Valid

GB/T 41781-2022Internet of things—Web-oriented open service system—Security requirements (English PDF)

物联网面向Web开放服务的系统安全要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 41781-2022 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

October 12, 2022

Implementation date

October 12, 2022

Scope

GB/T 41781-2022 is the English-translated version of 物联网面向Web开放服务的系统安全要求.

GB/T 41781-2022 sets the security requirements for an Internet of Things system that opens its services to the web. It covers the abbreviations and an overview, then the security of the parties to an interaction and of the interaction process itself.

For the parties it fixes physical security, software security and the security of data at rest; for the process it fixes access security, communication security and dynamic data security.

The parties are the terminals, whether full-function devices that reach a web server on their own or reduced-function devices that need a gateway, plus the gateways, web servers and web clients.

It applies to the design, development and maintenance of such systems, cites nine information security and computer standards from GB/T 2887-2011 to GB/T 37093-2018, was issued on 12 October 2022 and has applied since 12 October 2022.

Found what you need?

Document preview — GB/T 41781-2022

National Standard of the People's Republic of China

ICS: 35.110
Classification: L 79

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Overview
6 Interactor Security
6.1 Physical Security
6.2 Software Security
6.3 Data-at-rest security
7 Interactive process security
7.1 Access Security
7.2 Communication Security
7.3 Dynamic Data Security
Reference

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.

1 Scope

This document specifies the security requirements for the interaction subject and interaction process in the Internet of Things system oriented to Web open services, including physical security, software security, static data security, access security, communication security and dynamic data security.

This document is applicable to the design, development and maintenance of IoT systems oriented to Web open services.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.

GB/T 2887-2011 General Specification for Computer Fields

GB/T 9361-2011 Computer Site Safety Requirements

GB/T 20270-2006 Information Security Technology Network Basic Security Technical Requirements

GB/T 20272-2019 Information Security Technology Operating System Security Technical Requirements

GB/T 30998-2014 Information Technology Software Security Assurance Specification

GB/T 36951-2018 Information Security Technology Internet of Things Perception Terminal Application Security Technical Requirements

GB/T 37024-2018 Information Security Technology Internet of Things Perception Layer Gateway Security Technical Requirements

GB/T 37025-2018 Information Security Technology Internet of Things Data Transmission Security Technical Requirements

GB/T 37093-2018 Security requirements for information security technology IoT perception layer access communication network

3 Terms and Definitions

The following terms and definitions apply to this document.

3.1 Full-function device

A device that can communicate with a Web server autonomously through a network according to the agreed protocol. [Source: GB/T 40778.1-2021, 3.1]

3.2 Reduced-function device

A device that cannot communicate directly with the Web server, and needs to be communicated by the gateway through the network according to the agreed protocol. [Source: GB/T 40778.1-2021, 3.2, with modifications]

3.3 Interaction subject

In the system of Web open service, the equipment that participates in the process of information interaction.

Note: Including terminals (full-function devices, limited-function devices), gateways, Web servers, and Web clients.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Normative references

Similar standards

GB/T 47342-2026|GB/T 33745-2025|GB/T 35319-2025|GB/T 41780.3-2025|GB/T 41780.4-2025|GB/T 46456.3-2025

How to Download GB/T 41781-2022

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.