论文部分内容阅读
该文为物联网应用中安全要求较高的有源RFID标签类产品建立了一套满足评估保证级(EAL)4级的一组安全要求。此安全要求的建立,以通用评估准则(ISO15408)为依据,通过对有源标签保护的资产价值和潜在威胁的分析,为有源标签界定了合理的评估保证级别及相应的安全保证要求,并通过分析其在物联网应用中可能面临的潜在威胁,导出了有源标签需要满足的安全目的,进一步得出了需要满足的最小安全功能要求,并论证了它们之间的对应性。建立的安全要求框架可以作为指引研发者对有源标签进行全面安全性设计考量的重要参考,也可以为有源标签类产品的采购、测评提供依据。
This paper establishes a set of security requirements to meet the requirements of Level 4 of Assessment Assurance Level (EAL) for active RFID tags with high security requirements in IoT applications. The establishment of this safety requirement based on the general evaluation criteria (ISO15408) is based on the analysis of the asset value and potential threats of active tag protection, which defines a reasonable level of assurance and corresponding assurance requirements for active tags By analyzing the potential threats that it may face in the IoT application, the security objectives that need to be met by the active tags are derived, the minimum security requirements that need to be met are further derived, and the correspondence between them is demonstrated. The established safety requirements framework can be used as an important reference for developers to guide the overall safety design of active tags. It can also provide the basis for the procurement and evaluation of active tag products.