Huawei EP820-D04A - Certification Information

l The application software supports video collection and sending (including one-key video
sending) and one-key photo sending. A user can send a video or photo with one click
without the need of confirmation. Users can choose whether to enable sending without
confirmation from the menu options.
l The application software does not modify, remove, or report user data in upgrades and
updates. Instead, the application software performs smooth processing for the existing
data.
Transmission Channel Encryption
l EP820 system use NAS protocol encryption in a P2P voice call. Signaling encryption in
NAS, AS layer and encryption in user plane are used when EP820 is in a group call.
l EP820 system OTA software upgrades, configurations, and logs are transmitted in
security channels (HTTPS) to protect data security.
l The application software login/log uploads/configuration uploads and downloads/
upgrade package downloads/MMS attachment uploads and downloads are all
implemented over HTTPS.
l Video services of the application software are transmitted over the SIP/RTP/RTCP
standard protocol. The protocols are not encrypted and data transmission is encrypted
using the VPN, ensuring the content security in data transmission.
l SMS services and push channels of the application software are transmitted over the
TLS-encryption-based XMPP protocol. (The configuration channel is carried over the
insecure ZMQ protocol in a network of V100R002C00).
Password Management
l EP820 system passwords meet the password complexity requirements.
l The application software passwords meet the password complexity requirements.
l User names and passwords for login are encrypted and stored in the application software.
When a user attempts to change the password, the user must enter the old password.
l The SIP and XMPP interfaces used by the application software provide the
authentication mechanism upon registration.
Prohibition of Undisclosed Interfaces
l DFX switch: When the application software is processing a video service, users can
enable DFX to view the packet loss rate and delay of the video service.
l Brute-force cracking prevention for login: An account will be locked if the number of
failed application software login attempts by this account exceeds a specified threshold.
Privacy Policy
To better understand how we protect your personal information, please see our privacy policy
at http://consumer.huawei.com/privacy-policy.
3.4 Certification Information
This section describes the certification that the EP820 has passed.
Table 3-6 describes the certification that the EP820 has passed.
EP820
User Guide
3 Overview
Issue 05 (2016-06-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
14