ICS 35.240 L70/84 团体标准 T/ZSA 67.2-2019 移动智能终端密码模块技术框架 第2部分：密钥加密本地保护技术架构 Technical framework of cryptographic module for mobile smart terminal Part 2：Key-encrypted local p rotection 2019-12-31发布 2020-03-01 实施 中关村 标准化协会 发布 全国团体标准信息平台 T/ZSA 67.2-2019 I 目 次 前言 ................................ ................................ ................................ ................................ ......... III 引言 ................................ ................................ ................................ ................................ ......... IV 1 范围 ................................ ................................ ................................ ................................ ..... 1 2 规范性引 用文件 ................................ ................................ ................................ .................. 1 3 术语和定义 ................................ ................................ ................................ .......................... 1 4 符号和缩略语 ................................ ................................ ................................ ...................... 3 5 概述 ................................ ................................ ................................ ................................ ..... 4 5.1 方案原理 ................................ ................................ ................................ ..................... 4 5.2 安全风险 ................................ ................................ ................................ ..................... 4 5.3 安全措施 ................................ ................................ ................................ ..................... 4 6 技术架构 ................................ ................................ ................................ .............................. 5 7 工作流程 ................................ ................................ ................................ .............................. 6 7.1 概述 ................................ ................................ ................................ ............................. 6 7.2 MST -CC初始化流程 ................................ ................................ ................................ ..... 6 7.3 MST -PPD验证流程 ................................ ................................ ................................ ...... 7 8 密码模块规格 ................................ ................................ ................................ ...................... 9 8.1 概述 ................................ ................................ ................................ ............................. 9 8.2 密码模块类型 ................................ ................................ ................................ .............. 9 8.3 密码边界 ................................ ................................ ................................ ..................... 9 8.4 工作模式 ................................ ................................ ................................ ................... 10 9 密码模块接口 ................................ ................................ ................................ .................... 10 9.1 物理和逻辑接口 ................................ ................................ ................................ ........ 10 9.2 接口类型 ................................ ................................ ................................ ................... 10 9.3 接口定义 ................................ ................................ ................................ ................... 10 9.4 可信信道 ................................ ................................ ................................ ................... 10 10 角色、服务和鉴别 ................................ ................................ ................................ ............. 10 10.1 角色 ................................ ................................ ................................ ......................... 1