FS.56 Mobile Device Security Certification Scheme – GSMA Security Requirements Version 1

This document is complementary to the GSMA defined Mobile Device Security Certification (MDSCert) Scheme, of which there is an overview in FS.53 – MDSCert Scheme Overview.

A MDSCert Scheme requires mobile devices submitted for certification to meet security requirements as defined in the ETSI Consumer Mobile Device Protection Profile (TS 103 732) series. The modified and new requirements proposed in Section 3 of this document may additionally be considered by a MDSCert scheme for inclusion as part of the security requirements against which mobile devices are assessed and certified.

The present document defines technical (functional) and non-technical (assurance) requirements identified by GSMA that could be part of a MDSCert scheme. The requirements used by a MDSCert Scheme are those defined in the latest version of ETSI TS 103 732 series as detailed in Section 2. Additionally, Section 3 of the present document identifies potential gaps in security Functional and Assessment requirements, respectively, that are expected to be addressed in future versions of ETSI TS 103 732 series: Additional requirements proposed in informative sections of this document may be considered by the Mobile Device Manufacturer to be certified under a MDSCert scheme, as mentioned in Section 3.