GB/T 22186-2016 in English
VALIDInformation security techniques―Security technical requirements for IC card chip with CPU
- Issued on:2016-08-29
- Implemented on:2017-03-01
- File Format:PDF
- Delivery:Via email within 5 business days
$534.00
《GB/T 22186-2016信息安全技术 具有中央处理器的IC卡芯片安全技术要求》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
Standard Evolution and Technology Upgrade
| Version | Core Changes | Assessment Level |
|---|---|---|
| 2008 Edition | Evaluation Assurance Level 4 Enhanced | EAL4+ |
| 2016 Edition | Expanded EAL5+/EAL6+ requirements, detailed security function components | EAL4+/5+/6+ |
Core Security Function System
Physical Security Protection
FPT_PHP.3 requires the chip to be resistant to physical tampering and to prevent chip detection attacks through technologies such as encrypted storage and address obfuscation. The typical implementation plan includes:
- Multi-layer metal shielding network
- Dynamic power balancing circuit
- Light-sensitive detection sensor
Cryptographic security implementation specifications
| Components | Technical requirements | Typical algorithms |
|---|---|---|
| FCS_COP.1 | Cryptographic operations in accordance with national secret algorithms | SM4/SM3 |
| FCS_CKM.1 | True random number generation (entropy value ≥ 0.95) | Physical noise source |
Lifecycle security management
Phase-based control is achieved through FMT_LIM.1/2:
- Development phase: Open test interface
- Production phase: Write pre-personalized data
- Use phase: Disable debugging function
Evaluation Assurance Requirements Matrix
| Assurance Components | EAL4+ | EAL5+ | EAL6+ |
|---|---|---|---|
| ADV_FSP.4 | √ | - | - |
| AVA_VAN.5 | - | √ | √ |
| ALC_FLR.1 | - | - | √ |
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 45240-2025 in English
General requirements for device-independent quantum random number generators
2025-01-24 -
GB/T 34953.2-2018 in English
Information technology—Security techniques—Anonymous entity authentication—Part 2:Mechanisms based on signatures using a group public key
2018-09-17 -
GB/T 20009-2019 in English
Information security technology—Security evaluation criteria for database management system
2019-08-30 -
GB/T 25056-2018 in English
Information security technology—Specifications of cryptograph and related security technology for certificate authentication system
2018-06-07 -
GB/T 27422-2019 in English
Conformity assessment -- Requirements for bodies providing audit and certification of business continuity management systems
2019-12-10 -
GB/T 15278-1994 in English
Information processing－Data encipherment－Physical layer interoperability requirements
1994-01-02 -
GB/T 36323-2018 in English
Information security technology--Security management fundamental requirements for industrial control systems
2018-06-07 -
GB/T 34095-2017 in English
中华人民共和国国家质量监督检验检疫总局 中国国家标准化管理委员会
2017-07-31
