ZTECorporation,a publicly-listed global provider of telecommunications equipment and network solutions,has become the first Chinese telecom company to be issued with a CC(Common Criteria for ITsecurity evaluation)security certificate.

TüVRheinland Nederland B.V.,a Netherlands-based international CC security certification firm,awarded ZTE for its security,highlighting the fact that Chinese telecom companies are gaining international recognition for their ITsecurity.

The test,which took more than six months to complete,was conducted by Brightsight,a leading ITsecurity test and evaluation lab in the Netherlands.

It is becoming increasingly common for governments to ensure the security of telecom networks by engaging a third-party to do an evaluation.

An authorized certificate has also become one of the prerequisites for telecom equipment vendors to enter some countries and markets.

Currently,CC is the internationally recognized IT security certification.The standard adopted in this certification is IEC/ISO15408,which is also known as the CC standard,or the Common Criteria for ITSecurity Evaluation.CC certification is managed by the national security agency of each CC member state.There are 26 CC member states,including European countries,the United States and Japan,as well as emerging countries such as India.

CC certification includes an evaluation of security performance,loophole analysis,encryption technology and product manuals.Moreover,it also includes systematic evaluations of the entire process,from R&D and configuration management to production and shipping.

Brightsight,which performed the evaluations for ZTE,is licensed by the Netherlands,Germany and Norway and is one of the security evaluation labs recognized by countries such as India.Brightsight CEO Mr.Dirk-Jan Out said that ZTEdemonstrated professionalism and strict requirements for product security in the evaluation process.He said the quick and efficient implementation of the evaluation confirmed the trustworthiness of ZTE’s products.

ZTEis also applying to other CC member states to do Common Criteria security evaluations for other key products and markets.