GB/T 40653-2021Information security technology—Technical requirements for security processor (English PDF)

3.1 Security processor

Composed of firmware and hardware entities, it has physical protection, logical protection, and application protection capabilities, and can achieve a certain security strength and safety, etc. Level of processor.

Note: The security processor implementation technology includes cryptographic technology, physical protection technology, data encoding technology, reconfigurable logic technology, etc.

3.2 Physical protection

Adopt the design of attack protection, attack detection methods, use detection and processing functions to monitor the working environment of the processor, and support abnormalities Behavior response audit processing, security capabilities to prevent physical threats.

Note: Attack protection includes security protection design of masks, packaging, physical interfaces, etc.; attack detection includes optical, electromagnetic, logical open circuit, short circuit, bypass detection, etc.; engineering The operating environment includes temperature, frequency, voltage testing, etc.; response audit processing includes measures such as notification, marking, response processing, and audit processing.

3.3 Application protection

Link physical protection functions, with the ability to protect programs and data, run state detection and monitoring capabilities, resource scheduling and configuration control The ability to control security, secure communication, and support abnormal behavior response audit processing, and prevent application threats.

Note: Protection capabilities include the use of homomorphic computing, cryptographic technology applications to program and data processing capabilities, resource scheduling and configuration control including secure storage and control Measures such as management and security configuration, and secure communication includes measures such as encrypted transmission, the use of trusted root transmission, and identity authentication.

3.4 Logic protection

According to the security functions of physical protection and application protection, adjust the security policy through resource configuration, operation configuration, and running state control.

To make the logical structure and control have stronger security strength and flexibility against unknown attacks, and the security ability to prevent logical threats.

3.5 Running state

Safety processor operating status.