GB/T 20271-2006Information security technology Common security techniques requirement for information system (English PDF)

3.1 Terms and Definitions

For the purposes of this Standard, the terms and definitions specified in GB 17859-1999 AND those listed below apply.

3.2 Abbreviations

For the purpose of this Standard, the following abbreviations apply.

CM. configuration management

CMS. configuration management system

PP. protection profile

SFP. security function policy SSC SSF. SSF scope of control SSF SSOIS. SSOIS security function SSP SSOIS. SSOIS security policy

SSOIS. security subsystem of information system

ST. security target

4.1 Physical Security

4.1.1 Environmental Security

4.1.1.1 Security protection for central machine room

4.2 Operation Security

4.2.1 Risk Analysis

The risk analysis of information system shall be carried out according to the following requirements. […]

4.2.4 Security Audit

4.2.4.1 Response of security audit

Security audit SSF shall respond to audit event according to the following requirements. […]

4.2.4.2 Generation of security audit data

Audit data shall be generated by security audit SSF according to the following requirements. […]

4.2.4.3 Security audit analysis

According to different requirements on security audit, security audit analysis is divided into.

4.2.6 Backup and Fault Recovery

In order to realize the defined recovery function, periodic backup or backup according to certain conditions must be carried out under normal operation of information system.

Different recovery requirements shall be supported with different backup. According to different requirements on operation security of information system, security technology and mechanism for the realization of backup and fault recovery are divided into.

4.2.9 Trusted Computing and Trusted Connecting Technology

4.3 Data Security

4.3.1 Identity Authentication

4.3.1.1 User identification and authentication

4.3.1.4 Equipment identification and authentication

4.3.1.4.1 Equipment identification

According to different requirements on equipment identification and authentication, equipment identification is divided into.

4.3.3.4 Granularity of access control

According to the different requirements of access control, granularity of discretionary access control is graded into.

4.3.9 Trusted Path

Trusted path between the user and SSF shall.

5.1 SSOIS Self-security Protection

5.1.1 SSF Physical Security Protection

5.1.2 SSF Operation Security Protection

5.1.2.1 Security operation test

SSF shall provide security operation test for SSF software periodically under normal operation, as required by the authorized user or under other conditions, through operating test suit during the system initialization, so as to verify that the security assumption provided by SSF can be executed correctly.

5.1.2.5 Domain separation

SFP shall ensure at least a security domain to protect SSF implementation from external interference and tampering (e.g. modify the SSF code or data structure) by the untrusted subject. According to the different requirements of SSF operation security protection, domain separation is graded into.

5.1.3 SSF Data Security Protection

5.1.3.1 Availability of output SSF data

The availability of SSF data (like password, secret key, audit data or executable code of SSF) which are output from SSF to that of remote information system is ensure within the scope of defined measurement of availability through a series of rules, as indicated in the type list of SSF data.

5.1.3.2 Confidentiality of output SSF data

SSF data (like password, key, audit data or executable of SSF) shall be protected from unauthorized leakage where it is output from SSF to that of remote information system.

5.1.3.4 Protection for SSF data transport in SSOIS

SSF data transported between separated parts in SSOIS shall be protected. According to the different security protection requirements of SSF data, protection for SSF data transport in SSOIS is graded into.

5.1.3.5 SSF data consistency between SSFs

In the distributed or composite system environment, the capability ensuring the consistency of data between SSFs shall be provided where SSF exchanges SSF data with SSF of other information system (e.g. SFP attribute, audit information, identification information etc.).

5.1.3.8 Trusted channel among SSF

A trusted channel of data transport shall be provided between SSF and that of remote information system in order to protect communication data against the modification and leakage; meanwhile, the communication originated by SSF or that of remote information system through the trusted channel shall be allowed, supporting the communication which is originated by various functions listed in the function list and passes through the trusted channel.

5.1.4 SSOIS Resources Utilization

5.2 SSOIS Design and Realization

5.2.1 Configuration Management

5.2.2 Distribution and Operation

5.2.2.1 Distribution

SSOIS product received by the receiving party shall be ensured to be transported by the very sender without any modification, the primary objective is to test SSOIS and avoid any modification to it in the process of distribution. According to different requirements of distribution and operation, distribution is graded into.

5.2.2.2 Operation (installation, generation and start)

It shall be ensured that installation, generation and start is carried out in the security mode which is expected by developer, and realization expression of SSOIS under the control of configuration is securely converted to initial operation in the user environment. The installation, generation and start process may be described in an independent document. According to different requirements of distribution and operation, operation is graded into.

5.2.3 Development

5.2.3.1 Function design

According to the requirements of formalization degree and detail degree of the provided SSF external interface, and different requirements of development, function design is graded into.

6.1 Level-1.the User's Discretionary Protection Level

6.1.1 Physical Security

6.1.1.1 Environmental security

6.1.2 Operation Security

6.1.2.1 Risk analysis

The risk analysis is carried out according to the requirements of 4.2.1 for the determination of overall security requirements of information system; security technology and security management measures shall be taken for the confidentiality, integrity and availability determined to be required for the realization of the user's discretionary protection level based on the requirements of the user's discretionary protection level on physical security, operation security and data security.

6.1.2.5 Malicious code protection

The malicious code protection function is designed and realized according to the requirements of strict management in 4.2.7.

6.1.2.6 Emergency handling of information system

The emergency plans and measures are designed and developed in combination with specific requirements of the user's discretionary protection level on information system according to the requirements of taking various security measures in 4.2.8 to define measures which shall be taken where various conditions occur to the information system.

6.1.3 Data Security

6.1.3.1 Identity authentication

6.2.1.2 Equipment security

The equipment security function is designed and realized according to the requirements of 4.1.2. The security protection level requires to.

6.2.1.3 Record medium security

Record medium security protection function is designed and realized according to the requirements of internal data medium protection in 4.1.3.

6.2.2 Operation Security

6.2.2.1 Risk analysis

The risk analysis is carried out according to the requirements of 4.2.1 for the determination of overall security requirements of information system; security technology and security management measures shall be taken for the confidentiality, integrity and availability determined to be required for the realization of system audit protection level based on the requirements of system audit protection level on physical security, operation security and data security. […]

6.2.5 SSOIS Design and Realization

6.3 Level-3.Security Label Protection Level

6.3.1 Physical Security

6.3.1.1 Environmental security

6.4 Level 4.Structured Protection Level

6.4.1 Physical Security

6.4.1.1 Environmental security

6.5 Level-5.Access Verification Protection Level

6.5.1 Physical Security