GA/T 1390.3-2017Information security technology—General requirements for classified protection of cyber security—Part 3: Special security requirements for mobile interconnection (English PDF)

Foreword

GA/T 1390 "Information Security Technology Network Security Level Protection Basics" has been or is planned to release the following sections.

--- Part 1. General requirements for safety;

--- Part 2. Cloud computing security extension requirements;

--- Part 3. Mobile Internet Security Extension Requirements;

--- Part 4. IoT Security Extension Requirements;

--- Part 5. Industrial control safety requirements for expansion;

--- Part 6. Big Data Security Extensions Requirements.

This part is the third part of GA/T 1390.

This section drafted in accordance with the specifications given GB/T 1.1-2009.

This section proposed by the Ministry of Public Security Cyber Security.

This part of the Ministry of Public Security Information System Security Standardization Technical Committee proposed and centralized.

This section drafted unit. Beijing Ding Pu Technology Co., Ltd., Ministry of Public Security Institute of the Third, Beijing University of Technology, Industrial Control System Security Engineering National Engineering Laboratory.

Introduction

In order to adapt to the mobile Internet, cloud computing, big data, Internet of Things and industrial control and other new technologies, the new application of information security level protection Work carried out, the Ministry of Public Security Information System Security Standardization Technical Committee proposed for the mobile Internet, cloud computing, big data, Internet of Things and industry Control and other new technologies, new applications to develop a series of public safety industry standards.

This section is targeted at the level of protection of objects using the mobile Internet technology part of the proposed security extension requirements, so the level of protection required at the same time comply with GB/T 22239 safety general requirements.

The future may add new sections as technology changes to address specific areas of security extension requirements.

Information Security Technology Network Security Level Protection Basics Requirements Part 3. Mobile Internet Security Extensions Requirements

1 Scope

This part of GA/T 1390 specifies the basic protection requirements for the protection of different levels of protection using mobile Internet technology.

This section applies to guide the classification of non-classified security level object of security construction and supervision and management.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version applies to this article Pieces. For undated references, the latest edition (including all amendments) applies to this document.

Computer Information Systems - Security Protection Classification Guidelines GB/T 22239 Information security technology Information system security level protection basic requirements Information security technology information system security level protection grading guide Information technology - Security terminology

3 Terms and definitions

GB 17859-1999, GB/T 22239, GB/T 22240 and GB/T 25069-2010 as defined by the following terms and definitions suitable Used in this document.

Mobile terminal mobiledevice Terminal equipment used in the mobile service includes general purpose terminals such as smartphones, tablets and personal computers, and dedicated terminal equipment.

Wireless access device the use of wireless communication technology to mobile terminals access wired network communications equipment.

Note. The wireless access equipment in this standard does not include public wireless access equipment (such as public WiFi, carrier base stations, etc.).

Wireless access gateway Deployed between the wireless network and the wired network, the wired network security equipment.

Mobile application the application software developed for the mobile terminal includes the application software preset by the mobile terminal and the application software provided by the Internet information service provider Third-party applications that are downloaded, installed, and upgraded through mobile application distribution platforms such as websites and application stores.

Mobile terminal management system mobiledevicemanagementsystem Dedicated software for mobile device management, application management and content management, including client software and server software.