GB/T 37025-2018 in English
VALIDInformation security technology—Security technical requirements of data transmission for internet of things
- Issued on:2018-12-28
- Implemented on:2019-07-01
- File Format:PDF
- Delivery:Via email within 1~3 business days
$214.00
《GB/T 37025-2018信息安全技术 物联网数据传输安全技术要求》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
GB/T 37025—2018 Standard Overview
GB/T 37025—2018, the National Standard of the People's Republic of China, is one of the important standards in the field of Internet of Things in China. It mainly puts forward graded requirements for the security of Internet of Things data transmission. The standard specifies the core contents of Internet of Things data transmission, such as integrity, availability, privacy protection, and trust mechanism, from the basic level and enhanced level, and is applicable to the planning, construction, operation and management of Internet of Things systems.
The Importance of Internet of Things Data Transmission Security
With the rapid development of Internet of Things technology, data transmission has become one of the core functions of Internet of Things systems. However, data transmission in the Internet of Things environment faces many security risks, including data leakage, tampering, forgery and other problems. GB/T 37025—2018 standard provides a comprehensive security guarantee framework for Internet of Things data transmission through clear security technical requirements.
Comparison table of core contents of standards
| Dimensions | Basic requirements | Enhanced requirements | New/enhanced content |
|---|---|---|---|
| Data transmission integrity | Support information integrity verification mechanisms (such as checksums and digital signatures). | Use cryptographic technology to ensure data transmission integrity; add a recovery mechanism after damage detection. | Introduction of encryption technology and recovery mechanism. |
| Data transmission availability | Ensure data freshness and accuracy, and establish a fault-tolerant mechanism. | Time stamp encryption, and add a reload mechanism to ensure data acquisition reliability. | Encrypted time and reload mechanism enhance availability. |
| Privacy protection | Sensitive information is prohibited from being transmitted in plain text, and users are supported to select security protocols (such as SSH and IPSec). | Added a user-defined privacy setting function to strengthen the desensitization of sensitive data. | Enhanced user privacy control. |
Implementation suggestions and practical application cases
Case 1: Data transmission system of a smart manufacturing industry
In a smart manufacturing enterprise, IoT devices are responsible for collecting real-time data on the production line. According to the GB/T 37025-2018 standard, the enterprise has adopted the following measures:
- Use the AES-256 encryption algorithm to ensure the confidentiality of data transmission.
- Verify data integrity through digital signature technology.
- Configure the SSH protocol to establish a secure communication channel.
- Regularly review and update transmission protocols to ensure security.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 45240-2025 in English
General requirements for device-independent quantum random number generators
2025-01-24 -
GB/T 41266-2022 in English
Security testing methods for critical network devices—Switch
2022-03-09 -
GB/T 15278-1994 in English
Information processing－Data encipherment－Physical layer interoperability requirements
1994-01-02 -
GB/T 29241-2012 in English
Information security technology—Public key infrastructure—PKI interoperability evaluation criteria
2012-12-31 -
GB/T 17901.1-2020 in English
Information technology—Security techniques—Key management—Part 1: Framework
2020-03-06 -
GB/T 28449-2018 in English
Information security technology-Testing and evaluation process guide for classified protection of cybersecurity
2018-12-28 -
GB/Z 24294.1-2018 in English
Information security technology—Guide of implementation for internet-basede-government information security—Part 1:General
2018-03-15 -
GB/T 33131-2016 in English
Information security technology一Specification for IP storage network security based on IPSec
2016-10-13
