YD-T 4969-2024 基于信任根的物联网设备系统安全技术要求

ICS 33.030 CCS M21 中华人民共和国通信行业标准 YD/T xxxx—xxxx YD 基于信任根的物联网设备系统安全技术要求 Security technical requirements for IoT devices systems based on RoT （报批稿） XXXX - XX - XX发布 XXXX - XX - XX实施中华人民共和国工业和信息化部发布 YD/T xxxx—xxxx I目次前言 ................................................................................. III 引言 .................................................................................. IV 1 范围 ................................................................................. 5 2 规范性引用文件 ....................................................................... 5 3 术语、定义和缩略语 ................................................................... 5 3.1 术语和定义 ....................................................................... 5 3.1.1 .............................................................................. 5 3.1.2 .............................................................................. 5 3.1.3 .............................................................................. 5 3.1.4 .............................................................................. 6 3.1.5 .............................................................................. 6 3.1.6 .............................................................................. 6 3.1.7 .............................................................................. 6 3.1.8 .............................................................................. 6 3.2 缩略语 ........................................................................... 6 4 安全技术框架及目标 ................................................................... 7 4.1 安全技术框架 ..................................................................... 7 4.2 安全目标 ......................................................................... 8 4.2.1 信任根的安全目标 ............................................................. 8 4.2.2 密码算法和密钥的安全目标 ..................................................... 8 4.2.3 安全启动的安全目标 ........................................................... 8 4.2.4 安全更新的安全目标 ........................................................... 8 4.2.5 安全存储的安全目标 ........................................................... 8 4.2.6 安全隔离的安全目标 ........................................................... 8 4.2.7 安全调试的安全目标 ........................................................... 9 4.2.8 生命周期的安全目标 ........................................................... 9 4.2.9 标识和鉴别的安全目标 ......................................................... 9 4.2.10 安全审计的安全目标 .......................................................... 9 5 安全技术要求 ......................................................................... 9 5.1 概述 ............................................................................. 9 5.2 安全一级 ........................................................................ 10 5.2.1 信任根 ...................................................................... 10 5.2.2 密码算法和密钥 .............................................................. 10 5.2.3 安全启动 .................................................................... 11 5.2.4 安全更新 .................................................................... 11 5.2.5 安全存储 .................................................................... 11 5.2.6 安全隔离 .................................................................... 11 5.2.7 安全调试 .................................................................... 12 5.2.8 生命周期 .................................................................... 12 YD/T xxxx—xxxx II5.2.9 标识和鉴别 .................................................................. 12 5.3 安全二级 ........................................................................ 12 5.3.1 信任根 ...................................................................... 12 5.3.2 密码算法和密钥 .............................................................. 12 5.3.3 安全启动 ..................................