The Common Criteria for Information Technology Security Assessment (CCSA) is a recognized international standard based on IEC/ISO 15408. Currently, 31 nations participate in the mutual recognition of CCSA certification, and major international telecommunications operators value CCSA certification in their procurement projects.
The CC certification defines seven levels of assessment assurance (EAL) for an assessment objective (TOE) once certification is completed, among which EAL3 (tested and proven methodically) is, so far, the highest level achieved by a system-level product in the field of telecommunications.
EAL3+ means that the TOE meets EAL3 and other enhanced requirements for the assessed security functionality.
The certificate obtained by ZTE is the industry's first CC EAL3+ certification for a system solution, comprising 15 5G RAN products, such as AAU/RRU, BBU, Unified Management Expert (UME), etc. The solution interacts with user equipment (UE) and implements functions such as radio resource management, compression and encryption of IP headers for data streams, user-plane data routing, data scheduling and transmission, and mobility management. The UME is used to manage the system through a web interface.
The accredited CC assessment laboratory SGS Brightsight, based in the Netherlands, conducted the assessment, which covers security throughout the product lifecycle, including design, development, testing, production, and delivery. The certification body TÜV Rheinland Nederland BV, under the Dutch Certification Scheme in the Area of Information Security (NSCIB), issued the certificate to ZTE and declared that the assessment meets all the conditions for international recognition of the CC Certificate.
