GB/T 47679.2-2026Cybersecurity technology - Security requirements, test and evaluation methods for quantum key distribution - Part 2: Test and evaluation methods (English PDF)

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents".

Drafting.

This document is Part 2 of GB/T 47679 "Security Requirements, Test and Evaluation Methods for Quantum Key Distribution in Network Security Technology".

GB/T 47679 has published the following parts.

---Part 1: Requirements;

---Part 2: Testing and Evaluation Methods.

This document is equivalent to ISO/IEC 23837-2:2023 "Security requirements, test and evaluation methods for quantum key distribution for information security".

Part 2: Evaluation and Testing Methods.

The following minimal editorial changes have been made to this document.

---To align with existing standards, the standard's name has been changed to "Security Requirements, Testing, and Evaluation for Quantum Key Distribution in Cybersecurity Technology".

Methods Part 2: Testing and Evaluation Methods;

---To align with existing standards, Chapter 1 includes additional information clarifying the scope of this document;

---The URLs for the ISO and IEC terminology databases have been removed;

---To improve the readability of standard documents, abbreviations such as ADV, AGD, APE, ASE, ATE, FSP, FTP, and ST are added.

Please note that some content in this document may involve patents. The issuing organization of this document assumes no responsibility for identifying patents.

This document was proposed and is under the jurisdiction of the National Cybersecurity Standardization Technical Committee (SAC/TC260).

Introduction

GB/T 47679 "Security Requirements, Test and Evaluation Methods for Quantum Key Distribution in Network Security Technology" is based on GB/T 18336 (all parts).

Within the framework of (), this document establishes the security requirements, testing, and evaluation methods for quantum key distribution (QKD) modules. This document primarily specifies...

General safety assessment methods and corresponding assessment activities for QKD modules, including assessments of the relevant safety functions of QKD modules in GB/T 47679.1-2026.

Supplemental assessment activities for Security Assurance Requirements (SFR), and Security Assurance Requirements (SAR) for Assurance Levels (EAL) 1 to EAL5.

Supplementary assessment activities.

GB/T 47679 is proposed to consist of two parts.

---Part 1: Requirements. The aim is to establish a general framework for the security assessment of QKD modules and to provide a common basis for QKD modules.

Line SFR set.

---Part 2: Testing and Evaluation Methodology. The aim is to establish testing and evaluation methods for QKD security assessment, and to provide specific methods for...

The evaluation method for the QKD protocol, the quantum optical components in the QKD module, and the SFRs of traditional network components constituted by the test and evaluation system.

The assessment activities should be evaluated, and supplementary assessment activities should be provided to meet the security requirements of the corresponding assurance level QKD.

This document presents the QKD protocol implementation, as well as the testing and evaluation of quantum optics components in the QKD sender and receiver modules.

Activities. For SFRs specific to traditional network components, this document does not specify particular evaluation activities; it primarily refers to existing evaluation methods for network equipment.

This document also clarifies supplementary assessment activities for security assurance requirements and addresses the common vulnerability analysis in GB/T 30270-2024.

The methodology has been refined, covering guidelines for calculating attack potential.

The purpose of this document is to provide technical specifications for QKD manufacturers to improve the design and implementation security of QKD modules, and to guide evaluation methods.

This involves conducting testing and security assessments of QKD modules to reduce the risks associated with security function failures during QKD system operation.

Quantum key distribution, a network security technology Safety requirements, testing and evaluation methods Part 2: Testing and Evaluation Methods

1 Scope

This document establishes testing and evaluation methods for quantum key distribution (QKD) security assessment, and specifies the testing and evaluation methods for QKD protocol implementations, the evaluation activities for the testing and evaluation methods constituting the security function requirements of quantum optical components and traditional network components in the QKD module, and the assessment of the testing and evaluation methods.

Supplemental assessment activities were conducted to meet security requirements and support security assessments for the corresponding assurance level QKD.

This document applies to the research, development, testing, and evaluation of QKD-related products.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies.

This document.

GB/T 18336.4-2024 Network Security Technology - Information Technology Security Assessment Guidelines - Part 4: Assessment Methods and Activities Standard Framework (ISO/IEC 15408-4:2022, IDT) GB/T 30270-2024 Network security technology - Information technology security assessment methods (ISO/IEC 18045:2022, IDT) GB/T 47679.1-2026 Security Requirements, Tests and Evaluation Methods for Quantum Key Distribution in Network Security Technology - Part 1.

Safety requirements (ISO/IEC 23837-1:2023, IDT)

3 Terms and Definitions

The terms and definitions defined in GB/T 47679.1-2026, as well as the following terms and definitions, apply to this document.

Attenuation

The physical quantity in which the intensity of light waves decreases as the transmission distance increases during propagation in a transmission medium.

attenuator

Devices used to reduce the power of light waves.

Reverse fluorescence back-flash A single or multiple photon pulses generated by a single-photon detector.

Note 1.This phenomenon is also known as "flashback" or "breakdown fluorescence".

Note 2.This phenomenon is caused by radiative charge recombination and is commonly seen in devices such as avalanche photodiodes where a large number of electron-hole pairs are generated.

Beamsplitter (BS)

A device that splits incident light waves into two or more independent light waves according to a design ratio.