GB/T 21079.1-2022Financial services - Secure cryptographic devices(retail) - Part 1: Concepts, requirements and evaluation methods (English PDF)

1 Scope

This document specifies the concept of secure encryption devices, as well as the requirements for device security features and device management.

This document applies to the security management of SCD equipment used in retail financial services.

This document does not apply to problems caused by SCD denial of service.

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references

For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 32905 Information Security Technology SM3 Cryptographic Hash Algorithm

GB/T 32907 Information Security Technology SM4 Block Cipher Algorithm

GB/T 32918 Information Security Technology SM2 Elliptic Curve Public Key Cryptography Algorithm

ISO 11568-1 Banking key management (retail) Part 1.General principles (Banking-Keymanagement

Note. GB/T 27909.1-2011 Banking Key Management (Retail) Part 1.General Principles (ISO 11568-1.2005, MOD)

ISO 11568-2 Key management for financial services (retail) Part 2.Symmetric cryptography and its key management and life cycle lifecycle)

Note. GB/T 27909.2-2011 Banking key management (retail) Part 2.Symmetric cryptography and its key management and life cycle (ISO 11568-2.2005, MOD)

ISO 11568-4 Key management for banking services (retail) Part 4.Asymmetric cryptosystems and their key management and life cycle cycle)

Note. GB/T 27909.3-2011 Banking Key Management (Retail) Part 3.Asymmetric Cryptosystem and Its Key Management and Life Cycle (ISO 11568-4.2007, MOD)

3 Terms and Definitions

The following terms and definitions apply to this document.