GB/T 21079.2-2022 in English
VALIDFinancial services―Secure cryptographic devices (retail) ―Part 2:Security comliance checklists for devices used in financial transactions
- Issued on:2022-12-30
- Implemented on:2022-12-30
- File Format:PDF
- Delivery:Via email within 5 business days
$476.00
《GB/T 21079.2-2022金融服务 安全加密设备（零售）第2部分：金融交易中设备安全符合性检测清单》由TC180（全国金融标准化技术委员会）归口，主管部门为中国人民银行。
Introduction
Interpretation of the core content of the standard
Key points of the standard revision
Compared with GB/T20547.2-2006, the main changes in this revision include:
- Added the definition of the term assessment agency (Clause 3.4)
- Added the type of authorized quasi-formal assessment (Clause 4.4)
- Supplemented the requirements for SM2/SM3/SM4 national encryption algorithms (Appendix A/B/E)
Comparison of security detection frameworks
| Detection dimensions | Physical security | Logical security | Management requirements |
|---|---|---|---|
| PIN input device | Anti-peeping design (B6), anti-side channel attack (B1) | PIN Block encryption (B18), anti-exhaustive attack (B20) | Key uniqueness (B30), site monitoring (B32) |
| Key management device | 40kg fixed requirement (E1) | Dual control (E8), key separation (E10) | Operation audit (E18), environmental monitoring (E15) |
| Digital signature device | Same as key management device | Private key cannot be exported (G1) | Certificate association (G2) |
Key Implementation Points
Physical Security Practice Case
The deployment of a bank's password keyboard must meet the following requirements:
- Install a protective cover (Clause B6) to prevent visual theft
- Use an anti-detection metal shielding layer (Clause A2) to block electromagnetic leakage
- Immediately erase the key when intrusion detection is triggered (Clause A12)
Standard Evolution Analysis
This standard inherits the ISO134912:2017 framework, and the main technical differences include:
- Algorithm requirements: Add GB/T32905/32907/32918 national encryption standards
- Test items: 12 new test points including PIN format conversion (B25)
- Environmental classification: Detailed safety environment monitoring frequency requirements (H12)
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 27929-2025 in English
Financial services—Requirements for message authentication using symmetric techniques
2025-06-30 -
GB/Z 104-2025 in English
Technical specification of web-service-based application programming interface（WAPI）in financial services
2025-12-03 -
GB/T 40473.1-2021 in English
Banking application system—Nonfunctional requirement—Part 1: Framework for description
2021-07-20 -
GB/T 42505-2023 in English
Primary data collection specification for bond pricing indicator products
2023-03-17 -
GB/T 27909.1-2011 in English
Banking - Key management (retail) - Part 1: Principles
2011-12-30
