标准摘要
[中文适用范围]: 本文件根据 ISO/IEC 15408 系列规定了量子密钥分发 (QKD) 安全性评估的总体框架。具体而言,它规定了 QKD 模块的一组基本通用安全功能要求 (SFR),包括传统网络组件和量子光学组件上的 SFR,以及 QKD 协议的整个实施。为了便于分析 SFR,我们将基于 QKD 模块安全功能的结构分析和 QKD 协议的分类,分析 QKD 模块在其运行环境中可能面临的安全问题。QKD 模块传统网络组件上的 SFR 主要在 ISO/IEC 15408 系列框架下进行表征,同时也参考了 ISO/IEC 19790 的方法以及有关密码模块和网络设备测试的标准。 [外文原描述]: This document specifies a general framework for the security evaluation of quantum key distribution (QKD) according to the ISO/IEC 15408 series. Specifically, it specifies a baseline set of common security functional requirements (SFRs) for QKD modules, including SFRs on the conventional network components and the quantum optical components, and the entire implementation of QKD protocols. To facilitate the analysis of SFRs, security problems that QKD modules can face in their operational environment are analysed based on a structural analysis of the security functionality of QKD modules and the classification of QKD protocols. The SFRs on conventional network components of QKD modules are mainly characterized under the framework of the ISO/IEC 15408 series and also refer to the methodology of ISO/IEC 19790 and relevant standards on testing of cryptographic modules and network devices.
英文名称Information security - Security requirements, test and evaluation methods for quantum key distribution - Part 1: Requirements