GB/T 41781-2022 English PDF

US$189.00 · In stock
Delivery: <= 3 days. True-PDF full-copy in English will be manually translated and delivered via email.
GB/T 41781-2022: Internet of things - Web-oriented open service system - Security requirements
Status: Valid

Standard ID	USD	BUY PDF	Lead-Days	Standard Title (Description)	Status
GB/T 41781-2022	189	Add to Cart	3 days	Internet of things - Web-oriented open service system - Security requirements	Valid

Similar standards

GB/T 37685   GB/T 37684   GB/T 38322   GB/T 41780.3   GB/T 41780.2   

Basic data

Standard ID: GB/T 41781-2022 (GB/T41781-2022)
Description (Translated English): Internet of things - Web-oriented open service system - Security requirements
Sector / Industry: National Standard (Recommended)
Classification of Chinese Standard: L79
Classification of International Standard: 35.110
Word Count Estimation: 10,160
Date of Issue: 2022-10-14
Date of Implementation: 2022-10-12
Issuing agency(ies): State Administration for Market Regulation, China National Standardization Administration

GB/T 41781-2022: Internet of things - Web-oriented open service system - Security requirements

---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Internet of things -- Web-oriented open service system -- Security requirements ICS 35.110 CCSL79 National Standards of People's Republic of China The Internet of Things-Oriented Web Open Service System safety requirements 2022-10-12 Implementation State Administration for Market Regulation Released by the National Standardization Administration directory Preface I 1 Scope 1 2 Normative references 1 3 Terms and Definitions 1 4 Abbreviations 2 5 Overview 2 6 Interactor Security 2 6.1 Physical Security 2 6.2 Software Security 3 6.3 Data-at-rest security 3 7 Interactive process security 4 7.1 Access Security 4 7.2 Communication Security 5 7.3 Dynamic Data Security 5 Reference 6

foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1.Structure and Drafting Rules of Standardization Documents" drafted. Please note that some content of this document may be patented. The issuing agency of this document assumes no responsibility for identifying patents. This document is proposed and managed by the National Information Technology Standardization Technical Committee (SAC/TC28). This document is drafted by. China Electronics Technology Group Corporation Information Science Research Institute, China Electronics Standardization Institute, National Computing Computer Network Emergency Technology Handling Coordination Center, Jiangsu Saixi Technology Development Co., Ltd., Hangzhou Hikvision Digital Technology Co., Ltd., Beijing Information Science and Technology University, CLP Technology (Beijing) Co., Ltd., Shenzhen Saixi Information Technology Co., Ltd., Horsai Technology Group Co., Ltd. Company, Shanghai Integrated Communication Equipment Co., Ltd., the Third Research Institute of the Ministry of Public Security, University of Science and Technology of China, Beijing Dongfangtong Technology Co., Ltd. Company, Wuxi Internet of Things Industry Research Institute, Wuxi Internet of Things Innovation Center Co., Ltd., Zhejiang Huling Technology Co., Ltd., Chinese Academy of Sciences Shanghai High and other research institutes, Chengdu Zhenxin Technology Co., Ltd., Foxconn Industrial Internet Co., Ltd., Beijing Dongtu Technology Co., Ltd., Gold Card Intelligent Group Co., Ltd., Shenzhen Tencent Computer System Co., Ltd., Beijing Telecom Planning and Design Institute Co., Ltd. The main drafters of this document. Wang Fan, Li Mengliang, Yang Hong, Zou Xin, Zhuo Lan, Guo Xiong, Chen Qunhua, Wang Xiaochun, Zhang Jian, Zhang Chi, Sun Liang, Lei Gen, Liu Shu, Jia Yanhe, Fu Genli, Sun Xu, Liu Jishun, Miao Fuyou, Xiong Yan, Zhang Chunlin, Wang Lefei, Dong Jielian, Yang Zhiwei, Wang Zhenming, Ma Xuling, Wang Hui, Chen Yan, Yang Wenshi, Zhang Xueqin, Cheng Yuan, Zhou Yubo, Li Yun, Li Jiajing, Wu Mingjuan, and Chen Xiaochun. The Internet of Things-Oriented Web Open Service System safety requirements

1 Scope

This document specifies the security requirements for the interaction subject and interaction process in the Internet of Things system oriented to Web open services, including physical security Security, software security, static data security, access security, communication security and dynamic data security. This document is applicable to the design, development and maintenance of IoT systems oriented to Web open services.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document. GB/T 2887-2011 General Specification for Computer Fields GB/T 9361-2011 Computer Site Safety Requirements GB/T 20270-2006 Information Security Technology Network Basic Security Technical Requirements GB/T 20272-2019 Information Security Technology Operating System Security Technical Requirements GB/T 30998-2014 Information Technology Software Security Assurance Specification GB/T 36951-2018 Information Security Technology Internet of Things Perception Terminal Application Security Technical Requirements GB/T 37024-2018 Information Security Technology Internet of Things Perception Layer Gateway Security Technical Requirements GB/T 37025-2018 Information Security Technology Internet of Things Data Transmission Security Technical Requirements GB/T 37093-2018 Security requirements for information security technology IoT perception layer access communication network

3 Terms and Definitions

The following terms and definitions apply to this document. 3.1 ful-functiondevice A device that can communicate with a Web server autonomously through a network according to the agreed protocol. [Source. GB/T 40778.1-2021, 3.1] 3.2 Reduced-functiondevice A device that cannot communicate directly with the Web server, and needs to be communicated by the gateway through the network according to the agreed protocol. [Source. GB/T 40778.1-2021, 3.2, with modifications] 3.3 In the system of Web open service, the equipment that participates in the process of information interaction. Note. Including terminals (full-function devices, limited-function devices), gateways, Web servers, and Web clients. ......

Image     

Tips & Frequently Asked Questions:

Question 1: How long will the true-PDF of GB/T 41781-2022_English be delivered?

Answer: Upon your order, we will start to translate GB/T 41781-2022_English as soon as possible, and keep you informed of the progress. The lead time is typically 1 ~ 3 working days. The lengthier the document the longer the lead time.

Question 2: Can I share the purchased PDF of GB/T 41781-2022_English with my colleagues?

Answer: Yes. The purchased PDF of GB/T 41781-2022_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.

Question 3: Does the price include tax/VAT?

Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countries

Question 4: Do you accept my currency other than USD?

Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.