CEN ISO/TS 21719-3:2021

Electronic fee collection - Personalization of on-board equipment (OBE) - Part 3: Using integrated circuit(s) cards (ISO/TS 21719-3:2021)

This document specifies:
personalization interface;
physical systems: on-board equipment (OBE), personalization equipment (PE) and integrated circuit(s) cards (ICCs);
electronic fee collection (EFC) personalization functions between the PE and the OBE in accordance with ISO/TS 21719-1 when using an ICC;
data and security elements that are transferred between the PE and the OBE using the ICC.
It is outside the scope of this document to define:
conformance procedures and test specifications;
setting-up of operating organizations (e.g. toll service provider, personalization agent, trusted third party, etc.);
legal issues;
the exact commands and security functionality within ISO/IEC 7816-4 used by the PE and the OBE, respectively, to interface an ICC.
NOTE         Some of the issues that are outside the scope of this document are the subject of separate standards prepared by CEN/TC 278 and ISO/TC 204.

Elektronische Gebührenerhebung - Personalisierung von Onboard Einrichtungen - Teil 3: Unter Verwendung von Chipkarten (ISO/TS 21719-3:2021)

Perception de télépéage - Personnalisation des équipements embarqués - Partie 3: Utilisation de cartes à circuit(s) intégré(s) (ISO/TS 21719-3:2021)

Elektronsko pobiranje pristojbin - Personalizacija (prilagajanje) opreme vozil (OBE) - 3. del: Uporaba kartic z integriranimi vezji (ISO/TS 21719-3:2021)

Ta dokument določa:
– vmesnik za personalizacijo;
– fizične sisteme: opremo vozil (OBE), opremo za personalizacijo (PE) in kartice z integriranim vezjem (ICC);
– funkcije za personalizacijo elektronskega pobiranja pristojbin (EFC) med opremo za personalizacijo in opremo vozil v skladu s standardom ISO/TS 21719-1 pri uporabi kartic z integriranim vezjem;
– podatkovne in varnostne elemente, ki se prenašajo med opremo za personalizacijo in opremo vozil z uporabo kartic z integriranim vezjem. Na področje uporabe tega dokumenta ne spada določanje:
– postopkov za skladnost in specifikacij preskusa;
– vzpostavljanja obratovalnih organizacij (npr. izvajalec storitev cestninjenja, agent za personalizacijo, zaupanja vredna tretja oseba itd.);
– pravnih vprašanj;
– točnih ukazov in varnostnih funkcij iz standarda ISO/IEC 7816-4, ki jih uporabljata oprema za personalizacijo in oprema vozil za komunikacijo s karticami z integriranim vezjem.
OPOMBA: Nekatera vprašanja, ki so zunaj področja uporabe tega dokumenta, so obravnavana v ločenih standardih, ki sta jih pripravila tehnična odbora CEN/TC 278 in ISO/TC 204.

General Information

• Status: Published
• Publication Date: 07-Dec-2021
• ICS: 03.220.20 - Road transport
• ICS: 35.240.60 - IT applications in transport
• Technical Committee: CEN/TC 278 - Road transport and traffic telematics
• Drafting Committee: CEN/TC 278 - Road transport and traffic telematics
• Current Stage: 6060 - Definitive text made available (DAV) - Publishing
• Start Date: 08-Dec-2021
• Completion Date: 08-Dec-2021
• Ref Project: SIST-TS CEN ISO/TS 21719-3:2022 - Electronic fee collection - Personalization of on-board equipment (OBE) - Part 3: Using integrated circuit(s) cards (ISO/TS 21719-3:2021)

Overview

CEN ISO/TS 21719-3:2021 defines how to personalize electronic fee collection (EFC) on-board equipment (OBE) using integrated circuit(s) cards (ICCs). It specifies the personalization interface and the physical system elements - OBE, personalization equipment (PE) and ICCs - and describes the EFC personalization functions and the data and security elements exchanged between PE and OBE when ICCs are used. The Technical Specification implements an application profile (AP) that relies on ICC communication standards (contact and contactless).

Key topics and requirements

• Personalization interface: Defines the message exchange framework and the two logical interfaces (PE–ICC and ICC–OBE) used to transfer personalization assets.
• Physical system definitions: Roles and expectations for OBE, PE and ICC devices in a personalization process.
• Personalization functions: Procedures for initializing/terminating personalization sessions, reading/writing application and vehicle/user data, and handling personalization assets consistent with ISO/TS 21719-1.
• Data and security elements: Types of application data and security material that must be transferred and protected during personalization.
• ICC support: Specifies use of ICCs in accordance with ISO/IEC card standards (e.g., ISO/IEC 7816 series for contact cards and ISO/IEC 14443 / 15693 series for contactless) - supporting both contact and contactless interfaces.
• Notes on scope limits: Conformance test procedures, organizational setup (toll operators, personalization agents, trusted third parties), legal matters and the exact ISO/IEC 7816-4 commands/security mechanisms are explicitly out of scope.

Applications

This specification is aimed at enabling interoperable, secure personalization workflows for EFC systems such as:

• In-vehicle tolling devices and multi-application OBEs
• Card-based provisioning or key loading of OBE credentials
• Secure offline or controlled personalization environments (e.g., service desks, workshops)
• Migration and interoperability projects where standardized ICC-based personalization is required

Using this standard helps ensure consistent data transfer, improves compatibility of personalization equipment, and supports outsourcing of personalization tasks.

Who should use this standard

• Toll service providers and road authorities planning EFC deployments
• OBE and ICC manufacturers and integrators
• Personalization equipment vendors and personalization agents
• ITS system architects and security designers
• Standards bodies and testing organizations (for developing complementary conformance tests)

Related standards

• ISO/TS 21719-1 (personalization framework)
• ISO/IEC 7816-3, ISO/IEC 7816-4 (contact ICCs)
• ISO/IEC 14443-3 / 14443-4, ISO/IEC 15693 (contactless ICCs)
• CEN/TR 16152 and other CEN/TC 278 / ISO/TC 204 deliverables

Keywords: electronic fee collection, personalization, on-board equipment, OBE, integrated circuit cards, ICC, personalization equipment, ISO/TS 21719-3:2021, EFC security.

Standards Content (Sample)

SLOVENSKI STANDARD
01-marec-2022
Elektronsko pobiranje pristojbin - Personalizacija (prilagajanje) opreme vozil
(OBE) - 3. del: Uporaba kartic z integriranimi vezji (ISO/TS 21719-3:2021)
Electronic fee collection - Personalization of on-board equipment (OBE) - Part 3: Using
integrated circuit(s) cards (ISO/TS 21719-3:2021)
Elektronische Gebührenerhebung - Personalisierung von Onboard Einrichtungen - Teil
3: Unter Verwendung von Chipkarten (ISO/TS 21719-3:2021)
Perception de télépéage - Personnalisation des équipements embarqués - Partie 3:
Utilisation de cartes à circuit(s) intégré(s) (ISO/TS 21719-3:2021)
Ta slovenski standard je istoveten z: CEN ISO/TS 21719-3:2021
ICS:
03.220.20 Cestni transport Road transport
35.240.60 Uporabniške rešitve IT v IT applications in transport
prometu
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

CEN ISO/TS 21719-3
TECHNICAL SPECIFICATION
SPÉCIFICATION TECHNIQUE
December 2021
TECHNISCHE SPEZIFIKATION
ICS 03.220.20
English Version
Electronic fee collection - Personalization of on-board
equipment (OBE) - Part 3: Using integrated circuit(s) cards
(ISO/TS 21719-3:2021)
Perception de télépéage - Personnalisation des Elektronische Gebührenerhebung - Personalisierung
équipements embarqués - Partie 3: Utilisation de von Onboard Einrichtungen - Teil 3: Unter
cartes à circuit(s) intégré(s) (ISO/TS 21719-3:2021) Verwendung von Chipkarten (ISO/TS 21719-3:2021)
This Technical Specification (CEN/TS) was approved by CEN on 9 November 2021 for provisional application.

The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to
submit their comments, particularly on the question whether the CEN/TS can be converted into a European Standard.

CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS
available promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in
parallel to the CEN/TS) until the final decision about the possible conversion of the CEN/TS into an EN is reached.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and
United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2021 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN ISO/TS 21719-3:2021 E
worldwide for CEN national Members.

Contents Page
European foreword . 3

European foreword
This document (CEN ISO/TS 21719-3:2021) has been prepared by Technical Committee ISO/TC 204
"Intelligent transport systems" in collaboration with Technical Committee CEN/TC 278 “Intelligent
transport systems” the secretariat of which is held by NEN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
Any feedback and questions on this document should be directed to the users’ national standards
body/national committee. A complete listing of these bodies can be found on the CEN website.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland,
Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of
North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the
United Kingdom.
Endorsement notice
The text of ISO/TS 21719-3:2021 has been approved by CEN as CEN ISO/TS 21719-3:2021 without any
modification.
TECHNICAL ISO/TS
SPECIFICATION 21719-3
First edition
2021-11
Electronic fee collection —
Personalization of on-board
equipment (OBE) —
Part 3:
Using integrated circuit(s) cards
Perception de télépéage — Personnalisation des équipements
embarqués —
Partie 3: Utilisation de cartes à circuit(s) intégré(s)
Reference number
ISO/TS 21719-3:2021(E)
ISO/TS 21719-3:2021(E)
© ISO 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
ISO/TS 21719-3:2021(E)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 2
4 Abbreviated terms . 3
5 Conformance . 4
5.1 General . 4
5.2 Base standards . 4
5.3 Main contents of an EFC personalization AP . 4
6 Personalization overview .5
6.1 Process . 5
6.2 System architecture . 5
7 OBE requirements .5
7.1 General . 5
7.2 ICC interface requirements . 5
7.2.1 General . 5
7.2.2 Case of contact interface . 6
7.2.3 Case of contactless interface. 6
7.3 OBE personalization functions. 6
7.3.1 OBE personalization functions . 6
7.3.2 Initialization and termination . 6
7.3.3 Writing of data . 7
7.3.4 Reading of data . 8
7.4 Security requirements . . 8
7.5 Transaction requirements . 9
8 PE requirements . 9
8.1 General . 9
8.2 ICC interface requirements . 9
8.3 PE personalization functions . . 9
Annex A (normative) Protocol implementation conformance statement (PICS) proforma .10
Annex B (informative) Transaction example .14
Bibliography .16
iii
ISO/TS 21719-3:2021(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to
the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see
www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 204, Intelligent transport systems, in
collaboration with the European Committee for Standardization (CEN) Technical Committee CEN/
TC 278, Intelligent transport systems, in accordance with the Agreement on technical cooperation
between ISO and CEN (Vienna Agreement).
A list of all parts in the ISO/TS 21719 series can be found on the ISO website.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html.
iv
ISO/TS 21719-3:2021(E)
Introduction
On-board equipment (OBE) is an in-vehicle device that contains one or more application instances in
order to support different intelligent transportation system (ITS) implementations such as electronic
fee collection (EFC).
To assign the EFC application in the OBE to a certain user and/or vehicle, personalization is performed.
This means that unique user and vehicle related data are transferred to and stored in the OBE.
CEN/TR 16152 assesses many aspects of the personalization process and it defines the overall
personalization assets (application data, application keys and vehicle-related data).
Different communication media may be used for transferring the personalization assets to the OBE. An
overall message exchange framework and needed security functionality may be applied, for all media
common procedures, in order to ensure data protection and integrity.
By standardizing the personalization procedure, compatibility of personalization equipment (PE) is
supported. The entity responsible for the personalization, such as a toll service provider, will further be
able to outsource parts of, or a complete, personalization to a third party or to another service provider
or personalization agent.
The scope of the personalization functionality is illustrated in Figure 1. It is limited to the transfer of
data between the PE and the OBE by using integrated circuit(s) cards (ICCs).
Figure 1 — Scope of this document (box delimited by a dotted line)
This document defines a complete application profile (AP), using ICCs in accordance with the
ISO/IEC 7816-3, ISO/IEC 7816-4, ISO/IEC 14443-3, ISO/IEC 14443-4 and the ISO/IEC 15693 series
(Table 1), in accordance with the personalization functionality described in ISO/TS 21719-1.
Figure 2 shows the relationship of this document.
There are two interfaces (PE-ICC, ICC-OBE). For further details, see Annex A.
This document may be supplemented by a set of specifications which define the conformity evaluation
of equipment to the conformance requirements contained in this document.
v
ISO/TS 21719-3:2021(E)
Figure 2 — Relationship between this document and ICC communication
vi
TECHNICAL SPECIFICATION ISO/TS 21719-3:2021(E)
Electronic fee collection — Personalization of on-board
equipment (OBE) —
Part 3:
Using integrated circuit(s) cards
1 Scope
This document specifies:
— personalization interface;
— physical systems: on-board equipment (OBE), personalization equipment (PE) and integrated
circuit(s) cards (ICCs);
— electronic fee collection (EFC) personalization functions between the PE and the OBE in accordance
with ISO/TS 21719-1 when using an ICC;
— data and security elements that are transferred between the PE and the OBE using the ICC.
It is outside the scope of this document to define:
— conformance procedures and test specifications;
— setting-up of operating organizations (e.g. toll service provider, personalization agent, trusted third
party, etc.);
— legal issues;
— the exact commands and security functionality within ISO/IEC 7816-4 used by the PE and the OBE,
respectively, to interface an ICC.
NOTE Some of the issues that are outside the scope of this document are the subject of separate standards
prepared by CEN/TC 278 and ISO/TC 204.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 7816-3, Identification cards — Integrated circuit cards — Part 3: Cards with contacts — Electrical
interface and transmission protocols
ISO/IEC 7816-4, Identification cards — Integrated circuit cards — Part 4: Organization, security and
commands for interchange
ISO/IEC 14443-3, Cards and security devices for personal identification — Contactless proximity objects —
Part 3: Initialization and anticollision
ISO/IEC 14443-4, Cards and security devices for personal identification — Contactless proximity objects —
Part 4: Transmission protocol
ISO/IEC 15693 (all parts), Cards and security devices for personal identification — Contactless vicinity
objects
ISO/TS 21719-3:2021(E)
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at http:// www .electropedia .org/
3.1
attribute
addressable package of data consisting of a single data element or structured sequences of data
elements
[SOURCE: ISO/TS 17573-2:2020, 3.13]
3.2
base standard
approved International Standard, Technical Specification or ITU-T Recommendation
Note 1 to entry: This includes but is not limited to approved standard deliverables from ISO, ITU, CEN, CENELEC,
ETSI and IEEE.
[SOURCE: ISO/TS 17573-2:2020, 3.23]
3.3
electronic fee collection
EFC
fee collection by electronic means
[SOURCE: ISO/TS 17573-2:2020, 3.70]
3.4
international standardized profile
internationally agreed-to, harmonized document which describes one or more profiles (3.9)
[SOURCE: ISO/TS 17573-2:2020, 3.102]
3.5
on-board equipment
OBE
all required equipment on-board a vehicle for performing required electronic fee collection (EFC) (3.3)
functions and communication services
[SOURCE: ISO/TS 17573-2:2020, 3.126]
3.6
OBE personalization
transferring personalization assets (3.7) to the on-board equipment (OBE) (3.5)
[SOURCE: ISO/TS 17573-2:2020, 3.123]
3.7
personalization assets
specific data stored in the on-board equipment (OBE) (3.5) related to the user and the vehicle
[SOURCE: ISO/TS 17573-2:2020, 3.137]
ISO/TS 21719-3:2021(E)
3.8
personalization equipment
PE
equipment for transferring personalization assets (3.7) to the on-board equipment (OBE) (3.5)
[SOURCE: ISO/TS 17573-2:2020, 3.138]
3.9
profile
set of requirements and selected options from base standards (3.2) or international standardized profiles
(3.4) used to provide a specific functionality
[SOURCE: ISO/TS 17573-2:2020, 3.146]
3.10
toll service provider
entity providing toll services in one or more toll domains
Note 1 to entry: In other documents, the terms “issuer” or “contract issuer” are sometimes used.
Note 2 to entry: The toll service provider may provide the on-board equipment (OBE) (3.5) or may provide only a
magnetic card or a smart card to be used with the OBE provided by a third party (e.g. a mobile telephone and a
SIM card can be obtained from different parties).
Note 3 to entry: The toll service provider is responsible for the operation (functioning) of the OBE with respect
to tolling.
[SOURCE: ISO/TS 17573-2:2020, 3.206, modified — Notes 1, 2 and 3 have been added.]
3.
...