GB/T 35278-2026 网络安全技术 移动终端安全技术规范

ICS35.030

CCSL80

中华人民共和国国家标准

GB/T35278—2026

代替GB/T35278—2017

网络安全技术移动终端安全技术规范

Cybersecuritytechnology—Technicalspecificationsformobileterminalsecurity

2026⁃07⁃30发布2027⁃02⁃01实施

国家市场监督管理总局

国家标准化管理委员会发布

GB/T35278—2026

目次

前言··························································································································Ⅲ

1范围·······················································································································1

2规范性引用文件········································································································1

3术语、定义和缩略语···································································································1

3.1术语和定义········································································································1

3.2缩略语···········································································································2

4概述·······················································································································3

4.1TOE介绍··········································································································3

4.2TOE安全特性····································································································5

5安全问题·················································································································5

5.1资产·················································································································5

5.2威胁主体···········································································································6

5.3安全威胁···········································································································6

5.4组织安全策略·····································································································7

5.5假设·················································································································7

6安全目的·················································································································7

6.1移动终端安全目的·······························································································7

6.2环境安全目的·····································································································8

7扩展组件·················································································································8

7.1族FCS_CKH_EXT······························································································8

7.2族FCS_CKM_EXT·····························································································9

7.3族FPT_AEX_EXT····························································································10

7.4族FPT_JTA_EXT·····························································································11

7.5族FPT_SEE_EXT·····························································································12

7.6族FPT_STG_EXT····························································································12

7.7族FPT_TST_EXT····························································································13

7.8族FPT_TUD_EXT····························································································14

8安全要求···············································································································15

8.1安全功能要求····································································································15

8.2安全保障要求····································································································37

9测试评估方法·········································································································39

9.1安全功能要求的测试方法·····················································································39

9.2安全保障要求的评估方法····················································································58

Ⅰ

GB/T35278—2026

9.3脆弱性评估测试细则··························································································60

10基本原理··············································································································74

10.1安全目的基本原理····························································································74

10.2安全要求的基本原理·························································································77

10.3组件依赖关系··································································································80

附录A（资料性）用户数据保护和密钥层次结构································································85

A.1用户数据保护···································································································85

A.2密钥层次结构··································································································85

参考文献····················································································································87

Ⅱ

GB/T35278—2026

前言

本文件按照GB/T1.1—2020《标准化工作导则第1部分：标准化文件的结构和起草规则》的规定

起草。

本文件代替GB/T35278—2017《信息安全技术移动终端安全保护技术要求》，与GB/T35278—

2017相比，除结构调整和编辑性改动外，主要技术变化如下：

a）更改了“概述”，明确了评估对象TOE的范围及TOE所处的网络环境（见第4章，2017年版

的第4章）；

b）增加了“资产”“威胁主体”“组织安全策略”相关内容（见5.1、5.2、5.4）；

c）增加了“安全威胁”中的“非授权访问（T.UNAUTHACCESS）”“授权用户的恶意行为（T.

ACCESSMALICIOUS）”“残余信息利用（T.RESIDUALDATA）”“完整性破坏（T.

INTDESTROY）”“设备仿冒（T.DEVSPOOF）”相关内容（见5.3.1、5.3.2、5.3.5、5.3.6、

5.3.8）；

d）更改了“安全威胁”中的“数据传输窃听（T.EAVESDROP）”“物理访问（T.PHYSICAL）”“恶

意应用软件（T.MALICIOUSAPP）”相关内容（见5.3.3、5.3.4、5.3.7，2017年版的5.2.1、5.2.3、

5.2.4）；

e）更改了“假设”相关内容（见5.5，2017年版的5.1.1、5.1.2）；

f）增加了“安全目的”中的“事件审计（O.AUDIT）”“访问控制（O.ACTROL）”“加密保护

（O.ENCRYPTO）”“安全擦除（O.INFOERASE）”“会话管理（O.SESSIONMANAG）”“设备

鉴别（O.DEVAUTH）”“隐私保护（O.PRIVACY）”等相关内容（见6.1.1、6.1.3~6.1.5、6.1.7、

6.1.9、6.1.10）；

g）更改了“安全目的”中的“身份鉴别（O.AUTH）”“安全通信（O.SECCOM）”“完整性保护

（O.INTEGRITY）”相关内容（见6.1.2、6.1.6、6.1.8，2017年版的6.1.1、6.1.4、6.1.5）；

h）更改了“环境安全目的”中的“物理安全（OE.PHYSICAL）”“人员（OE.PERSONNEL）”“远程

设备安全（OE.REMOTE）”相关内容（见6.2.1、6.2.2、6.2.3，2017年版的6.2.1、6.2.2）；

i）增加了“扩展组件”相关内容，包括“族FCS_CKH_EXT”“族FCS_CKM_EXT”“族

FPT_AEX_EXT”“族FPT_JTA_EXT”“族FPT_SEE_EXT”“族FPT_STG_EXT”“族

FPT_TST_EXT”“族FPT_TUD_EXT”等相关内容（见第7章）；

j）更改了“安全功能要求”中的“概述”“FAU类：安全审计”“FCS类：密码支持”“FDP类：用户

数据保护”“FIA类：标识和鉴别”“FMT类：安全管理”“FPT类：TSF保护”“FTA类：TOE

访问）”“FTP类：可信路径/信道”相关内容（见8.1.1~8.1.6、8.1.8~8.1.10，2017年版的第7章）；

k）增加了“安全功能要求”中的“FPR类：隐私”相关内容（见8.1.7）；

l）更改了“安全保障要求”中的“概述”“ADV类”“AGD类”“ALC类”“ASE类”“ATE类”

“AVA类”（见8.2，2017年版的第8章）；

m）增加了“测试评估方法”（见第9章）；

n）更改了“基本原理”中的“安全目的基本原理”“安全要求的基本原理”相关内容（见10.1、10.2，

2017年版的第9章）；

o）增加了“组件依赖关系”（见10.3）。

请注意本文件的某些内容可能涉及专利。本文件的发布机构不承担识别专利的责任。

本文件由全国信息安全标准化技术委员会（SAC/TC260）提出并归口。

Ⅲ

GB/T35278—2026

本文件起草单位：中国信息通信研究院、中国网络安全审查认证和市场监管大数据中心、北京邮电

大学、中国移动通信集团有限公司、嘉兴嘉赛信息技术有限公司、华为终端有限公司、维沃移动通信有

限公司、北京小米移动软件有限公司、高通无线通信技术（中国）有限公司、OPPO广东移动通信有限公

司、荣耀终端股份有限公司、中讯邮电咨询设计院有限公司。

本文件主要起草人：袁琦、田琛、邹仕洪、王峰、莊敏、刘小丽、张宏星、邱勤、衣强、翟世俊、王键、

贾科、姚一楠、吴越、杜志敏、郑琛、安媛媛、徐思嘉、王江胜、李腾、李根、赵晓娜、侯玉华、宁静。

本文件及其所代替文件的历次版本发布情况为：

——2017年首次发布为GB/T35278—2017；

——本次为第一次修订。

Ⅳ

GB/T35278—2026

网络安全技术移动终端安全技术规范

1范围

本文件给出了移动终端的安全问题、安全目的和扩展组件，规定了移动终端的安全要求，并描述了

对应的测试评估方法。

本文件适用于移动终端产品的设计、开发、制造、应用和测试。

2规范性引用文件

下列文件中的内容通过文中的规范性引用而构成本文件必不可少的条款。其中，注日期的引用文

件，仅该日期对应的版本适用于本文件；不注日期的引用文件，其最新版本（包括所有的修改单）适用于

本文件。

GB/T18336.3—2024网络安全技术信息技术安全评估准则第3部分：安全保障组件

GB/T32915—2016信息安全技术二元序列随机性检测方法

3术语、定义和缩略语

3.1术语和定义

下列术语和定义适用于本文件。

3.1.1

移动终端mobileterminal

可移动的便携式计算设备。

注：移动终端包括带有无线上网功能的智能移动通信终端、平板式计算机、便携式计算机。

[来源：GB/T25069—2022，3.719]

3.1.2

应用软件applicationsoftware

移动终端操作系统之外，向用户提供服务功能的软件。

[来源：GB/T30284—2020，3.1.2]。

3.1.3

鉴别数据authenticationdata

用于验证用户所声称身份的信息。

[来源：GB/T30284—2020，3.1.3]。

3.1.4

授权用户authorizeduser

依据安全策略可执行某项操作的用户。

[来源：GB/T30284—2020，3.1.4]。

3.1.5

数字签名digitalsignature

附加在数据单元上的一些数据，或是对数据单元做密码变换，这种附加数据或密码变换被数据单

1