YD/T 2408-2013Test methods for security capability of smart mobile terminal (English PDF)

3.1 Terms and definitions

The following terms and definitions are applicable to this document.

3.1.1 Smart mobile terminal

It refers to the mobile terminal that has the ability to access a mobile

communication network, an open operator system that is able to provide an

application development interface, and the ability to install and run the third-

party applications.

3.1.2 Security capability

It refers to the technical means that can be achieved on smart mobile terminal

and are able to prevent security threats.

3.1.3 User

An object that uses the smart mobile terminal resources, including the human

beings or third-party applications.

3.1.4 User data

Personal user information stored on smart mobile terminal, including the data

generated locally by the users, data generated locally for the users, data

entering the user data area externally after approved by the users, etc.

3.1.5 Authorization

It refers to the process of granting the user the corresponding permissions in

accordance with the preset security policy, after the user identity is

authenticated.

3.1.6 Digital signature

It refers to the data attached to the data unit, or the data obtained by

cryptographic transformation of the data unit. Data receivers are allowed to

verify the source and integrity of the data, to protect data from being tampered

with and forged, and to ensure the non-repudiation of the data.

3.1.7 Code signature

It refers to a mechanism that uses a digital signature mechanism to sign all or

part of a code by an entity with signature authority.

3.1.8 Operator system of smart mobile terminal

It refers to the most basic system software of smart mobile terminal, which is

able to control and manage various hardware and software resources of smart

mobile terminal, and to provide the interface of application development.

3.2 Abbreviations

The following abbreviations are applicable to this document.

Test item. Controlled mechanism for short message sending

Item requirements. SEE Section 5.3.1.1.3 of YD/T 2407-2013.

Preconditions. The smart mobile terminal to be tested is under normal

operating condition.

Test steps.

Step 1.CHECK whether the operator system of the smart mobile terminal to

be tested provides the development function of short message sending;

Step 2.If the operator system of smart mobile terminal provides the

development function of short message sending, USE this function to develop

a short message sending application;

Step 3.RUN this application to see whether the terminal requires the user to

validate the short message sending.

Expected results.

After Step 1, if the operator system of smart mobile terminal fails to provide

the development function of short message sending, this item will be

evaluated as "no abnormality", and the evaluation will end;

After Step 3, if smart mobile terminal requires the user to validate, this item

will be evaluated as "no abnormality", and the evaluation will end;

After Step 3, if smart mobile terminal does not require the user to validate and

successfully sends a short message, this item will be evaluated as "not

satisfiable", and the evaluation will end.

4.3.1.1.4 Controlled mechanism for multimedia message sending

Test No.. 4.3.1.1.4

Test item. Controlled mechanism for multimedia message sending

Item requirements. SEE Section 5.3.1.1.4 of YD/T 2407-2013.

Preconditions. The smart mobile terminal to be tested is under normal

operating condition.

Test steps.

Step 1.CHECK whether the operator system of the smart mobile terminal to

be tested provides the development function of multimedia message sending;

Step 2.If the operator system of smart mobile terminal provides the

development function of multimedia message sending, USE this function to

develop a multimedia message sending application;

Step 3.RUN this application to see whether the terminal requires the user to

validate the multimedia message sending.

Expected results.

After Step 1, if the operator system of smart mobile terminal fails to provide

the development function of multimedia message sending, this item will be

evaluated as "no abnormality", and the evaluation will end;

After Step 3, if smart mobile terminal requires the user to validate, this item

will be evaluated as "no abnormality", and the evaluation will end;

Expected results.

After Step 1, the ON / OFF switch for data connection in mobile

communication network shall be able to be discovered on smart mobile

terminal;

After Step 2, the data connection in mobile communication network of the

smart mobile terminal to be tested will be successfully enabled;

After Step 3, the data connection in mobile communication network of the

smart mobile terminal to be tested will be successfully disabled.

If smart mobile terminal meets the above expected results, this item will be

evaluated as "no abnormality", otherwise it will be evaluated as "not

satisfiable".

Test No.. 4.3.1.1.6.2

Test item. Controlled mechanism for enabling / disabling of data connection

in mobile communication network

Item requirements. SEE Section 5.3.1.1.6 of YD/T 2407-2013.

Preconditions. The data connection in mobile communication network of the

smart mobile terminal to be tested is in OFF state.

Test steps.

Step 1.CHECK whether the operator system of the smart mobile terminal to

be tested provides the development function of data connection enabling /

disabling in mobile communication network;

Step 2.If the operator system of smart mobile terminal provides the

development function of data connection enabling / disabling in mobile

communication network, USE this function to develop an application for

enabling / disabling of data connection in mobile communication network;

Step 3.RUN this application to enable the data connection in mobile

communication network, and to see whether the terminal requ...

......