Valid

GB/T 37025-2018Information security technology－Security technical requirements of data transmission for internet of things (English PDF)

信息安全技术物联网数据传输安全技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 37025-2018 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 28, 2018

Implementation date

July 1, 2019

Scope

GB/T 37025-2018 is the English-translated version of 信息安全技术物联网数据传输安全技术要求.

GB/T 37025-2018 sets security technical requirements for the transmission of data in the Internet of Things, excluding industrial control terminals.

It classifies data transmission security into a basic level and an enhanced level, with requirements at each level for transmission integrity, availability, privacy and trust, for transmission strategies and procedures, and for transmission protocols and their approval and update.

The enhanced level adds data transmission confidentiality and logs and auditing. Informative appendices analyse transmission security issues under the three-layer IoT reference model and give a table of capability requirements for self-checking.

The standard applies to the planning, construction, operation and management of IoT data transmission security. It was issued on 28 December 2018 and has applied since 1 July 2019.

Found what you need?

Document preview — GB/T 37025-2018

National Standard of the People's Republic of China

ICS: 35.040
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Foreword
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 IoT Data Transmission Security Overview
5.1 Internet of Things Data Transmission Security
5.2 Security protection range
5.3 Safety Rating Principle
6 Basic level safety technical requirements
6.1 Data Transmission Integrity
6.2 Data Transfer Availability
6.3 Data Transmission Privacy
6.4 Data Transfer Trust
6.5 Information Transmission Strategies and Procedures
6.6 Information Transmission Protocol
6.7 Approval and update of the transmission protocol
7 Enhanced Security Technical Requirements
7.1 Data Transmission Integrity
7.2 Data Transfer Availability
7.3 Data Transmission Privacy
7.4 Data Transfer Trust
7.5 Information Transmission Strategies and Procedures
7.6 Information Transmission Protocol
7.7 Approval and update of the transmission protocol
7.8 Data transmission confidentiality
7.9 Logs and Auditing
Appendix A (informative) Analysis of data transmission security issues under the IoT three-layer reference model
Appendix B (informative) Data transmission security capability requirements and self-checking table
Reference

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

1 Scope

This standard specifies the data transmission security classification of the Internet of Things (except industrial control terminals) and its basic level and enhanced level security technical requirements.

This standard is applicable to the planning, construction, operation and management of the data transmission security of the Internet of Things.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 33474-2016 IoT Reference Architecture

3 Terms and definitions

The following terms and definitions apply to this document.

3.1 Internet of Things

Realize information on physical and virtual worlds through sensing devices, in accordance with agreed protocols, connecting objects, people, systems, and information resources And respond to the intelligent service system. [GB/T 33745-2017, definition 2.1.1]

3.2 Sensor

A device or device that can be measured and converted into usable output signals according to a certain rule, usually by sensitive components and conversion components composition. [GB/T 7665-2005, definition 3.1.1]

3.3 Sensing device

A device that can acquire object information and provide access to the network. [GB/T 33745-2017, definition 2.1.9]

Note: Perceptual devices with higher computing power can also collect and/or perform operations on objects or environments.

3.4 Transmission security

Protects the integrity, confidentiality, availability, and customization of information transmitted over the network.

3.5 Communication reference architecture interface

From the perspective of interconnection between IoT entities, an interface describing the network communication relationships between IoT domains and intra-domain entities.

Note: According to different application scenarios of the Internet of Things, communication can adopt interfaces such as wireless or wired communication.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 33474-2016Internet of things - Reference architecture

Cited by

Similar standards

GB/T 18805-2026|GB/T 32915-2026|GB/T 42382.2-2026|GB/T 42382.3-2026|GB/T 47277-2026|GB/T 47312-2026

How to Download GB/T 37025-2018

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.