嵌入式UICC远程签约管理安全威胁分析  

Security Threats Analysis of Embedded UICC Remote Provisioning

作　　者：顾旻霞[1] 刘廉如[1,2] 陈豪[3] 张忠平[1] 张尼[3] 

机构地区：[1]中国联合网络通信有限公司,北京100033 [2]北京邮电大学,北京1008763 [3]中国联通研究院,北京100032

出　　处：《信息通信技术》2015年第1期7-10,44,共5页Information and communications Technologies

基　　金：江苏省未来网络创新研究院的未来网络前瞻性研究项目(BY2013095-3-01;BY2013095-3-03)

摘　　要：嵌入式UICC作为电信智能卡的一种新形态,具有良好的物理特性、应用承载和发行管理能力,实现嵌入式UICC远程签约管理对推动物联网产业发展具有重要意义。文章总结嵌入式UICC远程签约管理的发展现状及平台架构,提出一种基于矩阵图的安全威胁分析方法,并运用在嵌入式UICC远程签约管理场景中,从纵向和横向两个维度分析嵌入式UICC远程签约管理面临的安全威胁,为安全目标的设定、安全架构的设计奠定了基础。Embedded UICC, as a new form of telecommunication smart card, has good physical characteristics, application hosting and distribution management capabilities. The embedded UICC remote provisioning management has an important significance for pushing forward the development of Internet of Things. Firstly, this paper summarizes the development status and platform architecture of embedded UICC remote provisioning management. Then, a matrix based security threat analysis method is proposed. In the end, this kind of security threat analysis method is utilized in the embedded UICC remote provisioning management scenario to analyze the security threats from the vertical and parallet dimensions, which will provide a solid basis for setting security objectives and concluding security requirements.

关 键 词：物联网 安全威胁分析 矩阵图 嵌入式通用电路卡 

分 类 号：TN918.4[电子电信—通信与信息系统]