Raws li Cov Khoom Siv Kev Nyab Xeeb thiab Kev Sib Txuas Lus Txoj Cai 2023 tau tshaj tawm los ntawm UK thaum Lub Plaub Hlis 29, 2023, UK yuav pib tswj hwm kev ruaj ntseg network rau cov neeg siv khoom sib txuas txij lub Plaub Hlis 29, 2024, siv rau Askiv, Scotland, Wales, thiab Northern Ireland. Txog tam sim no, nws tsuas yog dhau 3 lub hlis xwb, thiab cov tuam txhab loj xa tawm mus rau UK lag luam yuav tsum ua kom tiav PSTI daim ntawv pov thawj kom sai li sai tau kom ntseeg tau tias kev nkag mus rau hauv UK lag luam. Muaj kev cia siab rau lub sijhawm zoo ntawm 12 lub hlis txij li hnub tshaj tawm mus txog rau thaum ua tiav.
1.PSTI Act Documents:
① UK Cov Khoom Siv Kev Ruaj Ntseg thiab Kev Sib Txuas Sib Txuas Lus (Cov Khoom Siv Kev Ruaj Ntseg) tswj hwm.
https://www.gov.uk/government/publications/the-uk-product-security-and-telecommunications-infrastructure-product-security-regime
②Product Security and Telecommunications Infrastructure Act 2022.https://www.legislation.gov.uk/ukpga/2022/46/part/1/enacted
③ Cov Khoom Siv Kev Ruaj Ntseg thiab Kev Sib Txuas Lus (Kev Nyab Xeeb Kev Nyab Xeeb rau Cov Khoom Siv Txuas Txuas) Cov Cai 2023.https://www.legislation.gov.uk/uksi/2023/1007/contents/made
2. Daim nqi muab faib ua ob ntu:
Ntu 1: Hais txog cov khoom siv kev nyab xeeb
Cov qauv tsim qauv ntawm Cov Khoom Siv Kev Nyab Xeeb thiab Kev Sib Txuas Lus (Kev Nyab Xeeb Kev Nyab Xeeb rau Cov Khoom Siv Txuas Txuas) Txoj Cai tau qhia los ntawm tsoomfwv UK hauv xyoo 2023. Cov qauv no tau hais txog cov kev xav tau los ntawm cov tuam txhab, cov neeg xa khoom, thiab cov xa tawm raws li lub luag haujlwm, thiab muaj cai rau kev nplua nyiaj txog li £ 10 lab lossis 4% ntawm lub tuam txhab cov nyiaj tau los thoob ntiaj teb ntawm cov neeg ua txhaum cai. Cov tuam txhab uas tseem ua txhaum cai tseem yuav raug nplua ntxiv £ 20000 ib hnub.
Ntu 2: Cov Txheej Txheem Kev Sib Txuas Lus Sib Txuas Lus, tsim kom nrawm rau kev teeb tsa, siv, thiab kho dua tshiab ntawm cov cuab yeej zoo li no
Tshooj lus no xav kom IoT cov tuam txhab tsim khoom, cov khoom lag luam, thiab cov xa tawm kom ua raws li cov cai tshwj xeeb cybersecurity. Nws txhawb nqa kev qhia txog kev siv dav dav thiab 5G tes hauj lwm mus txog gigabits los tiv thaiv cov pej xeem los ntawm kev pheej hmoo los ntawm cov neeg siv khoom tsis zoo txuas nrog.
Txoj Cai Kev Sib Txuas Hluav Taws Xob (Electronic Communications Law) qhia txog txoj cai ntawm cov neeg ua haujlwm hauv network thiab cov chaw muab kev tsim kho vaj tse los txhim kho thiab tswj cov kev sib txuas lus digital ntawm thaj av pej xeem thiab ntiag tug. Kev hloov kho ntawm Txoj Cai Kev Sib Txuas Hluav Taws Xob hauv xyoo 2017 ua rau kev xa tawm, kev saib xyuas, thiab kev txhim kho cov txheej txheem digital pheej yig dua thiab yooj yim dua. Cov kev ntsuas tshiab ntsig txog kev sib txuas lus hauv kev sib txuas lus hauv tsab cai lij choj PSTI yog raws li kev hloov kho Electronic Communications Act xyoo 2017, uas yuav pab ua kom muaj kev tshaj tawm yav tom ntej taw qhia txog gigabit broadband thiab 5G tes hauj lwm.
Txoj Cai PSTI ntxiv rau Tshooj 1 ntawm Cov Khoom Siv Kev Ruaj Ntseg thiab Kev Sib Txuas Lus Txoj Cai 2022, uas tau teeb tsa qhov kev nyab xeeb yam tsawg kawg nkaus rau kev muab khoom rau cov neeg siv khoom hauv tebchaws Askiv. Raws li ETSI EN 303 645 v2.1.1, ntu 5.1-1, 5.1-2, 5.2-1, thiab 5.3-13, nrog rau ISO / IEC 29147: 2018 cov qauv, cov kev cai sib xws thiab cov kev xav tau raug npaj rau tus password, kev nyab xeeb yam tsawg kawg nkaus hloov kho lub sij hawm cycles, thiab yuav ua li cas qhia txog kev ruaj ntseg teeb meem.
Product Scope koom nrog:
Cov khoom lag luam txuas nrog kev ruaj ntseg, xws li cov pa luam yeeb thiab pos huab, ntsuas hluav taws, thiab lub qhov rooj xauv, cov cuab yeej txuas hauv tsev automation, smart doorbells thiab tswb systems, IoT hauv paus chaw nres tsheb thiab hubs txuas ntau yam khoom siv, cov pab cuam hauv tsev ntse, smartphones, cov koob yees duab txuas (IP thiab CCTV), cov cuab yeej siv tau zoo, cov tub yees txuas nrog, lub tshuab ntxhua khaub ncaws, lub freezers, kas fes tshuab, tswj kev ua si, thiab lwm yam khoom zoo sib xws.
Scope ntawm cov khoom raug zam:
Cov khoom muag nyob rau hauv Northern Ireland, ntse ntsuas, hluav taws xob tsheb them cov ntsiab lus thiab cov khoom siv kho mob, nrog rau cov ntsiav tshuaj hauv computer siv rau hnub nyoog tshaj 14 xyoos.
3.The ETSI EN 303 645 tus qauv rau kev ruaj ntseg thiab kev ceev ntiag tug ntawm cov khoom IoT suav nrog 13 pawg hauv qab no:
1) Universal default password ruaj ntseg
2) Kev Tshaj Tawm Tshaj Tawm Kev Tswj thiab Kev Ua Haujlwm
3) Software hloov tshiab
4) Ntse kev nyab xeeb parameter txuag
5) Kev ruaj ntseg kev sib txuas lus
6) Txo qhov cuam tshuam ntawm qhov chaw nres
7) Tiv thaiv tus kheej cov ntaub ntawv
8) Software Integrity
9) Lub peev xwm tiv thaiv kev cuam tshuam
10) Tshawb xyuas cov ntaub ntawv telemetry
11) Yooj yim rau cov neeg siv kom tshem tawm cov ntaub ntawv tus kheej
12) Simplify cov cuab yeej installation thiab tu
13) Txheeb xyuas cov ntaub ntawv nkag
Daim nqi yuav tsum tau thiab coj 2 tus qauv
Txwv tsis pub cov passwords thoob ntiaj teb - ETSI EN 303 645 cov kev cai 5.1-1 thiab 5.1-2
TS EN 303 645 Cov kev cai rau kev siv cov txheej txheem rau kev tswj hwm cov ntaub ntawv tsis zoo - ETSI EN 303 645 cov kev cai 5.2-1
ISO/IEC 29147 (2018) Tshooj 6.2
Yuav tsum muaj pob tshab hauv lub sijhawm hloov tshiab yam tsawg kawg nkaus rau cov khoom lag luam - ETSI EN 303 645 kev qhia 5.3-13
PSTI xav kom cov khoom ua tau raws li cov qauv kev nyab xeeb saum toj no ua ntej lawv tuaj yeem muab tso rau hauv khw. Cov neeg tsim khoom, cov neeg xa khoom, thiab cov neeg xa khoom ntawm cov khoom muaj feem xyuam yuav tsum ua raws li cov cai ntawm kev nyab xeeb ntawm txoj cai no. Cov neeg tsim khoom thiab cov neeg xa khoom yuav tsum xyuas kom meej tias lawv cov khoom tuaj nrog cov lus hais txog kev ua raws cai thiab ua raws li kev ua raws cai, khaws cov ntaub ntawv tshawb xyuas, thiab lwm yam. Txwv tsis pub, cov neeg ua txhaum cai yuav raug nplua txog £ 10 lab lossis 4% ntawm lub tuam txhab cov nyiaj tau los thoob ntiaj teb.
4.PSTI Act thiab ETSI EN 303 645 Cov Txheej Txheem Kev Xeem:
1) Cov ntaub ntawv ua piv txwv
3 cov qauv piv txwv suav nrog tus tswv tsev thiab cov khoom siv, cov software tsis tau sau, cov neeg siv phau ntawv / cov lus qhia tshwj xeeb / cov kev pabcuam cuam tshuam, thiab cov ntaub ntawv nkag mus rau tus account
2) Kev ntsuas ib puag ncig tsim
Tsim ib qho chaw sim raws li cov neeg siv phau ntawv
3) Kev soj ntsuam kev ruaj ntseg network:
Kev tshuaj xyuas cov ntaub ntawv thiab kev kuaj xyuas, kev tshuaj xyuas cov lus nug ntawm tus neeg muag khoom, thiab muab kev tawm tswv yim
4) Kho qhov tsis muaj zog
Muab kev pab tswv yim los kho cov teeb meem tsis muaj zog
5) Muab cov ntaub ntawv ntsuam xyuas PSTI lossis ETSIEN 303645 daim ntawv ntsuam xyuas
5.Yuav ua li cas ua pov thawj ua raws li cov cai ntawm UK PSTI Txoj Cai?
Qhov tsawg kawg nkaus yuav tsum tau ua kom tau raws li peb txoj cai ntawm PSTI Txoj Cai hais txog cov passwords, software tu lub voj voog, thiab kev ceeb toom tsis zoo, thiab muab cov ntaub ntawv qhia txog kev ntsuam xyuas rau cov kev cai no, thaum tseem ua rau nws tus kheej tshaj tawm txog kev ua raws cai. Peb xav kom siv ETSI EN 303 645 rau kev ntsuam xyuas ntawm UK PSTI Act. Qhov no kuj yog qhov kev npaj zoo tshaj plaws rau qhov yuav tsum tau ua raws li EU CE RED directive's cybersecurity yuav tsum pib txij lub Yim Hli 1, 2025!
BTF Testing Lab yog lub chaw kuaj xyuas tau lees paub los ntawm Tuam Tshoj National Accreditation Service for Conformity Assessment (CNAS), tus lej: L17568. Tom qab xyoo ntawm txoj kev loj hlob, BTF muaj electromagnetic compatibility laboratory, wireless kev sib txuas lus laboratory, SAR laboratory, kev soj ntsuam kev nyab xeeb, kev cia siab rau lub chaw soj nstuam, roj teeb kuaj kuaj, tshuaj ntsuam xyuas thiab lwm yam chaw soj nstuam. Nws muaj qhov zoo tshaj plaws electromagnetic compatibility, xov tooj cua zaus, cov khoom muaj kev ruaj ntseg, ib puag ncig kev ntseeg siab, cov ntaub ntawv tsis ua hauj lwm tsom xam, ROHS / REACH thiab lwm yam kev kuaj muaj peev xwm. BTF Testing Lab yog nruab nrog cov kws tshaj lij thiab ua tiav cov chaw sim, pab pawg paub txog kev sim thiab cov kws tshaj lij, thiab muaj peev xwm los daws ntau yam teeb meem kev sim thiab ntawv pov thawj. Peb ua raws li cov qauv qhia ntawm "kev ncaj ncees, kev ncaj ncees, kev ncaj ncees, thiab kev nruj" thiab ua raws li cov cai ntawm ISO/IEC 17025 kev ntsuam xyuas thiab ntsuas qhov ntsuas qhov ntsuas rau kev tswj xyuas kev tshawb fawb. Peb tau cog lus los muab cov neeg siv khoom nrog cov kev pabcuam zoo tshaj plaws. Yog tias koj muaj lus nug, thov koj xav tiv tauj peb txhua lub sijhawm.
Post lub sij hawm: Jan-16-2024
