GB/T 20547.2-2006 in English

《GB/T 20547.2-2006银行业务 安全加密设备（零售） 第2部分：金融交易中设备安全符合性检测清单》由TC180（全国金融标准化技术委员会）归口，主管部门为中国人民银行。
本标准规定了评估金融服务系统中安全加密设备的安全符合性检测清单。

Scope

This part of GB/T 20547 specifies the security compliance testing list for evaluating the security encryption equipment in the financial service system in combination with the encryption algorithm adopted by the encryption equipment specified in the relevant international or domestic regulations. The IC payment card meets the requirements of this part before the card is issued, and as a personal device after the card is issued, it does not fall within the scope of this part. This section does not deal with problems arising from the failure of security encryption equipment. In Appendices A to H, "infeasible" is used to indicate that although some specific attacks are technically possible, they are not economically feasible, because the economic expenditure required to achieve this attack is greater than that of breaking The resulting benefits are much greater. Of course, in addition to attacks for purely economic interests, malicious attacks on reputation should also be considered.