ISO/IEC 27071:2023 网络安全 在设备和服务之间建立可信连接的安全建议

标准编号：ISO/IEC 27071:2023

中文名称：网络安全 在设备和服务之间建立可信连接的安全建议

英文名称：Cybersecurity — Security recommendations for establishing trusted connections between devices and services

发布日期：2023-07

标准范围

ISO/IEC 27071:2023本文档提供了基于硬件安全模块在设备和服务之间建立可信连接的框架和建议。它包括对以下组件的建议:硬件安全模块、信任根、身份、身份验证和密钥建立、远程证明、数据完整性和真实性。本文档适用于基于硬件安全模块在设备和服务之间建立可信连接的场景。本文档不涉及隐私问题。

ISO/IEC 27071:2023 This document provides a framework and recommendations for establishing trusted connections between devices and services based on hardware security modules. It includes recommendations for components such as: hardware security module, roots of trust, identity, authentication and key establishment, remote attestation, data integrity and authenticity.
This document is applicable to scenarios that establish trusted connections between devices and services based on hardware security modules.
This document does not address privacy concerns.

标准预览图