YD/T 2408-2021 English PDFUS$1299.00 ยท In stock
Delivery: <= 8 days. True-PDF full-copy in English will be manually translated and delivered via email. YD/T 2408-2021: Test methods for security capability of smart mobile terminal Status: Valid YD/T 2408: Historical versions
Basic dataStandard ID: YD/T 2408-2021 (YD/T2408-2021)Description (Translated English): Test methods for security capability of smart mobile terminal Sector / Industry: Telecommunication Industry Standard (Recommended) Classification of Chinese Standard: M13 Classification of International Standard: 33.040.40 Word Count Estimation: 64,633 Date of Issue: 2021-05-17 Date of Implementation: 2021-07-01 Issuing agency(ies): Ministry of Industry and Information Technology YD/T 2408-2013: Test methods for security capability of smart mobile terminal---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.Test methods for security capability of smart mobile terminal ICS 33.060 M 36 YD People 's Republic of China Communication Industry Standard Test Method for Security Capability of Mobile Intelligent Terminal 2013-04-25 release 2013-11-01 implementation Issued by the Ministry of Industry and Information Technology of the People 's Republic of China Directory ForewordIntroduction1 Scope2 normative reference documents3 terms, definitions and abbreviations 3.1 Terms and definitions 3.2 Abbreviations4 Mobile intelligent terminal security capability test method4.1 Overview 4.2 mobile intelligent terminal hardware security capabilities 4.3 mobile intelligent terminal operating system security capabilities 4.4 Mobile intelligent terminal peripheral interface security capability 4.5 Mobile intelligent terminal application layer security 4.6 mobile intelligent terminal user data security protection5 Mobile intelligent terminal function Restriction requirements Test methodreferencesForewordThis standard is prepared in accordance with the rules given in GB/T 1.1-2009. This standard is one of the standards for mobile intelligent terminal security, and the names and structures of this series of standards are expected to be as follows. A) Design Guidelines for Safety Capability of Mobile Intelligent Terminals; B) YD/T 2407-2013 "Mobile intelligent terminal security capability technical requirements"; D) YD/T 1886-2009 "Technical requirements and test methods for mobile terminal chip safety". This standard is used in conjunction with the "mobile intelligent terminal security capabilities technical requirements" supporting the use. This standard is proposed and centralized by China Communications Standardization Association. The drafting of this standard. Ministry of Industry and Information Technology Telecommunications Research Institute, Beijing Spreadtrum Transtech Services Communication Technology Co., Ltd., Datang Telecommunication Technology Industry Group. The main drafters of this standard. Pan Juan, Guoxiao Ju, Hong Hongwei, Wang Kun, Li Yunfan, Yu Lu, Yuan Guangxiang, He Guili, Shi Denian, Li Wei, Yu Huawei, Li Jianwei, Li Qian.IntroductionWith the extensive application of mobile intelligent terminals and the continuous expansion of functions, the security problems in the use of the process are more and more Many users of concern. In recent years, malicious fees, eavesdropping, theft, location information leakage and other security incidents frequently, so that users The mobile intelligent terminal security concerns, and thus affect the mobile smart terminals and mobile Internet applications. this Standard, designed to improve the mobile intelligent terminal's own security capabilities, to prevent the mobile smart terminal on the Security threats, to avoid the interests of users are damaged, while preventing mobile smart terminals on mobile communications network security is not Influence. This standard is "mobile intelligent terminal security capability technical requirements" supporting the test method. This standard is for technical requirements Out of the technical indicators designed a corresponding, scientific test methods used to verify whether the mobile smart terminal to meet the technical requirements of the rules Set the content. This standard can be used to manage the security capabilities of mobile intelligent terminals. Through this standard can be guaranteed from the perspective of test methods Card mobile intelligent terminal security capability requirements of the implementation of the ground, and effectively improve the security capabilities of mobile intelligent terminals. Test Method for Security Capability of Mobile Intelligent Terminal1 ScopeThis standard specifies the test method for the security capability of mobile intelligent terminals, including the mobile intelligent terminal hardware security capability test Method, mobile intelligent terminal operating system security ability test method, mobile intelligent terminal peripheral interface security ability test method, Mobile intelligent terminal application layer security ability test method, mobile intelligent terminal user data protection security ability test method. This standard applies to a variety of standard mobile intelligent terminal, individual terms do not apply to special industries, professional applications. other Terminal reference use.2 normative reference documentsThe following documents are indispensable for the application of this document. Note the date of the reference file, only the date of the date of the note Apply to this document. For undated references, the latest edition (including all modifications) applies to this document. Technical requirements and test methods for mobile terminal chip safety Technical Requirements for Safety Capability of Mobile Intelligent Terminals YD/T 2407-2013 3 terms, definitions and abbreviations 3.1 Terms and definitions The following terms and definitions apply to this document. 3.1.1 Mobile Smart Terminal Smart Mobile Terminal Has access to mobile communication network capabilities, can provide application development interface of the open operating system, and can install and A mobile terminal that runs third-party applications. 3.1.2 Security Capability In the mobile intelligent terminal can be achieved, to prevent security threats of technical means. 3.1.3 User User An object that uses mobile smart terminal resources, including human or third-party applications. 3.1.4 User Data User Data The personal information stored on the mobile smart terminal, including the data generated locally by the user, is locally generated for the user Into the data, after the user permission to enter the user data from the external data area. 3.1.5 Authorization Authorization After the user identity is authenticated, according to the pre-set security policy, the process of granting the user the appropriate authority. 3.1.6 Digital Signature Digital Signature Data attached to the data unit, or data obtained by cryptographic transformation of the data unit. Allow the recipient of the data The source and integrity of the data, the protection of data is not tampered with, forged, and to ensure that the data is not denied. 3.1.7 Code Signature A mechanism that uses a digital signature mechanism to sign all or part of a code by an entity with signed privileges. 3.1.8 Mobile Intelligent Terminal Operating System Operator System 0f Smart Mobile Terminal Mobile intelligent terminal The most basic system software, it controls and manages various hardware and software resources of mobile intelligent terminal, and Provides an interface for application development. 3.2 Abbreviations The following abbreviations apply to this document. CRL Certificate Revocation List Certificate Revocation List LAWMO Lock and Wipe Management object Locking is erasing the managed object OCSP Online Certificate Status Protocol WLAN Wireless Local Area Network4 Mobile intelligent terminal security capability test method4.1 Overview This chapter describes how to evaluate the various security capabilities of mobile smart terminals. Evaluation results are the following two; - no abnormality. no safety risk or security incident was found by the evaluation method; - does not meet the requirements. direct detection of security incidents or do not meet the safety requirements. The requirements mentioned in this chapter are found in the requirements of YD/T 2407-2013 "Technical Requirements for Safety Requirements for Mobile Intelligent Terminals". 4.2 mobile intelligent terminal hardware security capabilities To be determined. 4.3 mobile intelligent terminal operating system security capabilities 4.3.1 Security call control capability 4.3.1.1 Communication class function Control mechanism 4.3.1.1.1 Call the telephone control mechanism Test number. 4.3.1.1.1 Test item. The control mechanism for making a call Item Requirement. See YD/T 2407-2013 Section 5.3.1.1.1 Preset condition. The measured mobile intelligent terminal is in normal working condition Test steps. Step 1. Check whether the operating system of the mobile intelligent terminal under test provides the development function of making the call; Step 2. If the mobile smart terminal operating system provides dial-up development capabilities, use this feature to develop a call With procedures; Step 3. Run the application to see if the terminal requires the user to confirm the call expected outcome. After step 1, if the mobile intelligent terminal operating system does not provide the development function of the call, the project evaluation result is "No exception", the end of the evaluation; After step 3, if the mobile intelligent terminal requires the user to confirm, the project evaluation result is "no abnormality", the evaluation result bundle; After step 3, if the mobile smart terminal does not require the user to confirm and successfully call, the project evaluation result is "Does not meet the requirements", the evaluation is over 4.3.1.1.2 Three-party call control mechanism Test No.. 4.3.1.1.2 Test items. controlled mechanisms for three-way calls Item Requirement. See YD/T 2407-2013 Section 5.3.1.1.2 Preset condition. The measured mobile intelligent terminal is in normal working condition Test steps. Step 1. Check whether the operating system of the mobile intelligent terminal under test provides the development function of the three-way call; Step 2. If the mobile smart terminal operating system provides three-party call development function, use this function to develop a three-party call With procedures; Step 3. Run the application to see if the terminal requires the user to confirm the three-party call expected outcome. After step 1, if the mobile intelligent terminal operating system does not provide the development function of the three-party call, the project evaluation result is "No exception", the end of the evaluation; After step 3, if the mobile intelligent terminal requires the user to confirm, the project evaluation result is "no abnormality", the evaluation result bundle; After step 3, if the mobile intelligent terminal does not require the user to confirm and successfully open the three-party call, the project evaluation result As "does not meet the requirements", the evaluation is over 4.3.1.1.3 Send SMS controlled mechanism Test number. 4.3.1.1.3 Test items. the control mechanism for sending text messages Item Requirement. See YD/T 2407-2013 Section 5.3.1.1.3 Preset condition. The measured mobile intelligent terminal is in normal working condition Test steps. Step 1. Check whether the operating system of the mobile terminal under test is providing the development function of sending the SMS; Step 2. If the mobile intelligent terminal operating system provides the development function of sending SMS, use this function to develop send SMS With procedures; Step 3. Run the application to see if the terminal requires the user to confirm sending text messages expected outcome. After step 1, if the mobile intelligent terminal operating system does not provide the development function of sending the message, the project evaluation result is "No exception", the end of the evaluation; After step 3, if the mobile intelligent terminal requires the user to confirm, the project evaluation result is "no abnormality", the evaluation result bundle; After step 3, if the mobile intelligent terminal does not require the user to confirm and successfully send the message, the project evaluation result is "Does not meet the requirements", the evaluation is over 4.3.1.1.4 Send MMS controlled mechanism Test number. 4.3.1.1.4 Test item. A controlled mechanism for sending multimedia messages Item Requirement. See YD/T 2407-2013 Section 5.3.1.1.4 Preset condition. The measured mobile intelligent terminal is in normal working condition Test steps. Step 1. Check whether the operating system of the mobile terminal under test is providing the development function of sending MMS; Step 2. If the mobile intelligent terminal operating system provides the development function of sending MMS, use this function to develop send MMS With procedures; Step 3. Run the application to see if the terminal requires the user to confirm sending a multimedia message expected outcome. After step 1, if the mobile intelligent terminal operating system does not provide the development function of sending the multimedia message, the project evaluation result is "No exception, the end of the evaluation; After step 3, if the mobile intelligent terminal requires the user to confirm, the project evaluation result is "no abnormality", the evaluation result bundle; After step 3, if the mobile intelligent terminal does not require the user to confirm and successfully send the multimedia message, the project evaluation result is "Does not meet the requirements", the evaluation is over 4.3.1.1.5 Send mail controlled mechanism Test number. 4.3.1.1.5 Test item. The managed mechanism for sending mail Item Requirement. See YD/T 2407-2013 Section 5.3.1.1.5 Preset condition. The measured mobile intelligent terminal is in normal working condition Test steps. Step 1. Check whether the operating system of the mobile terminal under test is providing the development function of sending mail; Step 2. If the mobile smart terminal operating system provides the development function of sending mail, use this function to develop send mail should With procedures; Step 3. Run the application to see if the terminal requires the user to confirm sending the message expected outcome. After step 1, if the mobile intelligent terminal operating system does not provide the development function of sending mail, the project evaluation result is "No exception", the end of the evaluation; After step 3, if the mobile intelligent terminal requires the user to confirm, the project evaluation result is "no abnormality", the evaluation result bundle; After step 3, if the mobile smart terminal does not require the user to confirm and successfully send the message, the project evaluation result is "Does not meet the requirements", the evaluation is over 4.3.1.1.6 Mobile communication network data connection controlled mechanism Test No.. 4.3.1.1.6.1 Test items. Mobile communication network data connection on/off switch Item Requirement. See YD/T 2407-2013 Section 5.3.1.1.6 Preset condition. Measured mobile intelligent terminal Mobile communication network data connection is off Test steps. Step 1. Check whether the mobile intelligent terminal is set to provide mobile communication network data connection open I closed switch; Step 2. If the mobile intelligent terminal provides a switch, use this switch to turn on the mobile communication network data connection; Step 3. Use the switch to turn off the mobile communication network data connection expected outcome. In step 1, the switch should be able to find the switch on/off the mobile communication network data on the mobile intelligent terminal; After step 2, the mobile communication network data connection of the mobile intelligent terminal under test is successfully opened; After step 3, the mobile communication network data connection of the mobile intelligent terminal under test is successfully closed. Mobile intelligent terminal to meet the above expected results, the project evaluation results for the "no exception", the other side of the project evaluation results As "does not meet the requirements" Test number. 4.3.1.1.6.2 Test project; mobile communication network data connection on/off control mechanism Item Requirement. See YD/T 2407-20113 Section 5.3.1.1.6 Preset condition. Measured mobile intelligent terminal Mobile communication network data connection is off Test steps. Step 1. Check whether the operating system of the mobile terminal under test is providing mobile communication network Data connection on/off Hair function Step 2. If the mobile intelligent terminal operating system provides the development function of the mobile communication network data connection on/off, Use this function to develop mobile communication network data connection open/close application; Step 3. Run the application to open the mobile communication network data connection to see if the terminal requires the user to confirm the mobile communication network The connection of the data connection is open expected outcome. After step 1, if the mobile intelligent terminal operating system does not provide the development function of the mobile communication network data connection open The evaluation results of the project are "no exception", the evaluation is over; After step 3, if the mobile intelligent terminal requires the user to confirm the opening of the data link of the mobile communication network, the project evaluation The result is "no exception", the end of the evaluation; After step 3, if the mobile intelligent terminal does not require the user to confirm and successfully open the mobile communication network data connection, then Project evaluation results for the "non-compliance", the evaluation is over Test number. 4.3.1.1.6.3 Test items. Mobile Transparent Network data connection status prompts Item Requirement. See YD/T 2407-2013 Section 5.3.1.1.6 Preset condition. The mobile terminal of the mobile terminal is in the off state Test steps. Step 1. Open the mobile communication network data connection by moving the switch on the intelligent terminal operating system; Step 2. Turn off the mobile communication network data connection by moving the switch on the intelligent terminal operating system; Step 3. If the mobile intelligent terminal operating system provides the development function of the mobile communication network data connection, 4.3.1.1.6.2 developed in the mobile communication network data connection to open the application; Step 4. Run the mobile communication network data connection to close the application expected outcome. In step 1, the mobile intelligent terminal should present the mobile communication network data connection to the user on the user's main interface. State hints; After step 1, the mobile intelligent terminal should present the mobile communication network data connection to the user on the user main interface. State hints; After step 2, the mobile intelligent terminal should present the mobile communication network data connection to the user on the user's main interface State hints; After step 3, the mobile intelligent terminal should present the mobile communication network data connection to the user on the user's main interface. State hints; After step 4, the mobile intelligent terminal shall present the mobile communication network data connection to the user on the user's main interface State prompt. Mobile intelligent terminal to meet the above expected results, the project evaluation results for the "no exception", the other side of the project evaluation results As "does not meet the requirements" Test No.. 4.3.1.1.6.4 Test item. Mobile communication network data transfer status prompt Project requirements. see YD/T 2407- "2013 Section 5.3.1.1.6 Preset condition. The mobile terminal of the mobile terminal is on Test steps. Step ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of YD/T 2408-2021_English be delivered?Answer: Upon your order, we will start to translate YD/T 2408-2021_English as soon as possible, and keep you informed of the progress. The lead time is typically 5 ~ 8 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of YD/T 2408-2021_English with my colleagues?Answer: Yes. The purchased PDF of YD/T 2408-2021_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.Question 5: Should I purchase the latest version YD/T 2408-2021?Answer: Yes. Unless special scenarios such as technical constraints or academic study, you should always prioritize to purchase the latest version YD/T 2408-2021 even if the enforcement date is in future. Complying with the latest version means that, by default, it also complies with all the earlier versions, technically. |
