EN 419212-2:2014

Application Interface for smart cards used as Secure Signature Creation Devices - Part 2: Additional services

This European Standard contains Identification, Authentication and Digital Signature (IAS) services in addition to the SSCD mechanisms already described in EN 419212-1 to enable interoperability and usage for IAS services on a national or European level.
It also specifies additional mechanisms like key decipherment, Client Server authentication, identity management  and privacy related services.

Anwendungsschnittstelle für Chip-Karten, die zur Erzeugung qualifizierter elektronischer Signaturen verwendet werden - Teil 2: Zusätzliche Dienste

Interface applicative des cartes à puces utilisées comme dispositifs de création de signature numérique sécurisés - Partie 2 : Services complémentaires

La présente Norme européenne comprend les services IAS (Identification, Authentification et Signature numérique) en plus des mécanismes SSCD déjà décrits dans l'EN 419212-1 pour permettre l’interopérabilité et l’utilisation des services IAS au niveau national ou européen.
Elle spécifie également des mécanismes supplémentaires tels que le déchiffrement de clé, l'authentification client/serveur, la gestion des identités et les services liés à la protection de la vie privée.

Uporabniški vmesnik za pametne kartice, ki se uporabljajo kot naprave za izdelovanje varnega podpisa - 2. del: Dodatne storitve

Vzdrževanje standarda EN14890-2 v povezavi z naslednjim
– skladnost
– tehnične/uredniške napake
– trenutno stanje tehničnega razvoja (npr. nove storitve dešifriranja za eliptične krivulje in storitve zasebnosti, kot sta omejena identifikacija in preverjanje starosti)
– pojasnitev potrebnih funkcij za zadevna okolja, npr. profili aplikacije
Novi uradno dokazani protokoli za zagotavljanje zasebnosti, npr. upravljanje ID-jev
Fizične, električne in transportne značilnosti protokola ne spadajo na področje uporabe tega standarda.

General Information

• Status: Withdrawn
• Publication Date: 09-Dec-2014
• Withdrawal Date: 19-Sep-2017
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: CEN/TC 224 - Machine-readable cards, related device interfaces and operations
• Drafting Committee: CEN/TC 224/WG 16 - Application Interface for smart cards used as Secure Signature Creation Devices
• Current Stage: 9960 - Withdrawal effective - Withdrawal
• Completion Date: 20-Sep-2017
• Mandate: M/460 - Standardisation Mandate to the European Standardisation Organizations CEN, CENELEC and ETSI in the field of Information and Communication Technologies applied to Electronic Signatures
• Ref Project: SIST EN 419212-2:2015 - Application Interface for smart cards used as Secure Signature Creation Devices - Part 2: Additional Services

Relations

• Replaces: EN 14890-2:2008 - Application Interface for smart cards used as Secure Signature Creation Devices - Part 2: Additional Services
• Effective Date: 17-Dec-2014
• Replaced By: EN 419212-4:2018 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 4: Privacy specific Protocols
• Effective Date: 08-Jun-2022
• Replaced By: EN 419212-3:2017 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 3: Device authentication protocols
• Effective Date: 08-Jun-2022
• Replaced By: EN 419212-1:2017 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 1: Introduction and common definitions
• Effective Date: 08-Jun-2022
• Replaced By: EN 419212-5:2018 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 5: Trusted eService
• Effective Date: 08-Jun-2022
• Replaced By: EN 419212-2:2017 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 2: Signature and Seal Services
• Effective Date: 08-Jun-2022

Standards Content (Sample)

2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.Uporabniški vmesnik za pametne kartice, ki se uporabljajo kot naprave za izdelovanje varnega podpisa - 2. del: Dodatne storitveAnwendungsschnittstelle für Chip-Karten, die zur Erzeugung qualifizierter elektronischer Signaturen verwendet werden - Teil 2: Zusätzliche DiensteInterface applicative des cartes à puces utilisées comme dispositifs de création de signature numérique sécurisés - Partie 2: Services complémentairesApplication Interface for smart cards used as Secure Signature Creation Devices - Part 2: Additional Services35.240.15Identifikacijske kartice in sorodne napraveIdentification cards and related devicesICS:Ta slovenski standard je istoveten z:EN 419212-2:2014SIST EN 419212-2:2015en,fr,de01-april-2015SIST EN 419212-2:2015SLOVENSKI
STANDARDSIST EN 14890-2:20091DGRPHãþD



SIST EN 419212-2:2015



EUROPEAN STANDARD NORME EUROPÉENNE EUROPÄISCHE NORM
EN 419212-2
December 2014 ICS 35.240.15 Supersedes EN 14890-2:2008English Version
Application Interface for smart cards used as Secure Signature Creation Devices - Part 2: Additional services
Interface applicative des cartes à puces utilisées comme dispositifs de création de signature numérique sécurisés - Partie 2 : Services complémentaires
Anwendungsschnittstelle für Chip-Karten, die zur Erzeugung qualifizierter elektronischer Signaturen verwendet werden - Teil 2: Zusätzliche Dienste This European Standard was approved by CEN on 27 September 2014.
CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions.
CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION EUROPÄISCHES KOMITEE FÜR NORMUNG
CEN-CENELEC Management Centre:
Avenue Marnix 17,
B-1000 Brussels © 2014 CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No. EN 419212-2:2014 ESIST EN 419212-2:2015



EN 419212-2:2014 (E) 2 Contents Foreword .5 1 Scope .7 2 Normative references .7 3 Terms and definitions .7 4 Abbreviations and notation .9 5 Additional Service Selection . 11 6 Client/Server Authentication . 14 6.1 Client/Server protocols . 14 6.2 Steps preceding the client/server authentication . 15 6.3 Padding format . 15 6.3.1 PKCS #1 v 1-5 Padding . 15 6.3.2 PKCS #1 V 2.x (PSS) Padding . 16 6.3.3 Building the DSI on ECDSA . 17 6.4 Client/Server protocol .
...