GB/T 34976-2017 in English
VALIDInformation security technology-Security technical requirements and testing and evaluation approaches for operating system of smart mobile terminals
- Issued on:2017-11-01
- Implemented on:2018-05-01
- File Format:PDF
- Delivery:Via email within 5 business days
$359.00
《GB/T 34976-2017信息安全技术 移动智能终端操作系统安全技术要求和测试评价方法》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
Interpretation of the National Standard of the People's Republic of China GB/T 34976—2017
Standard Background and Technology Evolution Analysis
With the popularization of mobile smart terminals, operating system security has become a core issue to ensure the security of user data and devices. The GB/T 34976—2017 standard aims to standardize the security of mobile smart terminal operating systems, covering multiple levels from identity authentication to data protection.
Core Security Function Requirements
| Functional Modules | Specific Requirements | Implementation Suggestions |
|---|---|---|
| Identity Authentication | Support multiple authentication mechanisms, such as passwords, biometrics, and digital certificates. | It is recommended to give priority to the use of biometric recognition technology to improve security and convenience. |
| Access control | Implement strict access restrictions on system resources based on user permissions. | Implement the principle of least privilege, audit and optimize access policies regularly. |
| Security audit | Comprehensively record user behavior and system events, and provide log analysis functions. | It is recommended to configure a centralized log management platform for unified monitoring and analysis. |
Explanation of professional terms
Mobile smart terminal:A device that accesses a mobile communication network, has an operating system, and supports users to install and uninstall application software.
Operating system security:The ability to protect information in the system from unauthorized access, disclosure or tampering.
Comparison of standard frameworks
| Standard dimensions | GB/T 34976—2017 | Related international standards |
|---|---|---|
| Technical requirements | Detailed provisions for security functions such as identity authentication and access control. | Consistent with international standards such as ISO/IEC 17799. |
| Test methods | Provide specific test indicators and evaluation mechanisms. | Related content of TCSEC (Trusted Computer System Evaluation Criteria) is referenced. |
Implementation recommendations
Enterprise-level applications: It is recommended that manufacturers strictly follow the standard requirements during the development process and conduct comprehensive control from security architecture design to function implementation.
User level: Ordinary users should regularly update the operating system and application software to ensure that the device is in the latest security state.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 28448-2019 in English
Information security technology—Evaluation requirement for classified protection of cybersecurity
2019-05-10 -
GB/T 21049-2022 in English
Han Xin code
2022-03-09 -
GB/T 40413-2021 in English
Drafting rules for common identification codes of emergency logistics
2021-08-20 -
GB/T 32912-2016 in English
Information technology - Traditional Mongolian words - Word form specification - Basic set
2016-08-29 -
GB/T 34947-2017 in English
Information technology-Generic requirement for Chinese bi-spelling and tri-spelling pinyin inputting
2017-11-01 -
GB/T 41205.1-2021 in English
Code and attribute description of emergency supplies—Part 1:Personal protective equipment
2021-12-31 -
GB/T 36322-2018 in English
Information security technology-Cryptographic device application interface specifications
2018-06-07 -
GB/T 32656-2016 in English
Data format of the calendar and schedule
2016-04-25
