GB/T 37952-2019 in English
VALIDInformation security technology—Technical requirements of mobile terminal security management platform
- Issued on:2019-08-30
- Implemented on:2020-03-01
- File Format:PDF
- Delivery:Via email within 5 business days
$301.00
| Standard No: | GB/T 37952-2019 |
| Document status: | VALID |
| Title in English: | Information security technology—Technical requirements of mobile terminal security management platform |
| Title in Chinese: | 信息安全技术 移动终端安全管理平台技术要求 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 5 business days |
| Issued on: | 2019-08-30 |
| Implemented on: | 2020-03-01 |
| ICS Classification: | 35.040-Character sets and information coding |
| Chinese Classification: | L80-Data encryption |
| Professional Classification: | GB-National Standard |
| Related Topics: | Information Security Technology Mobile Internet Application Server Security Technical Requirements
platform technology management platform The Ten Commandments of Mobile Security Safety technical requirements for pipe benders Mobile terminal information security technical requirements GBT37952 mobile terminal Amgen xenoMouse platform Mine safety platform and cleaning platform Secure mobile terminal products Security Management Platform |
《GB/T 37952-2019信息安全技术 移动终端安全管理平台技术要求》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
Overview of technical requirements for mobile terminal security management platform
GB/T 37952—2019 specifies the technical requirements for mobile terminal security management platform, including security function requirements and security assurance requirements. The standard applies to the design, development and testing of mobile terminal security management platform products, and provides a reference for organizations to implement security protection for mobile Internet applications.
Comparative analysis of standard frameworks
| Category | Basic level requirements | Enhanced level requirements |
|---|---|---|
| Security function requirements | Terminal management, application management, data security, access control, security management, etc. | Added system permission control status detection, remote uninstallation of illegal application software, and strengthened data protection mechanism. |
| Security requirements | Development specifications, guidance documents, lifecycle support, test coverage, etc. | Added security architecture, functional specifications, and implementation representation to strengthen development security and independent testing capabilities. |
Implementation recommendations
1. Gradual implementation strategy
Organizations should choose basic or enhanced requirements based on their security needs. For systems below level 3, it is recommended to adopt basic technical requirements; for systems with level 3 protection and above, it is recommended to adopt enhanced requirements.
2. Key control point configuration
During the implementation process, focus on the following control points:
- Remote lock/erase function: Ensure that sensitive data can be quickly responded to when it is lost or stolen.
- Terminal registration and identity authentication: Strictly control the legitimacy of access devices.
- Data leakage prevention mechanism: Combine encryption and access control to protect sensitive information.
3. Continuous optimization suggestions
Regularly evaluate platform performance, update security policies, and adjust protection measures based on new threat intelligence. It is recommended to conduct a comprehensive security audit and vulnerability scan at least once a year.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 45240-2025 in English
General requirements for device-independent quantum random number generators
2025-01-24 -
GB/T 15278-1994 in English
Information processing－Data encipherment－Physical layer interoperability requirements
1994-01-02 -
GB/T 36323-2018 in English
Information security technology--Security management fundamental requirements for industrial control systems
2018-06-07 -
GB/T 17901.1-2020 in English
Information technology—Security techniques—Key management—Part 1: Framework
2020-03-06 -
GB/T 20009-2019 in English
Information security technology—Security evaluation criteria for database management system
2019-08-30 -
GB/T 22186-2016 in English
Information security techniques―Security technical requirements for IC card chip with CPU
2016-08-29 -
GB/T 27422-2019 in English
Conformity assessment -- Requirements for bodies providing audit and certification of business continuity management systems
2019-12-10 -
GB/T 41266-2022 in English
Security testing methods for critical network devices—Switch
2022-03-09 -
GB/Z 24294.1-2018 in English
Information security technology—Guide of implementation for internet-basede-government information security—Part 1:General
2018-03-15
