies the design requirements, system composition, technical requirements, installation and deployment, and document provision for the access control and monitoring system for IoT sensing layer devices. This document is applicable to the IoT sensing layer device access control and monitoring system deployed without changing the existing network structure, and it guides the selection, deployment, operation, and maintenance of IoT application systems. Main technical content: The system should establish the sensing layer devices as the core, from the sensing layer devices to the network boundary, from the network boundary to network behavior, and from network behavior to business applications, covering the physical layer, data link layer, network layer, transport layer, and application layer; complete asset inventory, status monitoring, security protection, and behavior monitoring to ensure the trustworthiness of networked devices, application services, and network traffic, and fully guarantee terminal security, application security, data security, system and network security, and operational compliance. The system consists of two types of physical devices: detection engines and collection engines. The detection engine is used to discover and identify sensing layer devices and report device information to the collection engine; the collection engine is used to collect network traffic, build behavioral models, and conduct network behavior analysis. The basic functions of the system include device discovery and identification, device access control, device status monitoring, terminal device analysis, application discovery and identification, IP address management, terminal access control, boundary security protection, network topology mapping, abnormal behavior monitoring, and security situation display, etc.