GB/T 20276-2016Information security techniques—Security technical requirements for IC card chip with CPU (English PDF)
信息安全技术 具有中央处理器的IC卡嵌入式软件安全技术要求
This is a limited preview
Buy now to download the full PDF (27 pages)
Need quotation for your management?
Get a formal quotation for GB/T 20276-2016 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
August 29, 2016
Implementation date
March 1, 2017
Scope
GB/T 20276-2016 is the English-translated version of 信息安全技术 具有中央处理器的IC卡嵌入式软件安全技术要求.
GB/T 20276-2016 is the Chinese standard "Information security techniques—Security technical requirements for IC card chip with CPU".
Its scope clause reads: This standard specifies the security requirements for the security protection of embedded software in IC card with CPU of EAL4 enhanced level and EAL5 enhanced level, including the security problem definition, security objectives, security requirements, rationale, etc. This standard is applicable to the testing, evaluation and procurement of embedded software products in IC card with CPU, and may also be used to guide the research and development of such products. Its clauses include terms, definitions and abbreviations.
Found what you need?
Document preview — GB/T 20276-2016
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
- Replacing
- GB/T 20276-2006
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword i
- Introduction iii
- 1 Scope
- 2 Normative references
- 3 Terms, definitions and abbreviations
- 3.1 Terms and definitions
- 3.2 Abbreviations
- 4 Descriptions of embedded software in IC card
- 5 Security problem definition
- 5.1 Assets
- 5.2 Threats
- 5.3 Organizational security policies
- 5.4 Assumptions
- 6 Security objectives
- 6.1 Security objectives for the TOE
- 6.2 Security objective for environment
- 7 Security requirements
- 7.1 Security functional requirements
- 7.2 Security assurance requirements
- 8 Rationale
- 8.1 Rationale of security objectives
- 8.2 Rationale of security requirements
- 8.3 Component dependencies
- Bibliography
1 Scope
This standard specifies the security requirements for the security protection of embedded software in IC card with CPU of EAL4 enhanced level and EAL5 enhanced level, including the security problem definition, security objectives, security requirements, rationale, etc.
This standard is applicable to the testing, evaluation and procurement of embedded software products in IC card with CPU, and may also be used to guide the research and development of such products.
2 Normative references
The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.
GB/T 18336 (All parts) Information technology - Security techniques - Evaluation criteria for IT security
GB/T 25069-2010 Information security technology - Glossary
3 Terms, definitions and abbreviations
3.1 Terms and definitions
For the purposes of this document, the terms and definitions given in GB/T 25069-2010, GB/T 18336.1 and the followings apply.
3.1.1 personalization data
data written in the personalization process of embedded software in IC card, which is used to configure parameters related to specific applications or users
3.2 Abbreviations
For the purposes of this document, the following abbreviations apply.
CM: Configuration Management
EAL: Evaluation Assurance Level
EEPROM: Electrically-Erasable Programmable Read-only Memory
IC: Integrated Circuit
I/O: Input/Output
RAM: Random-Access Memory
ROM: Read-Only Memory
ST: Security Target
TOE: Target of Evaluation
TSF: TOE Security Functionality […]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 27 pages — is available in the English PDF.
Referenced standards
Cited by
- GB/T 44086.1-2024Information interface for BDS-3 regional short message communication user terminal - Part 1: User management module interface
- GB/T 31507-2015Information security technology—General testing guide for security of smart card
- JT/T 825.13-2012IC card license for road transportation. Part 13: Testing of IC card and equipment
Similar standards
Editions of GB/T 20276
| Edition | Title | Revision | Status |
|---|---|---|---|
| GB/T 20276-2016 | Information security techniques—Security technical requirements for IC card chip with CPU | current edition | Current |
| GB/T 20276-2006 | Information security techniques—Security technical requirements for IC card chip with CPU | previous edition | Superseded |
This page sells the current edition, GB/T 20276-2016. Earlier editions are listed for reference only.
How to Download GB/T 20276-2016
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 10003-2026 — Biaxially oriented polypropylene (BOPP) film
GB/T 10004-2026 — Plastic/Plastic laminated films and pouches for packaging
GB/T 10007-2026 — Rigid cellular plastics - Determination of shear properties
Secure payment via Stripe
Payments accepted
GB/T 20276-2016
$485.00