金融服务 安全加密设备（零售） 第1部分：概念和要求

[中文适用范围]： 本文件根据 ISO 9564 系列、ISO 16609 和 ISO 11568 中定义的加密过程规定了安全加密设备 (SCD) 的安全特性。本文件陈述了有关 SCD 的操作特性以及此类设备在其生命周期所有阶段的管理的安全特性。本文件不涉及因 SCD 拒绝服务而引起的问题。本文件不涉及使用多方计算 (MPC) 实现某些安全目标并依赖这些目标提供加密服务的软件服务。注：在通用语言中，这些有时被称为“软”或软件硬件安全模块 (HSM)，这是误导性的，并且与本文件中 HSM 的定义不符。 [外文原描述]： This document specifies the security characteristics for secure cryptographic devices (SCDs) based on the cryptographic processes defined in the ISO 9564 series, ISO 16609 and ISO 11568. This document states the security characteristics concerning both the operational characteristics of SCDs and the management of such devices throughout all stages of their life cycle. This document does not address issues arising from the denial of service of an SCD. This document does not address software services that use multi-party computation (MPC) to achieve some security objectives and, relying on these, offer cryptographic services. NOTE These are sometimes called “soft” or software hardware security modules (HSMs) in common language, which is misleading and does not correspond to the definition of HSM in this document.