GB/T 35101-2017Information security technology—Smart card reader security technology requirements(EAL4+) (English PDF)

National Standard of the People's Republic of China

ICS

35.040

Classification

L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

• Foreword V.
• 1 Scope
• 2 Normative references
• 3 Terms and definitions
• 4 symbols and abbreviations
• 5 machine description
• 5.1 Overview
• 5.2 TOE composition
• 5.3 Machine Service
• 5.4 Machine life cycle
• 5.5 TOE general function
• 6 safety environment
• 6.1 Assets
• 6.1.1 Internal TOE Assets
• 6.1.2 External TOE Assets
• 6.2.1 Development Environment Assumptions
• 6.2.2 Production Environment Assumptions
• 6.2.3 User Environment Assumptions
• 6.3 threats
• 6.3.1 Threat Body
• 6.3.2 Threat Description
• 6.3.2.1 General
• 6.3.2.2 Threats to Internal TOE Assets
• 6.3.2.3 Threats of External TOE Assets
• 6.4 Organizational Security Strategy
• 7 safety purpose
• 7.1 Overview
• 7.2 TOE safety purpose
• 7.3 Environmental Safety Purpose
• 8 Safety Requirements
• 8.1 Safety Function Components
• 8.1.1 General
• 8.1.2 FCS category. Password support
• 8.1.2.1 FCS decomposition
• 8.1.2.2 Key Management (FCS_CKM)
• 8.1.2.3 Cryptographic Operation (FCS_COP)
• 8.1.3 FDP class. User data protection
• 8.1.3.1 FDP decomposition
• 8.1.3.2 Data Authentication (FDP_DAU)
• 8.1.4 FIA categories. Identification and identification
• 8.1.4.1 FIA decomposition
• 8.1.4.2 Authentication Failure (FIA_AFL)
• 8.1.4.3 User Authentication (FIA_UAU)
• 8.1.4.4 User Identification (FIA_UID)
• 8.1.5 FMT category. Safety Management
• 8.1.5.1 FMT decomposition
• 8.1.5.2 FMT management activities
• 8.1.5.3 Function Management in TSF (FMT_MOF)
• 8.1.5.4 TSF Data Management (FMT_MTD)
• 8.1.5.5 Safety Management Role (FMT_SMR)
• 8.1.6 FPT class .TSF protection
• 8.1.6.1 FPT Decomposition
• 8.1.6.2 Failure Protection (FPT_FLS)
• 8.1.6.3 Transfer of TSF data within TOE (FPT_ITT)
• 8.1.6.4 TSF Physical Protection (FPT_PHP)
• 8.1.6.5 Trusted Recovery (FPT_RCV)
• 8.1.6.6 TSF Self Test (FPT_TST)
• 8.2 TOE Security Components
• 8.2.1 General
• 8.2.2 Security Architecture Description (ADV_ARC.1)
• 8.2.3 Complete Functional Specification (ADV_FSP.4)
• 8.2.4 TSF Security Function Implementation Representation Subset (ADV_IMP.1)
• 8.2.5 Basic Module Design (ADV_TDS.3)
• 8.2.6 Well-structured TSF internal subsets (ADV_INT.1)
• 8.2.7 Operation User Guide (AGD_OPE.1)
• 8.2.8 Preparation Procedure (AGD_PRE.1)
• 8.2.9 Production Support and Acceptance Procedures and Their Automation (ALC_CMC.4)
• 8.2.10 Issue Tracking CM Overlay (ALC_CMS.4)
• 8.2.11 Delivery procedure (ALC_DEL.1)
• 8.2.12 Identification of safety precautions (ALC_DVS.1)
• 8.2.13 Developer-Defined Life Cycle Model (ALC_LCD.1)
• 8.2.14 Well-defined development tools (ALC_TAT.1)
• 8.2.15 Declaration of Conformity (ASE_CCL.1)
• 8.2.16 Extension Component Definition (ASE_ECD.1)
• 8.2.17 ST Introduction (ASE_INT.1)
• 8.2.18 Security Aims (ASE_OBJ.2)
• 8.2.19 Derived safety requirements (ASE_REQ.2)
• 8.2.20 Security Definition (ASE_SPD.1)
• 8.2.21 TOE Profile Specification (ASE_TSS.1)
• 8.2.22 Coverage Analysis (ATE_COV.2)
• 8.2.23 Security Execution Module (ATE_DPT.2)
• 8.2.24 Function Test (ATE_FUN.1)
• 8.2.25 Independent Testing - Sampling (ATE_IND.2)
• 8.2.26 System Vulnerability Analysis (AVA_VAN.4)
• 9 Fundamentals
• 9.1 Fundamental Principles of Security
• 9.2 Safety Requirements Fundamentals
• 9.3 Security Functional Components Dependencies