GB/T 37091-2018Information security technology—Security office USB disk technology requirement (English PDF)
信息安全技术 安全办公U盘安全技术要求
This is a limited preview
Buy now to download the full PDF (29 pages)
Need quotation for your management?
Get a formal quotation for GB/T 37091-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
December 28, 2018
Implementation date
July 1, 2019
Scope
GB/T 37091-2018 is the English-translated version of 信息安全技术 安全办公U盘安全技术要求.
GB/T 37091-2018 sets the security requirements for security office USB disks, mobile storage media that connect a user to a trusted network, or to a PC on an untrusted network, through a USB interface and add security functions such as user authentication, security auditing and information encryption.
It specifies the security functional requirements and the security assurance requirements at evaluation assurance levels EAL2 and EAL3.
The document describes the target of evaluation, defines the security problem through assets, threats, organizational security policies and assumptions, states the security objectives for the product and its environment, and closes with the rationale and the component dependencies.
Test and evaluation bodies use it to assess such products, and developers can use it to guide their design. It was issued on 28 December 2018 and has applied since 1 July 2019.
Found what you need?
Document preview — GB/T 37091-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms, definitions and abbreviations
- 3.1 Terms and Definitions
- 3.2 Abbreviations
- 4 Evaluation object description
- 5 Security Issue Definition
- 5.1 Asset
- 5.2 Threat
- 5.3 Organizational Security Policy
- 5.4 Hypothesis
- 6 Security purposes
- 6.1 TOE Security Purpose
- 6.2 Environmental Safety Objectives
- 7 Safety requirements
- 7.1 Security Function Requirements
- 7.2 Security requirements
- 8 Basic Principles
- 8.1 Basic principles of security purposes
- 8.2 Basic principles of safety requirements
- 8.3 Component Dependencies
- Reference
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This standard specifies the safety functional requirements and safety requirements for the safety protection of EAL2 and EAL3 security office U disk. Full security requirements.
This standard is applicable to the testing and evaluation of security office U disk, and can also be used to guide the research and development of such products.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 18336-2015 (all parts) Information technology security technology information technology security assessment criteria
GB/T 20984-2007 Information Security Technology Information Security Risk Assessment Specification
GB/T 25069-2010 Information Security Technology Terminology
GB/T 28458-2012 Information security technology security vulnerability identification and description specification
3 Terms, definitions and abbreviations
3.1 Terms and definitions
GB/T 18336-2015, GB/T 20984-2007, GB/T 25069-2010 and GB/T 28458-2012 as defined by The following terms and definitions apply to this document.
3.1.1 Security office U disk
A connection between a user and a trusted network or a PC in a non-trusted network based on a USB interface to implement application functions and security functions Mobile storage media. Such as information exchange between users and PCs, user authentication, security auditing, information encryption, information storage, and so on.
3.2 Abbreviations
The following abbreviations apply to this document.
CM. Configuration Management (ConfigurationManagement)
EAL. Evaluation AssuranceLevel
PIN. Personal Identification Number (PersonalIdentificationNumber)
SF. Security Function (SecurityFunction)
SFP. Security Function Policy (SecurityFunctionPolicy)
ST. Security Target (SecurityTarget)
TOE. Evaluation object (TargetofEvaluation)
TSF. TOE Security Function (TOESecurityFunctionality)
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 29 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 20984-2007Information security technology—Risk assessment method for information security
- GB/T 25069-2010Information security techniques—Terminology
- GB/T 28458-2012Information security technology—Cybersecurity vulnerability identification and description specification
GB/T 18336-2015
Similar standards
How to Download GB/T 37091-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 10003-2026 — Biaxially oriented polypropylene (BOPP) film
GB/T 10004-2026 — Plastic/Plastic laminated films and pouches for packaging
GB/T 10007-2026 — Rigid cellular plastics - Determination of shear properties
Secure payment via Stripe
Payments accepted
GB/T 37091-2018
$415.00