Valid

GB/T 37044-2018Information security technology—Security reference model and generic requirements for internet of things (English PDF)

信息安全技术 物联网安全参考模型及通用要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 37044-2018 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 28, 2018

Implementation date

July 1, 2019

Scope

GB/T 37044-2018 is the English-translated version of 信息安全技术 物联网安全参考模型及通用要求.

GB/T 37044-2018 sets out a security reference model for internet of things systems together with the general security requirements they should meet.

The model covers the security objects of an IoT system and the security responsibilities attached to them, the partition of the system into security zones based on the IoT reference architecture of GB/T 33474-2016, the system life cycle and the basic security measures.

The standard defines terms such as security zone, perception terminal and sensor.

Its requirements apply over the whole life cycle of an IoT system in any application area, from planning, design, development and construction to operation, maintenance management and disposal, and organisations can use it as a baseline for their own IoT security standards. It was issued on 28 December 2018 and has applied since 1 July 2019.

Found what you need?

Document preview — GB/T 37044-2018

National Standard of the People's Republic of China

ICS
35.040
Classification
L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

  • Foreword
  • 1 Scope
  • 2 Normative references
  • 3 Terms and Definitions
  • 4 Overview
  • 5 IoT Security Reference Model
  • 5.1 Safety Reference Model Overview
  • 5.2 IoT Reference Security Partition
  • 5.3 System life cycle
  • 5.4 Basic safety measures
  • 6 IoT Security General Requirements
  • Reference

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

1 Scope

This standard gives the IoT security reference model, including the security responsibility of IoT security objects and objects, and specifies the Internet of Things system. General security requirements.

This standard applies to the entire life cycle of the planning, design, development and construction, operation and maintenance management, and abandonment of the IoT system in each application area.

It also provides a baseline reference for organizations to customize their own IoT security standards.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 7665-2005 sensor general terminology

GB/T 25069-2010 Information Security Technology Terminology

GB/T 33474-2016 IoT Reference Architecture

3 Terms and definitions

The following terms and definitions are defined in GB/T 7665-2005, GB/T 25069-2010 and GB/T 33474-2016. In this document.

3.1 Security zone

A collection of information security requirements for a particular functional domain or subdomain, each security zone being functionally dependent on the domain or subdomain it contains Different standards will have different information security protection needs.

3.2 Perceptual terminal

A device that can collect and/or perform operations on objects or environments and can communicate on a network.

3.3 Sensor

A device or device that can be measured and converted into usable output signals according to a certain rule, usually by sensitive components and conversion components composition. [GB/T 7665-2005, definition 3.1.1]

Note: GB/T 7665-2005 defines the general classification terminology of sensors, in which three types of sensors are defined from the measured angle, namely physical quantity sensors, Weighing sensors and biomass sensors.

4 Overview

The IoT reference security partition is based on the IoT reference architecture and analyzes the security requirements of different domains and their subdomains.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Similar standards

How to Download GB/T 37044-2018

  1. 1

    Add to cart

    Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

  2. 2

    Checkout

    Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

  3. 3

    Instant delivery (0–9 sec)

    Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

  4. 4

    Invoice included

    A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
15 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GB/T 37044-2018

$205.00