GB/T 36951-2018Information security technology—Security technical requirements for application of sensing terminals in internet of things (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

Introduction

The Internet of Things is widely used in agriculture, industry, health, urban management and other fields. The sensing terminal is an important component of the Internet of Things information system.

Points, its level of security protection in the application is uneven, directly affecting the overall security of the Internet of Things information system.

Compared with general information systems, the perceived terminals used in the Internet of Things information system have a large number, a wide variety, a wide distribution area, and a ministry.

The environment is diverse and the security functions are limited. These features make the perceived terminal application face hardware and software failures, physical attacks, and communication anomalies.

Security risks such as information disclosure or tampering, unauthorized access, or malicious control. In order to improve the security of the terminal application in the IoT information system With full protection level, this standard proposes general security technical requirements for sensing terminal applications.

1 Scope

This standard specifies the physical security, access security, communication security, device security, and data security of the terminal application in the IoT information system. Equivalent security technical requirements.

This standard applies to the construction, operation and maintenance unit of the Internet of Things information system to securely select, deploy, operate and maintain the perceived terminal. This standard It is also suitable for guiding the design and production of terminal devices.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 4208-2017 enclosure protection grade (IP code)

GB/T 17799.1-2017 Electromagnetic compatibility common standards Immunity test in residential, commercial and light industrial environments

GB/T 17799.2-2003 Electromagnetic compatibility general standard immunity test in industrial environment

GB/T 22240-2008 Information Security Technology Information System Security Level Protection Rating Guide

GB/T 25069-2010 Information Security Technology Terminology

3 Terms and definitions, abbreviations