GB17859-1999

Classified criteria for security protection of computer information system

计算机信息系统安全保护等级划分准则

GB 17859-1999은(는) 현행 중국 강제 국가 표준입니다: Classified criteria for security protection of computer information system. 산업: 전자. 주제: 제품 안전. 시행일: 2001년 1월 1일.

적용 여부는 제품 범위, 인증 경로, 주관 당국 공고, 전환 규정에 따라 달라집니다. 컴플라이언스 판단에 사용하기 전에 번역을 의뢰하거나 공식 출처를 확인하세요.

컴플라이언스 개요

이 개요는 현재 영어로만 제공됩니다.

적용 범위

This standard applies to the classification of security protection technical capabilities for computer information systems in China. It provides a framework for evaluating the security architecture of IT infrastructure, software platforms, and network systems. It does not cover specific security product performance parameters but focuses on system-level security protection capabilities. System integrators and IT infrastructure providers operating in the Chinese market must adhere to these classified security requirements.

기술 요구 사항

GB 17859-1999 defines five distinct levels of security protection capabilities for computer information systems, ranging from Level 1 (User自主保护级) to Level 5 (Access验证保护级). Each level builds upon the previous one, requiring more stringent security policies and access control mechanisms. The standard specifies requirements for the Trusted Computing Base (TCB), which must implement both discretionary and mandatory access controls. It also outlines the specifications for identity authentication, data integrity, and audit mechanisms to ensure users are accountable for their actions. For higher levels (Level 4 and Level 5), the standard introduces advanced requirements such as covert channel analysis, trusted path, and trusted recovery. These advanced levels require the system to possess high penetration resistance and employ formalized security policy models.

시험 방법

The evaluation procedures involve verifying that the TCB correctly implements the required security mechanisms, such as discretionary and mandatory access controls. Testing includes reviewing audit trail records to confirm that security events are accurately captured. For Level 4 and Level 5, assessments require thorough covert channel analysis to identify and measure any unauthorized communication paths, as well as verifying the integrity of trusted paths during user authentication.

자주 묻는 질문

What products are regulated under GB 17859-1999?

It applies to computer information systems deployed in China, providing a framework to evaluate system-level security protection capabilities rather than targeting individual hardware products.

Does GB 17859-1999 reference any international standards?

Yes, the standard was developed by referencing the U.S. Trusted Computer System Evaluation Criteria (DoD 5200.28-STD) and the Trusted Network Interpretation (NCSC-TG-005).

What are the five security levels defined in GB 17859-1999?

The five levels are User自主保护级, System审计保护级, Security标记保护级, Structured保护级, and Access验证保护级, with progressively increasing security requirements.

The summary above provides a high-level overview of GB 17859-1999. To ensure complete compliance for your products entering the Chinese market, a precise and professional translation of the full technical specifications is essential. Purchase our high-quality English translation of GB 17859-1999 today to access all detailed parameters, definitions, and evaluation procedures.

적용 참고 사항

유형: 기초
CCS: L09
ICS: 35.020
주관 부처: Office of the Central Cyberspace Affairs Commission
기술 위원회: Office of the Central Cyberspace Affairs Commission