ICS 33.050 M 30 面向低功耗广域网的物联网终端 安全能力 技术要求 Technical Requirements for S ecurity Capability of Internet of Things Terminal E quipment for Low Power Wide Area Network 2018-09-03发布 2018-09-03实施 电信终端产业协会 发布 团体标准 T/TAF 027-2018 T/TAF 027-2018 I 目 次 前 言 ................................ ................................ ........... III 引 言 ................................ ................................ ............ IV 面向低功耗广域网的物联网终端安全能力技术要求 ................................ ......... 1 1 范围 ................................ ................................ ............... 1 2 规范性引用文件 ................................ ................................ ..... 1 3 术语、定义、符号和缩略语 ................................ ........................... 1 3.1 术语和定义 ................................ ................................ ..... 1 3.1.1 ................................ ................................ ............ 1 3.1.2 ................................ ................................ ............ 1 3.1.3 ................................ ................................ ............ 1 3.1.4 ................................ ................................ ............ 2 3.1.5 ................................ ................................ ............ 2 3.2 符号和缩略语 ................................ ................................ ... 2 4 总体安全技术要求 ................................ ................................ ... 2 4.1 安全能力框架 ................................ ................................ ... 2 4.2 安全目标 ................................ ................................ ....... 2 4.2.1 硬件安全目标 ................................ ............................... 2 4.2.2 系统安全目标 ................................ ............................... 3 4.2.3 应用安全目标 ................................ ............................... 3 4.2.4 接入安全目标 ................................ ............................... 3 4.2.5 传输安全目标 ................................ ............................... 3 4.2.6 用户数据安全目标 ................................ ........................... 3 5 终端安全能力技术要求 ................................ ............................... 3 5.1 硬件安全要求 ................................ ................................ ... 3 5.1.1 芯片安全 ................................ ................................ ... 3 5.1.2 接口安全 ................................ ................................ ... 3 5.1.2.1 调试接口安全 ................................ ........................... 3 5.1.2.2 闲置端口安全 ................................ ........................... 3 5.1.3 防止物理攻击 ................................ ............................... 4 5.1.4 根密钥生成与保护 ................................ ........................... 4 5.1.5 加密运算安全 ................................ ............................... 4 5.1.6 启动安全 ................................ ................................ ... 4 5.1.6.1 授权验证 ................................ ............................... 4 T/TAF 027-2018 II 5.1.6.2 FLASH 启动 ................................ .............................. 4 5.1.7 安全运行区域 ................................ ............................... 5 5.2 系统安全要求 ................................ ................................ ... 5 5.2.1 标识与鉴别 ................................ ................................ . 5 5.2.2 访问控制 ................................ ................................ ... 5 5.2.3 日志审计 ................................ ................................ ... 5 5.2.4 系统更新 ................................ ................................ ... 5 5.2.4.1 更新安全防护 ................................ ........................... 5 5.2.4.2 更新失败处理 ................................ ........................... 6 5.2.5 系统漏洞修补 6 5.2.6 失效保护 ................................ ................................ ... 6 5.3 预置应用安全要求 .....................