MH/T 0073-2020 in English

VALID

Security technical requirement for data exchanging across regional networks of civil aviation

Issued on:2020-07-20
Implemented on:2020-10-01
File Format:PDF
Delivery:Via email within 1~3 business days

Price(USD)： $120.00
$117.00

Standard No:	MH/T 0073-2020
Document status:	VALID
Title in English:	Security technical requirement for data exchanging across regional networks of civil aviation
Title in Chinese:	民用航空跨网数据交换安全技术要求
Language:	English
File Format:	Electronic (PDF)
Delivery:	Via email within 1~3 business days
Issued on:	2020-07-20
Implemented on:	2020-10-01
ICS Classification:	35.020-Information technology (IT) in general
Chinese Classification:	L07-Computer application
Professional Classification:	MH-Civil Aviation
Related Topics:	mh/t transnational diplomacy Switch technical requirements and Nuclear and radiation safety data exchange technology Civil Aviation Data Element

本标准规定了民用航空跨网数据交换区技术框架和安全技术要求。
本标准适用于民航不同单位、不同安全等级网络之间的跨网数据安全交换系统的设计、建设和运行。

Introduction

Analysis of the core framework of the standard

MH/T 0073-2020 has built a five-layer defense system based on network access area, boundary protection area, application service area, security isolation area and security monitoring area, and realizes the secure transmission of aviation data through protocol stripping and format checking.

Functional area	Core technology	Security indicators
Network access area	Routing access control	Source address recognition rate ≥99.9%
Security isolation area	Optical gate/network gate ferry	One-way transmission zero reverse
Security monitoring area	Behavior audit	Log retention ≥180 days

Data exchange security mechanism

The standard requires the security of database data, streaming media data:

Database transmission: dual verification of device authentication + content filtering is required
Streaming media transmission: mandatory format check to prevent malicious code injection
Command response: adopt two-way authentication protocol (such as TLS 1.3)

Technology evolution and implementation suggestions

Compared with GW 0205-2014 government affairs standard, this specification adds:

Hot standby switching time is shortened from 5 minutes to 30 seconds
Audit log adds operation behavior map analysis function
Clearly security isolation zone must use domestic encryption algorithm

Implementation points: It is recommended to prioritize the deployment of optical gate equipment to achieve physical isolation, and to use protocol conversion modules to make it compatible with the existing air traffic control system.

More samples: JC/T 2453-2018 YD/T 3934-2021 JJG 21-2008

Sample only — not a preview of MH/T 0073-2020