GB/T 36950-2018Information security technology—Security technical requirements of smart card (EAL4+) (English PDF)
信息安全技术 智能卡安全技术要求（EAL4+）
This is a limited preview
Buy now to download the full PDF (24 pages)
Need quotation for your management?
Get a formal quotation for GB/T 36950-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
December 28, 2018
Implementation date
July 1, 2019
Scope
GB/T 36950-2018 is the English-translated version of 信息安全技术 智能卡安全技术要求（EAL4+）.
GB/T 36950-2018 sets the security technical requirements for smart cards evaluated at assurance level EAL4 augmented, in which the vulnerability analysis component AVA_VAN.3 is raised to AVA_VAN.4.
Built on the evaluation criteria of GB/T 18336, it describes the smart card, its overall structure, cryptographic algorithms and environment, and defines the security problem through assets, threats, organizational security policies and assumptions.
It then states the security objectives for the card and for its environment, the security functional and assurance requirements, and the rationale linking objectives and requirements.
It also defines terms such as integrated circuit and smart card and lists abbreviations like APDU, COS, TOE and TSF. It applies to the testing and evaluation of smart card products and can also guide their development. It was issued on 28 December 2018 and has applied since 1 July 2019.
Found what you need?
Document preview — GB/T 36950-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Smart Card Description
- 5.1 Overall structure
- 5.2 Password Algorithm
- 5.3 Environment
- 6 Security Issue Definition
- 6.1 Overview
- 6.2 Asset
- 6.3 Threat
- 6.4 Organizational Security Policy
- 6.5 Hypothesis
- 7 Security Objective
- 7.1 Smart Card Security Purpose
- 7.2 Environmental Safety Objectives
- 8 Safety requirements
- 8.1 Security Function Requirements
- 8.2 Security Requirements
- 9 Basic principles
- 9.1 Basic principles of security objectives
- 9.2 Basic Principles of Safety Requirements
- Reference
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
Introduction
As the application range of smart cards continues to expand, the complexity of the application environment is also increasing, which in turn requires smart cards to be more secure. Protection ability.
The EAL4+ of this standard is to enhance AVA_VAN.3 to AVA_VAN.4 based on EAL4.
1 Scope
This standard specifies the technical requirements for smart card security, including smart card description, security problem definition, security purpose, security requirements and basic principles. Technical requirements.
This standard applies to the testing and evaluation of smart card products, and can also be used for the research and development of such products.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 18336.1-2015 Information technology security technology - Information technology - Safety assessment criteria - Part 1: Profile and general model
GB/T 18336.2-2015 Information technology security technology - Information technology - Safety assessment criteria - Part 2
GB/T 18336.3-2015 Information technology security technology - Information technology - Safety assessment criteria - Part 3: Security components
GB/T 22186-2016 Information security technology IC card chip security technical requirements with central processing unit
3 Terms and definitions
The terms and definitions defined in GB/T 18336.1-2015 apply to this document.
3.1 Integrated circuit
A certain process is used to interconnect resistors, capacitors, and transistors for electronic components that perform arithmetic processing or storage functions.
3.2 Smart card
An integrated circuit card with a central processing unit.
Note: From the data transmission method can be divided into contact smart card and contactless smart card.
4 Abbreviations
The following abbreviations apply to this document.
APDU. Application Protocol Data Unit (ApplicationProtocolDataUnit)
COS. Chip Operating System (ChipOperatingSystem)
EAL. Evaluation AssuranceLevel
IC. Integrated Circuit (Integrated Circuit)
TOE. Evaluation object (TargetofEvaluation)
TSF. Evaluation Object Security Function (TOESecurityFunction)
USB. Universal Serial Bus (UniversalSerialBus)
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 24 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 18336.1-2015Cybersecurity technology—Evaluation criteria for IT security—Part 1: Introduction and general model
- GB/T 18336.2-2015Cybersecurity technology—Evaluation criteria for IT security—Part 2: Security functional components
- GB/T 18336.3-2015Cybersecurity technology—Evaluation criteria for IT security—Part 3: Security assurance components
- GB/T 22186-2016Cybersecurity technology - Security specification for IC card chips with a CPU
Similar standards
How to Download GB/T 36950-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 18336.1-2015 — Information technology -- Security techniques -- Evaluation criteria for IT security -- Part 1: Introduction and general model
GB/T 18336.2-2015 — Information technology -- Security techniques -- Evaluation criteria for IT security -- Part 2: Security functional components
GB/T 18336.3-2015 — Information technology -- Security techniques -- Evaluation criteria for IT security -- Part 3: Security assurance components
Secure payment via Stripe
Payments accepted
GB/T 36950-2018
$415.00