GB/T 33565-2024Cybersecurity technology - Security technology requirements for wireless local area network access system (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1:1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting: This document replaces GB/T 33565-2017 "Information Security Technology Wireless LAN Access System Security Technical Requirements (Assessment Level Compared with GB/T 33565-2017, in addition to structural adjustments and editorial changes, the main technical changes are as follows:

a) The scope of TOE has been changed (see Chapter 5 and Chapter 6 of the:2017 edition);

b) Modified the threats faced by wireless LAN access systems, including 15 types of threats, 3 organizational security policies and 8 assumptions (see Chapter 6 of the:2017 edition, Chapter 7 of the:2017 edition);

c) Changed "TOE security objectives" and "Environmental security objectives", including 11 TOE security objectives and 9 environmental security objectives (See Chapter 7, Chapter 8 of the:2017 edition);

d) Changed the security function requirements for wireless LAN access systems, including 81 security function requirements in 10 categories (see 8:1,:2017 edition) Chapters 9 and 10 of the );

e) According to the development of wireless LAN access system technology, the latest security requirements have been changed (see 8:2, 9:2 of the:2017 edition);

f) Added "Basic Principles", including the correspondence between security issues and security objectives, security objectives and security requirements, and between components: Dependencies (see Chapter 9): Please note that some of the contents of this document may involve patents: The issuing organization of this document does not assume the responsibility for identifying patents: This document was proposed and coordinated by the National Cybersecurity Standardization Technical Committee (SAC/TC260): This document was drafted by: China Information Security Evaluation Center, Information Engineering Institute of the Chinese Academy of Sciences, CRRC Industrial Research Institute Co:, Ltd:, Beijing Jiaotong University, Huawei Technologies Co:, Ltd:, Xi'an Xidian Jietong Wireless Network Communications Co:, Ltd:, the First Research Institute of the Ministry of Public Security, China Electronic Technology Standardization Institute, Beijing Topsec Network Security Technology Co:, Ltd:, Sangfor Technologies Co:, Ltd:, Zhengzhou Xindajiean Information Technology Co:, Ltd:, Changyang Technology (Beijing) Co:, Ltd:, Shenzhen Xinrui Network Technology Co:, Ltd:, Beijing Luyuntian Network Network Security Technology Research Institute Co:, Ltd:, Xi'an Jiaotong University Jabil Network Technology Co:, Ltd:, Zhongfu Information Co:, Ltd:, State Grid Blockchain Technology Co:, Ltd: Technology (Beijing) Co:, Ltd:, China Cyber Security Review Technology and Certification Center, H3C Technologies Co:, Ltd:, China Electric Power Research Institute Limited company: The main drafters of this document are: Wu Runpu, Li Meicong, Long Gang, Guo Tao, Chen Dongqing, Shao Shuai, Fan Yuming, Liu Qi, Liu Jiqiang, Wang Wei, Tian Yin, Wang Jian, Wang Junyong, Ji Chenhe, Zhang Bianling, Zhu Zhenrong, Zhang Dongju, Kou Zengjie, An Gaofeng, Bao Xuhua, Ye Runguo, Ma Hongli, Han Xiude, Zhao Hua, Lai Guoqiang, He Jianfeng, Fan Wei, Mi Baoxin, Zhu Dali, Zhang Liang, Han Jideng, Gao Jinping, Sun Pengke, Hou Mengyun, Yang Ke, Shen Yongbo, Wan Xiaolan, Wang Haixiang: The previous versions of this document and the documents it replaces are as follows:

---First published in:2017 as GB/T 33565-2017;

---This is the first revision: Network Security Technology Wireless LAN Access System Safety technical requirements

1 Scope

GB/T 33565-2024 sets the security technical requirements for wireless LAN access systems in China, and it is written in the Common Criteria style: the document defines the target of evaluation and its boundary, then states the security problem as a set of named threats, from unauthorised management and unauthorised access through cryptographic compromise and administrator password cracking, together with the organisational security policies and the assumptions about the environment; then derives the security objectives that answer them; then states the security functional requirements and the security assurance requirements that a product has to meet; and finally gives the rationale linking each requirement back to the problem it solves. That structure is what makes the document useful to a manufacturer: it is not a list of features but an evaluation basis, and a Chinese wireless access product is certified against it. It covers the access points, controllers and the management system that make up such a system. It takes effect on 1 November 2024.

This document specifies the security function requirements and security assurance requirements of wireless LAN access systems, and gives the Description of security issues faced: This document is applicable to the testing, evaluation and procurement of wireless LAN access systems, as well as guiding the research and development of such products:

2 Normative references

The contents of the following documents constitute the essential clauses of this document through normative references in this document: For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to This document: GB 15629:

11 Information technology systems - Telecommunications and information exchange - Specific requirements for local area networks and metropolitan area networks - Part

3 Terms and definitions

The terms and definitions defined in GB/T 25069-2022 and GB/T 18336:1-2024 and the following apply to this document: 3:1 A device or system consisting of software and hardware that enables wireless LAN clients to access a wireless LAN: 3:

2 Access Controller accesscontroler A control device that enables wireless LAN clients to access the wireless LAN: 3:3 access point A network access device that provides access between wireless LAN clients and wired networks and forwards frames between wireless networks and wired networks:

11 Division: Wireless LAN Media Access Control and Physical Layer Specifications

GB/T 18336:1-2024 Cybersecurity technology Information technology security assessment criteria Part 1: Introduction and general model

GB/T 18336:2-2024 Cybersecurity technology Information technology security assessment criteria Part 2: Security function requirements

GB/T 18336:3-2024 Cybersecurity technology Information technology security assessment criteria Part 3: Security assurance requirements

GB/T 25069-2022 Information Security Technical Terminology

GB/T 32213-2015 Information security technology Public key infrastructure Remote password authentication and key establishment specification

GB/T 32915-2016 Information security technology Binary sequence randomness detection method

GB/T 32918:3-2016 Information Security Technology SM