GB/T 39205-2020 in English
VALIDInformation security technology—Light-weight authentication and access control mechanism
- Issued on:2020-10-11
- Implemented on:2021-05-01
- File Format:PDF
- Delivery:Via email within 1~3 business days
$194.00
《GB/T 39205-2020信息安全技术 轻量级鉴别与访问控制机制》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
Analysis of the core content of the standard
This standard defines a security mechanism with low computational complexity and simple interaction for resource-constrained scenarios such as wireless sensor networks and RFID:
Comparison of lightweight authentication mechanisms
| Mechanism type | Computational complexity | Interaction rounds | Security strength | Applicable scenarios |
|---|---|---|---|---|
| XOR operation (5.2) | O(1) | 3 | Basic level | Ultra-low power consumption equipment |
| SM3 Hash (5.3) | O(n) | 2-4 | Commercial Grade | Smart Terminal |
| SM4 Grouping (5.4) | O(n) | 3 | Financial Grade | Payment Terminal |
Technology Evolution Analysis
The standard reflects the technological transformation from the traditional PKI system to lightweight security:
- 2000-2010: Certificate system dominated by RSA/ECC
- 2010-2020: Standardization of the National Secret Algorithm (SM series)
- After 2020: Lightweight interaction paradigm proposed in this standard
Implementation recommendations
Industrial IoT deployment plan
In the smart meter scenario, it is recommended to adopt:
- Authentication phase: 5.3 SM3-based mechanism
- Access control: 6.2 Block cipher mechanism
- Key update cycle: ≤30 days
Patent risk warning
The standard involves multiple patent technologies, including:
- ZL201410041837.0 (XOR authentication)
- ZL201010567506.2 (SM3 authentication)
- Pay attention to the patent licensing terms
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 39204-2022 in English
Information security technology—Cybersecurity requirements for critical information infrastructure protection
2022-10-12 -
GB/Z 41288-2022 in English
Information security technology—Guidelines of cyber security protection for important industrial control system
2022-03-08 -
GB/T 28451-2023 in English
Information security technology—Technical specification for network intrusion prevention system
2023-05-23 -
GB/T 24364-2023 in English
Information security technology—Implementation guide for information security risk management
2023-05-23 -
GB/T 20945-2023 in English
Information security technology—Technical specification for network security audit products
2023-05-23 -
GB/T 17902.1-2023 in English
Information technology―Security techniques―Digital signatures with appendix―Part 1:General
2023-03-17 -
GB/T 41387-2022 in English
Information security technology—Smart home general security specification
2022-04-15 -
GB/T 40813-2021 in English
Information security technology—Security protection technical requirements and testing evaluation methods of industrial control systems
2021-10-11 -
GB/T 29246-2023 in English
Information security technology—Information security management systems—Overview and vocabulary
2023-12-28 -
GB/T 43206-2023 in English
Information security technology—Testing and evaluation requirements for information system cryptography application
2023-09-07
