GB/T 31507-2015Information security technology—General testing guide for security of smart card (English PDF)
信息安全技术 智能卡通用安全检测指南
This is a limited preview
Buy now to download the full PDF (42 pages)
Need quotation for your management?
Get a formal quotation for GB/T 31507-2015 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
May 15, 2015
Implementation date
January 1, 2016
Scope
GB/T 31507-2015 is the English-translated version of 信息安全技术 智能卡通用安全检测指南.
GB/T 31507-2015 is a guide that specifies the general process and the general methods for the security testing of smart card products. Clause 1 states that it applies to the security testing, assessment and certification of smart cards.
Clause 3 gives the terms, definitions and abbreviations, among them the smart card itself, the smart card product, described as an integrated circuit chip carrying a central processing unit together with a chip operating system, whether in standard card form or not, and the independent security function test, carried out by the evaluator or by a qualified laboratory on a sampled subset of the smart card security feature set with reference to the developer documentation and test resources.
The clause on the general matters of smart card security testing then covers the general model of the item under test, the subject and object of the detection, its purposes, the test basis, the test content, the detection elements and the detection process, and is followed by clauses on security feature verification, on permeability detection with its preparation, its implementation, its examples and its test report, and on the test report itself, including the main contents of the report and the scale used to describe attack scenarios.
Six informative appendices give the smart card security feature set, the smart card attack methods, a smart card security detection frame, an example file structure for a test programme, templates for customized detection schemes, and the laboratory preparation and start-up phase, while the normative Appendix G classifies the security testing of smart cards.
Clause 2 cites GB/T 20276-2006 and GB/T 22186-2008 on the security technology requirements for smart card embedded software and for integrated circuit card chips with a central processor, and CCDB-2008-04-001 on the application of attack potential to smart cards.
The foreword records that the standard is centralized by the National Information Security Standardization Committee (SAC/TC260), and the draft published on the page breaks off inside clause 3. It was issued on 15 May 2015 and has applied since 1 January 2016.
Found what you need?
Document preview — GB/T 31507-2015
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms, Definitions and Abbreviations
- 4 3 General safety testing smart cards
- 4.1 General model under test piece
- 4.2 Subject and Object Detection
- 4.3 detection purposes
- 4.4 Test basis
- 5 4.5 test content
- 4.6 detection element
- 4.7 detection process
- 5 security features verification
- 5.1 Overview
- 5.2 implementation instructions
- 5.3 implementation of the content
- 6 permeability detector
- 6.1 Overview
- 6.2 Preparation for testing permeability
- 6.3 permeability detection embodiment
- 6.4 permeability detection Example
- 6.5 Permeability Test Report
- 7 15 test reports
- 7.1 Overview
- 7.3 attack scenario described scale
- Appendix A (informative) smart card security feature set
- Annex B (informative) smartcard attack method
- Annex C (informative) smart card security detection frame
- Annex D (informative) Program for testing the theme file structure Example
- Annex E (informative) detection scheme template customization services
- Annex F (informative) Laboratory and ready to start
- Annex G (normative) Classification of safety testing smart card
- References
- 2 open structure Figure 3 smart card products The basic structure of the smart card chip 3 of
- 5 detection process
- 6 security features verification. input, process and output
- 7 security features to verify the main content of
- 10 independent security function tests. input, process and output
- 11 permeability detection. input, methods, tools, techniques and output
- 12 permeability detection process
Foreword
This standard was drafted in accordance with GB/T 1.1-2009 given rules.
1 Scope
This standard specifies the general process and methods of smart card products for safety testing.
This standard applies to smart card security testing assessment and certification.
2 Normative references
The following documents for the application of this document is essential. For dated references, only the dated version suitable for use herein Member. For undated references, the latest edition (including any amendments) applies to this document.
GB/T 20276-2006 Information security technology security technology smart card embedded software requirements (EAL4 enhanced level)
Integrated circuits GB/T 22186-2008 Information security technology has a central processor (IC) card chip security technology requirements (assessment Ensure enhanced level 4)
CCDB-2008-04-001 attack potential applications of smart cards (ApplicationofAttackPotentialtoSmartcardsV.2.5)
3 Terms, definitions and abbreviations
3.1 Terms and Definitions
The following terms and definitions apply to this document.
3.1.1 Smart card
An integrated circuit having a central processing unit (CPU) (IC) card, is a central processor having an integrated circuit chip embedded in a plastic Substrate, and packaged into card form.
Note: From the data transmission can be divided into contactless smart card and contactless smart cards.
3.1.2 Smart card products
An integrated circuit chip having a CPU and chip operating system, smart card, and includes a non-standard form, but also an integrated circuit having a CPU Chip and chip operating system products.
NOTE: The standard form of smart card products and technical specifications are GB/T 14916-2006 and GB/T 16649 national standards and ISO /IEC 7816, ISO /IEC 14443 international standards required; smart card products as a whole as measured by a composite of pieces.
3.1.3 Independent security function tests
It is carried out independently by the evaluator (or delegate specialized laboratories qualified) but according to the developer's reference and text function tests Files and (or) the use of the developer's testing resources, a subset of smart card security feature set and the detected document (see Appendix A) sampling performed Safety function tests.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 42 pages — is available in the English PDF.
Referenced standards
Similar standards
How to Download GB/T 31507-2015
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 20276-2006 — Information security technology -- Security requirements for embedded software in IC card with CPU
GB/T 10003-2026 — Biaxially oriented polypropylene (BOPP) film
GB/T 10004-2026 — Plastic/Plastic laminated films and pouches for packaging
Secure payment via Stripe
Payments accepted
GB/T 31507-2015
$570.00