Valid

GB/T 41387-2022Information security technology—Smart home general security specification (English PDF)

信息安全技术智能家居通用安全规范

Preview PDF

This is a limited preview

Buy now to download the full PDF (31 pages)

Need quotation for your management?

Get a formal quotation for GB/T 41387-2022 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

April 15, 2022

Implementation date

November 1, 2022

Scope

GB/T 41387-2022 is the English-translated version of 信息安全技术智能家居通用安全规范.

GB/T 41387-2022 is the Chinese general security specification for the smart home.

It sets the general technical requirements - the security of the devices, of the gateway, of the application and of the data and communication between them, with the protection of the personal information collected in a house - and the test and evaluation methods that correspond to each requirement.

It applies to the security design and implementation of smart home products, and smart home security testing and management may use it for reference. Device makers, platform owners and test laboratories use it. Issued on 15 April 2022, it has applied since 1 November 2022.

Found what you need?

Document preview — GB/T 41387-2022

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Smart Home System Composition and Security Framework
5.1 Composition of Smart Home System
5.2 Smart Home Security Framework
6 Smart home terminal security requirements
6.1 Hardware Security
6.2 Firmware Security
6.3 Operating System Security
6.4 Application Security
6.5 Interface Security
6.6 Communication Security
6.7 Data Security
7 Smart Home Gateway Security Requirements
7.1 Hardware Security
7.2 Firmware Security
7.3 Operating system security
7.4 Application Security
7.5 Interface Security
7.6 Communication Security
7.7 Data Security
8 Security requirements for smart home consoles
8.1 Hardware Security
8.2 Firmware Security
8.3 Operating System Security
8.4 Application Security
8.5 Interface Security
8.6 Communication Security
8.7 Data Security
9 Security Requirements for Smart Home Application Service Platform
9.1 Platform Environment Security
9.2 Application Security
9.3 Interface call security
9.4 Data Security
9.5 Terminal Management Security
10 General Test Methods for Smart Home Security
10.1 General description
10.2 Smart home terminal security test method
10.3 Smart Home Gateway Security Test Method
10.4 Smart home control terminal security test method
10.5 Security Testing Method of Smart Home Application Service Platform
Appendix A (Informative) Typical Smart Home Scenarios and Security Risk Analysis
A.1 Typical Application Scenarios of Smart Home
A.2 Smart Home Security Risks
A.3 Smart Home Participants
Reference

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.

1 Scope

This document specifies the general technical requirements and corresponding test evaluation methods for smart home security.

This document is applicable to the security design and implementation of smart home products, and the security testing and management of smart homes can also be used for reference.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 25069 Information Security Technical Terminology

GB/T 29234-2012 Technical requirements for broadband customer network security based on public telecommunication network

GB/T 31168-2014 Information Security Technology Cloud Computing Service Security Capability Requirements

GB/T 35273-2020 Information Security Technology Personal Information Security Specification

GB/T 36633-2018 Information Security Technology Network User Identity Authentication Technical Guide

GB/T 39579-2020 Technical requirements for smart home applications in public telecommunication networks

GB/T 41388-2022 Basic Security Specification for Trusted Execution Environment of Information Security Technology ISO /IEC 27033-6 Information Technology Security Technology Network Security Part 6: Wireless IP Network Access Security Protection (Infor-

3 Terms and Definitions

GB/T 25069, GB/T 39579-2020 and GB/T 41388-2022 as well as the following terms and definitions apply to this document.

3.1 Smart home system

Use home network technology to connect various communication equipment, household appliances, home security and other devices in the home to the home intelligent system Centralized communication, monitoring, control and home affairs management to provide smart home users with convenient, comfortable, safe, efficient and environmentally friendly home life. A general term for living devices, networks, platforms, and applications. [Source: GB/T 39579-2020, 3.1]

3.2 Smart home terminal

Various terminal devices connected to the home network and collaboratively providing smart home services.

Note: Including related equipment for providing security, measurement, control, entertainment and other services. [Source: GB/T 39579-2020, 3.4]

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 31 pages — is available in the English PDF.

Referenced standards

Normative references

Cited by

Similar standards

GB/T 20272-2026|GB/T 20274.2-2026|GB/T 22186-2026|GB/T 24294.1-2026|GB/T 28455-2026|GB/T 31499-2026

How to Download GB/T 41387-2022

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.