Recently, China Cyber Security Review Technology and Certification Center (CCRC) issued the IT Product Information Security Certification (EAL4+) certificate for China Mobile Internet of Things operating system OneOS 2.0. This is the industry's first IT product information security classification certification in the field of IoT operating systems , and China Mobile Internet of Things has also become the first enterprise in this field to obtain this level of certification . EAL4+ is the highest level of operating system information security certification. Passing the EAL4+ security certification indicates that the information security assurance capability of OneOS 2.0 has reached a very high standard in the industry.
What is EAL4+ Security Certification?
EAL (Evaluation Assurance Level) evaluation assurance level is a numerical level used to evaluate the security of IT products or systems in full compliance with the Common Criteria guidelines. The security assurance level obtained after independent assessment of the security of IT products indicates the security and credibility of the product. The higher the level of certification obtained, the higher the security and trustworthiness of the product, the higher the level of protection against threats and suitable for higher risk environments.
China Cybersecurity Review Technology and Certification Center (CCRC, formerly China Information Security Certification Center) is responsible for cybersecurity review technical support and certification in accordance with the Cybersecurity Law, Cybersecurity Review Measures and relevant national laws and regulations on compulsory product certification. specialized agency. According to the IoT operating system industry standard "Internet of Things Real-Time Operating System Security Technical Requirements (Assessment Assurance Level 4 Enhanced Level"), CCRC has comprehensively conducted a comprehensive review of OneOS 2.0's kernel, access control, identity authentication, secure communication, security upgrade, and cryptographic algorithms. After the evaluation, the first IT product information security classification certificate was issued in this field.
What does it mean for OneOS 2.0 to pass EAL4+ certification?
Due to the huge number of terminals, limited equipment resources, and close relationship with production and life, the IoT industry faces more diverse security problems. Malicious attacks may cause direct harm to people and even threaten national security. EAL4+ authoritative certification is a powerful measure to standardize the implementation of security technology in the IoT industry and ensure the security of IoT information.
The IoT operating system is a key hub in the IoT industry chain: it undertakes business applications upwards and shields hardware differences downwards. Before OneOS 2.0 obtained the certification, there was no standard related to the security technology of IoT real-time operating system in China. The EAL4+ security certification passed this time indicates that the information security assurance capability of OneOS 2.0, the IoT operating system, has reached the first-class level in the industry, and users use OneOS to develop applications will be able to obtain greater security.
At the same time, OneOS successfully obtained this certification, filling the gap in the domestic IoT real-time operating system security technical standards, and will further promote the domestic IoT operating system industry to a new level and achieve new breakthroughs.
OneOS is a lightweight operating system launched by China Mobile for the Internet of Things. It features tailorable, cross-platform, low power consumption, and high security. It supports mainstream CPUs such as ARM Cortex-M/R/A, MIPS, and RISC-V. The architecture is compatible with POSIX, CMSIS and other standard interfaces, supports Micropython language development, and provides graphical development tools, which can effectively improve development efficiency and reduce development costs, helping customers develop stable, reliable, safe and easy-to-use IoT applications. Official website address: https://os.iot.10086.cn/
OneOS software address: http://www.oschina.net/p/cmcc-oneos
OneOS project address: https://gitee.com/cmcc-oneos/ OneOS
OneOS technical exchange group: 158631242