Valid

GB/T 35278-2026Cybersecurity technology — Technical specifications for mobile terminal security (English PDF)

网络安全技术　移动终端安全技术规范

Preview PDF

This is a limited preview

Buy now to download the full PDF (76 pages)

Need quotation for your management?

Get a formal quotation for GB/T 35278-2026 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

July 30, 2026

Implementation date

February 1, 2027

Scope

GB/T 35278-2026 is the English-translated version of 网络安全技术　移动终端安全技术规范.

GB/T 35278-2026 is the Chinese standard "Cybersecurity technology — Technical specifications for mobile terminal security". Its scope clause reads: This document outlines the security issues, security objectives, and extended components for mobile terminals, specifies the security requirements for mobile terminals, and describes...

The corresponding testing and evaluation methods. This document applies to the design, development, manufacturing, application, and testing of mobile terminal products. Its clauses include terms, definitions and abbreviations.

Found what you need?

Document preview — GB/T 35278-2026

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80
Replacing: GB/T 35278-2017

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

1.Scope1
2 Normative references1
3.Terms, Definitions and Abbreviations1
3.1 Terms and Definitions1
3.2 Abbreviations2
4 Overview3
4.1 Introduction to TOE3
4.2 TOE Security Features5
5.Security Issues5
5.2 Threat Subjects6
5.3 Security Threats6
5.4 Organizational Security Strategy7
5.5 Assumptions7
6.Safety Purposes7
6.1 Mobile terminal security objectives7
6.2 Environmental safety objectives8
7 Extended Components8
7.1 Family FCS_CKH_EXT8
7.2 Family FCS_CKM_EXT9
7.3 Family FPT_AEX_EXT10
7.4 Family FPT_JTA_EXT11
7.5 Family FPT_SEE_EXT12
7.6 Family FPT_STG_EXT12
7.7 Family FPT_TST_EXT13
7.8 Family FPT_TUD_EXT14
8.Safety Requirements15
8.1 Safety Functional Requirements15
8.2 Safety Assurance Requirements37
9.1 Test methods for safety function requirements39
9.2 Assessment Methods for Security Assurance Requirements58
9.3 Vulnerability Assessment Testing Details60
10 Basic Principles74
10.1 Basic Principles of Safety Purposes74
10.2 Basic Principles of Safety Requirements77
10.3 Component Dependencies80
Appendix A (Informative) User Data Protection and Key Hierarchy85
A.1 User Data Protection85
A.2 Key Hierarchy85
References87

1 Scope

This document outlines the security issues, security objectives, and extended components for mobile terminals, specifies the security requirements for mobile terminals, and describes...

The corresponding testing and evaluation methods.

This document applies to the design, development, manufacturing, application, and testing of mobile terminal products.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are listed below.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies.

This document.

GB/T 18336.3-2024 Network Security Technology - Information Technology Security Assessment Criteria - Part 3.Security Assurance Components

GB/T 32915-2016 Information Security Technology - Method for Detecting Randomness of Binary Sequences

3 Terms, Definitions and Abbreviations

3.1 Terms and Definitions

The following terms and definitions apply to this document.

3.1.1 mobile terminal

Portable computing devices that can be moved.

Note. Mobile terminals include smart mobile communication terminals with wireless internet access, tablet computers, and portable computers.

[Source. GB/T 25069-2022, 3.719]

3.1.2

Software that provides services to users, in addition to the mobile terminal operating system.

[Source. GB/T 30284-2020, 3.1.2].

3.1.3 Authentication data

Information used to verify the identity claimed by the user.

[Source. GB/T 30284-2020, 3.1.3].

3.1.4 authorized user

A user who is authorized to perform a certain operation according to the security policy.

[Source. GB/T 30284-2020, 3.1.4].

3.1.5 digital signature

Additional data attached to a data unit, or cipher transformations performed on the data unit, are considered part of the data unit.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 76 pages — is available in the English PDF.

Referenced standards

Cited by

Editions of GB/T 35278

Edition	Title	Revision	Status
GB/T 35278-2026	Cybersecurity technology — Technical specifications for mobile terminal security	current edition	Current
GB/T 35278-2017	Cybersecurity technology — Technical specifications for mobile terminal security	previous edition	In force until 1 February 2027

This page sells the current edition, GB/T 35278-2026. Earlier editions are listed for reference only.

How to Download GB/T 35278-2026

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.