GB/T 43445-2023Information security technology—Basic security requirements for pre-installed applications on smart mobile terminals (English PDF)
信息安全技术 移动智能终端预置应用软件基本安全要求
This is a limited preview
Buy now to download the full PDF (15 pages)
Need quotation for your management?
Get a formal quotation for GB/T 43445-2023 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
November 27, 2023
Implementation date
June 1, 2024
Scope
GB/T 43445-2023 is the English-translated version of 信息安全技术 移动智能终端预置应用软件基本安全要求.
GB/T 43445-2023 sets the baseline security requirements for the application software that handset makers pre-install on smart mobile terminals.
It covers the security function requirements, which are grouped into whether an app can be uninstalled, the security of the uninstall itself, security technical requirements and personal information security requirements, and the security management requirements, which cover preset links, the management of preset application software, the explicit disclosure of its security information and the response to security problems.
Clause 4.1.1 requires preset applications other than basic function software to be uninstallable. Clause 1 applies it to the design, development, production and testing of these terminals and to regulators and third-party evaluators, and excludes industrial and vehicle-mounted terminals and terminals not connected to public mobile networks. Issued on 27 November 2023, it has applied since 1 June 2024.
Found what you need?
Document preview — GB/T 43445-2023
National Standard of the People's Republic of China
- ICS
- 35.030
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Safety functional requirements
- 4.1 Uninstallable requirements
- 4.2 Uninstall security requirements
- 4.3 Safety technical requirements
- 4.4 Personal information security requirements
- 5 Safety management requirements
- 5.1 Preset link security management
- 5.2 Preset application software security management
- 5.3 Explicit disclosure of security information for preset application software
- 5.4 Security Issue Response
- Reference
Foreword
This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.
1 Scope
This document specifies the basic security requirements for pre-installed application software on mobile smart terminals.
This document applies to the design, development, production and testing of mobile smart terminals, and also applies to the evaluation of competent regulatory authorities and third-party evaluation agencies. Mobile intelligent terminals for supervision, management and evaluation.
This document does not apply to industrial terminals, vehicle-mounted terminals and other data terminals for specific industries and purposes, nor does it apply to data terminals not connected to public mobile phones. Intelligent terminal products for mobile communication networks.
Note: In this document, mobile intelligent terminals mainly refer to handheld mobile intelligent terminal products based on smartphones connected to public mobile communication networks.
2 Normative reference documents
The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, the dated quotations For undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document.
GB/T 35273 Information Security Technology Personal Information Security Specifications
GB/T 39720-2020 Information security technology mobile intelligent terminal security technical requirements and test evaluation methods
GB/T 40660 Basic requirements for biometric information protection in information security technology
3 Terms and definitions
The following terms and definitions apply to this document.
3.1 Smart mobile terminal
Mobile communication terminal products that are connected to public mobile communication networks, have operating systems, and can allow users to install and uninstall application software by themselves.
3.2 Pre-instaledapplication
Preset by the manufacturer, there is a user interaction portal in the main screen and auxiliary screen interface of the mobile smart terminal to meet user application needs. and provided software programs that can be used independently.
3.3 Preset application software that directly supports
the operation of the operating system or realizes the basic functions of mobile smart terminals.
4 Safety function requirements
4.1 Uninstallable requirements
4.1.1 All preset application software except basic function software in mobile smart terminals should be uninstallable. Basic function software should be limited to […]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 35273Information security technology—Personal information security specification
- GB/T 39720-2020Information security technology—Security technical requirements and test evaluation approaches for smart mobile terminal
- GB/T 40660Information security technology—General requirements for biometric information protection
Similar standards
How to Download GB/T 43445-2023
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 35273-2020 — Information security technology—Personal information security specification
GB/T 39720-2020 — Information security technology—Security technical requirements and test evaluation approaches for smart mobile terminal
GB/T 40660-2021 — Information security technology—General requirements for biometric information protection
Secure payment via Stripe
Payments accepted
GB/T 43445-2023
$165.00