智慧巴士資通訊系統資安測試規範－第一部：一般要求v2.0

發佈日期：2019-08-13 / 文件編號：TAICS TS-0021-1 v2.0

本測試規範依據 TAICS TS-0020-1 v2.0「智慧巴士資通訊系統資安標準－第一部：一般要求」訂定，以提供智慧巴士資通訊系統裝置製造商、系統整合商及物聯網資安檢測實驗室等，作為相關產品檢測技術的依據。本測試規範中具體明列資安檢測之測試項目、測試條件、測試方法及預期結果等事項，以確保測試程序的完整性及測試資料的一致性。 本測試規範適用範圍為：(a)安裝於座位在十人座以上或總重量逾三千五百公斤之營業用大客車、座位在二十五人座以上或總重量逾三千五百公斤之幼童專用車上，主要功能以行車資訊串接、安全輔助、駕駛輔助及輔助車輛管理為目的之車載機產品。(b)架設於營業用大客車所行駛營運路線站點，提供到站資訊或即時動態資訊之智慧站牌產品。

智慧巴士資通訊系統資安標準－第三部：智慧站牌v2.0

發佈日期：2019-08-13 / 文件編號：TAICS TS-0020-3 v2.0

本版 (v2.0) 係因應「營業大客車車載機產業標準」v2.0 之增訂、及業者之需求進行改版。本版將安全要求加入分級制度，並增加網路介面安全要求。 本標準為協會針對智慧巴士資通訊系統所制定之系列標準之第三部：智慧站牌。本標準為智慧站牌之資安相關安全要求，其適用範圍為：架設於營業用大客車所行駛營運路線站點，提供到站資訊或即時動態資訊之智慧站牌產品。 本標準制定分為三大構面：系統安全、通訊安全及實體安全，以實體安全避免實體破壞；以系統安全之版本更新應驗證來源，避免錯誤韌體版本更新；以系統安全、通訊安全避免遠端惡意控制。

智慧巴士資通訊系統資安標準－第二部：車載機v2.0

發佈日期：2019-08-13 / 文件編號：TAICS TS-0020-2 v2.0

本版 (v2.0) 係因應「營業大客車車載機產業標準」v2.0 之增訂、及業者之需求進行改版。本版將安全要求加入分級制度，並增加網路介面安全要求。 本標準為協會針對智慧巴士資通訊系統所制定之系列標準之第二部：車載機。本標準制訂車載機資安相關安全要求，其適用範圍為：安裝於座位在十人座以上或總重量逾三千五百公斤之營業用大客車、座位在二十五人座以上或總重量逾三千五百公斤之幼童專用車上，主要功能以行車資訊串接、安全輔助、駕駛輔助及輔助車輛管理為目的之車載機產品。 本標準制定分為四大構面：系統安全、通訊安全、實體安全及身分鑑別安全，以實體安全、身分鑑別安全避免實體盜取、破壞及實體惡意控制風險；以系統安全，避免安全敏感性資料之竊取及錯誤韌體更新；以系統、通訊安全及身分鑑別安全避免遠端惡意控制。

智慧巴士資通訊系統資安標準－第一部：一般要求v2.0

發佈日期：2019-08-13 / 文件編號：TAICS TS-0020-1 v2.0

本版 (v2.0) 係因應「營業大客車車載機產業標準」v2.0 之增訂、及業者之需求進行改版。本版將安全要求加入分級制度，並增加網路介面安全要求。 本標準為協會針對智慧巴士資通訊系統所制定之系列標準之第一部：一般要求。標準內容為針對智慧巴士營運之兩項重要設備：車載機與智慧站牌之共有要求項目，訂定其資安規範，以補強設備端不足之資安要求。 本標準由系統安全、通訊安全、實體安全、身分鑑別安全四大構面組成，分別評估車載機及智慧站牌之資安風險及其主要威脅，並因應上述威脅，制定車載機及智慧站牌之資安標準，以補強受影響之安全構面。適用領域為公車運輸產業及公車車載機、智慧站牌設備商。藉由本標準之應用，可帶動國內智慧巴士車載資通訊系統相關產品檢測驗證合規體制，並提升資安檢測商與檢測實驗室之技術及服務品質，以拓展資安檢測商機。

Cybersecurity Test Specification for Video Surveillance System-Part 4: Network Attached Storage

發佈日期：2019-05-30 / 文件編號：TAICS TS-0015-4(E) v1.0

TAICS TS-0015-4(E) “Cybersecurity Test Specification for Video Surveillance System-Part 4: Network Attached Storage” describes specific testing methods and criteria to verify whether network attached storage used in video surveillance systems comply with the following six categories of security criteria: (1) physical security, (2) system security, (3) communication security, (4) authentication of identities and authorization mechanism security, (5) privacy protection and (6) application security specified in TAICS TS-0014-4(E). This series of test specifications are supported by National Communications Commission (NCC) and Industrial Development Bureau (IDB) of Ministry of Economic Affairs (MoEA), R.O.C..

Cybersecurity Test Specification for Video Surveillance System-Part 3: Video Recorder

發佈日期：2019-05-30 / 文件編號：TAICS TS-0015-3(E) v1.0

TAICS TS-0015-3(E) “Cybersecurity Test Specification for Video Surveillance System-Part 3: Video Recorder” describes specific testing methods and criteria to verify whether video recorders used in video surveillance systems comply with the following six categories of security criteria: (1) physical security, (2) system security, (3) communication security, (4) authentication of identities and authorization mechanism security, (5) privacy protection and (6) application security specified in TAICS TS-0014-3(E). This series of test specifications are supported by National Communications Commission (NCC) and Industrial Development Bureau (IDB) of Ministry of Economic Affairs (MoEA), R.O.C..

Cybersecurity Test Specification for Video Surveillance System-Part 2: IP Camera

發佈日期：2019-05-30 / 文件編號：TAICS TS-0015-2(E) v2.0

TAICS TS-0015-2(E) “Cybersecurity Test Specification for Video Surveillance System-Part 2: IP Camera” describes specific testing methods and criteria to verify whether IP cameras used in video surveillance systems comply with the following five categories of security criteria: (1) physical security, (2) system security, (3) communication security, (4) authentication of identities and authorization mechanism security and (5) privacy protection specified in TAICS TS-0014-2(E). This series of test specifications are supported by National Communications Commission (NCC) and Industrial Development Bureau (IDB) of Ministry of Economic Affairs (MoEA), R.O.C..

Cybersecurity Test Specification for Video Surveillance System-Part 1: General Requirements

發佈日期：2019-05-30 / 文件編號：TAICS TS-0015-1(E) v1.0

TAICS TS-0015-1(E) “Cybersecurity Test Specification for Video Surveillance System-Part 1: General Requirements” describes general testing methods and criteria to verify whether video surveillance systems with focus on IP cameras, digital video recorders, network video recorders and network attached storages meet the norms specified in TAICS TS-0014-1(E). This series of test specifications are supported by National Communications Commission (NCC) and Industrial Development Bureau (IDB) of Ministry of Economic Affairs (MoEA), R.O.C..

Video Surveillance System Cybersecurity Standard- Part 4: Network Attached Storage

發佈日期：2019-03-26 / 文件編號：TAICS TS-0014-4(E) v1.0

TAICS TS-0014-4(E) “Video Surveillance System Cybersecurity Standard-Part 4: Network Attached Storage” addresses the specific cybersecurity requirements of network attached storage used in video surveillance systems, which can be applied to network attached storage with networking functions in video surveillance in compliance with the following six categories of security criteria: (1) physical security, (2) system security, (3) communication security, (4) authentication of identities and authorization mechanism security, (5) privacy protection and (6) application security. This series of standards are supported by National Communications Commission (NCC) and Industrial Development Bureau (IDB) of Ministry of Economic Affairs (MOEA), R.O.C..

Video Surveillance System Cybersecurity Standard- Part 3: Video Recorder

發佈日期：2019-03-26 / 文件編號：TAICS TS-0014-3(E) v1.0

TAICS TS-0014-3(E) “Video Surveillance System Cybersecurity Standard-Part 3: Video Recorder” addresses the specific cybersecurity requirements of video recorders used in video surveillance systems, which can be applied to video recorders with networking functions in video surveillance in compliance with the following six categories of security criteria: (1) physical security, (2) system security, (3) communication security, (4) authentication of identities and authorization mechanism security, (5) privacy protection and (6) application security. This series of standards are supported by National Communications Commission (NCC) and Industrial Development Bureau (IDB) of Ministry of Economic Affairs (MOEA), R.O.C..