ICS 35.240 L70/84 团体标准 T/ ZSA 67.3-2019 移动智能终端密码模块技术框架 第3部分：密钥加密 服务端保护技术架构 Technical framwork of cryptographic module in mobile smart terminal Part 3: Key-encrypted protect ion on server side 2019-12-31发布 2020-03-01 实施 中关村 标准化协会 发布 全国团体标准信息平台 T/ZSA 67.3-2019 I 目 次 前言 ................................ ................................ ................................ ................................ ............... III 引言 ................................ ................................ ................................ ................................ ............... IV 1 范围 ................................ ................................ ................................ ................................ ........... 1 2 规范性引用文件 ................................ ................................ ................................ ......................... 1 3 术语和定义 ................................ ................................ ................................ ................................ 1 4 符号和缩略语 ................................ ................................ ................................ ............................ 3 5 概述 ................................ ................................ ................................ ................................ ........... 3 5.1 方案原理 ................................ ................................ ................................ .............................. 3 5.2 主要风险 ................................ ................................ ................................ .............................. 4 5.3 安全措施 ................................ ................................ ................................ .............................. 4 6 技术框架 ................................ ................................ ................................ ................................ .... 5 6.1 概述 ................................ ................................ ................................ ................................ ...... 5 6.2 移动智能终端密码组件（ MST -CC） ................................ ................................ .................. 5 6.3 服务端密码组件 SS-CC ................................ ................................ ................................ ........ 6 6.4 移动应用 ................................ ................................ ................................ .............................. 6 7 工作流程 ................................ ................................ ................................ ................................ .... 6 7.1 密码模块初始化流程 ................................ ................................ ................................ ........... 6 7.2 数字签名流程 ................................ ................................ ................................ ....................... 7 7.3 签名验签流程 ................................ ................................ ................................ ....................... 8 8 密码模块规格 ................................ ................................ ................................ ............................ 9 8.1 密码模块类 型 ................................ ................................ ................................ ....................... 9 8.2 密码边界 ................................ ................................ ................................ .............................. 9 8.3 工作模式 ................................ ................................ ................................ .............................. 9 9 密码模块接口 ................................ ................................ ................................ ............................ 9 9.1 物理和逻辑接口 ................................ ................................ ................................ ................... 9 9.2 接口类型 ................................ ................................ ................................