ETSI TS 103 481 V16.1.0 (2023-01)

Smart Cards; Test specification for the Remote APDU structure for UICC based applications; UICC features (Release 16)

RTS/SET-00103481vg10

General Information

• Status: Not Published
• Technical Committee: SET TEST - SET TEST
• Current Stage: 12 - Citation in the OJ (auto-insert)
• Due Date: 03-Feb-2023
• Completion Date: 31-Jan-2023

Standards Content (Sample)

TECHNICAL SPECIFICATION
Smart Cards;
Test specification for the Remote APDU structure
for UICC based applications;
UICC features
(Release 16)
Release 16 2 ETSI TS 103 481 V16.1.0 (2023-01)

Reference
RTS/SET-00103481vg10
Keywords
management, remote, smart card, testing

ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871

Important notice
The present document can be downloaded from:
http://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
No representation or warranty is made that this deliverable is technically accurate or sufficient or conforms to any law
rule and/or regulation and further, no representation or warranty is made of merchantability or fitness
and/or governmental
for any particular purpose or against infringement of intellectual property rights.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.

Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2023.
All rights reserved.
ETSI
Release 16 3 ETSI TS 103 481 V16.1.0 (2023-01)
Contents
Intellectual Property Rights . 10
Foreword . 10
Modal verbs terminology . 11
Introduction . 11
1 Scope . 12
2 References . 12
2.1 Normative references . 12
2.2 Informative references . 14
3 Definition of terms, symbols, abbreviations and formats . 14
3.1 Terms . 14
3.2 Symbols . 15
3.3 Abbreviations . 15
3.4 Formats . 16
3.4.1 Format of the table of optional features . 16
3.4.2 Format of the applicability table . 16
3.4.3 Status and Notations . 16
3.4.4 Format of the conformance requirements tables . 17
4 Test Environment . 18
4.1 Test Applicability . 18
4.1.1 Table of optional features . 18
4.1.2 Applicability table . 19
4.2 Test environment description . 26
4.3 Tests format . 26
4.3.1 Initial Conditions . 26
4.3.2 Test procedure . 27
4.4 General initial conditions . 27
4.4.1 Common rules . 27
4.4.2 File system and files content . 27
4.4.3 AID and TAR coding . 28
4.5 Test equipment / OTA server . 29
4.5.1 Test equipment / OTA server requirements . 29
4.5.2 Default conditions for DUT operation . 29
4.5.3 Java Card™ Software Development Kit . 30
4.5.4 Exercising RFM application . 30
4.5.5 Test Applications . 30
5 Conformance Requirements . 30
5.1 Overview of remote management . 30
5.2 Remote APDU format . 31
5.3 Security parameters assigned to applications . 37
5.4 Remote File Management (RFM) . 37
5.5 Remote Application Management (RAM) . 39
5.6 Additional command for push . 52
5.7 Confidential application management . 55
6 Test Cases . 56
6.1 Overview of remote management . 56
6.2 Remote APDU format . 56
6.2.1 Compact Remote Application data format . 56
6.2.2 Expanded Remote Application data format . 56
6.2.2.1 Test case 1: A command session with C-APDU TLV Structure with definite length coding . 56
6.2.2.1.1 Initial Conditions . 56
6.2.2.1.2 Test Procedure . 57
ETSI
Release 16 4 ETSI TS 103 481 V16.1.0 (2023-01)
6.2.2.2 Test case 2: A command session containing multiple commands with C-APDU TLV Structure
with definite length coding - Bad Format . 58
6.2.2.2.1 Initial Conditions . 58
6.2.2.2.2 Test Procedure . 58
6.2.2.3 Test case 3: A command session with C-APDU TLV Structure with indefinite length coding . 59
6.2.2.3.1 Initial Conditions . 59
6.2.2.3.2 Test Procedure . 59
6.2.2.4 Test case 4: A command session with C-APDU TLV Structure with indefinite length coding -

Bad Format . 60
6.2.2.4.1 Initial Conditions . 60
6.2.2.4.2 Test Procedure . 60
6.2.2.5 Test case 5: A command session with Immediate Action TLV Structure with definite length
coding - Normal Format . 61
6.2.2.5.1 Initial Conditions . 61
6.2.2.5.2 Test Procedure . 61
6.2.2.6 Test case 6: A command session with Immediate Action TLV Structure with definite length
coding - Referenced Format . 62
6.2.2.6.1 Initial Conditions . 62
6.2.2.6.2 Test Procedure . 62
6.2.2.7 Test case 7: A command session with Immediate Action TLV Structure with definite length

coding - Immediate Action Error . 63
6.2.2.7.1 Initial Conditions . 63
6.2.2.7.2 Test Procedure . 63
6.2.2.8 Test case 8: A command session with Immediate Action TLV Structure with indefinite length
coding - Normal Format . 64
6.2.2.8.1 Initial Conditions . 64
6.2.2.8.2 Test Procedure . 64
6.2.2.9 Test case 9: A command session with Immediate Action TLV Structure with indefinite length
coding - Referenced Format . 64
6.2.2.9.1 Initial Conditions . 64
6.2.2.9.2 Test Procedure . 64
6.2.2.10 Test case 10: A command session with Immediate Action TLV Structure with indefinite length

coding - Immediate Action Error . 65
6.2.2.10.1 Initial Conditions . 65
6.2.2.10.2 Test Procedure . 65
6.2.2.11 Test case 11: A command session with Error Action TLV Structure with definite length coding -
normal format . 66
6.2.2.11.1 Initial Conditions . 66
6.2.2.11.2 Test Procedure . 66
6.2.2.12 Test case 12: A command session with Error Action TLV Structure with definite length coding -
Referenced format . 66
6.2.2.12.1 Initial Conditions . 66
6.2.2.12.2 Test Procedure . 66
6.2.2.13 Test case 13: A command session with Error Action TLV Structure with indefinite length coding

- Normal format . 67
6.2.2.13.1 Initial Conditions . 67
6.2.2.13.2 Test Procedure . 67
6.2.2.14 Test case 14: A command session with Error Action TLV Structure with indefinite length coding
- Referenced format. 67
6.2.2.14.1 Initial Conditions . 67
6.2.2.14.2 Test Procedure . 67
6.2.2.15 Test case 15: A command session with Script Chaining TLV Structure with definite length
coding . 68
6.2.2.15.1 Initial Conditions . 68
6.2.2.15.2 Test Procedure . 68
6.2.2.16 Test case 16: A command session with Script Chaining TLV Structure with definite length
coding (Script Chaining Error) . 68
6.2.2.16.1 Initial Conditions . 68
6.2.2.16.2 Test Procedure . 69
6.2.2.17 Test case 17: A command session with Script Chaining TLV Structure with indefinite length
coding . 69
6.2.2.17.1 Initial Conditions . 69
ETSI
Release 16 5 ETSI TS 103 481 V16.1.0 (2023-01)
6.2.2.17.2 Test Procedure . 69
6.2.2.18 Test case 18: A command session with Script Chaining TLV Structure with indefinite length

coding (Script Chaining Error) . 70
6.2.2.18.1 Initial Conditions . 70
6.2.2.18.2 Test Procedure . 70
6.3 Security parameters assigned to applications . 70
6.3.1 Minimum Security Level (MSL) . 70
6.3.2 Access domain . 70
6.4 Remote File Management (RFM) . 70
6.4.1 UICC Shared File System Remote File Ma nage me nt . 70
6.4.1.1 Test case 1: A command session with a single SELECT command. Check access to the file tree . 70
6.4.1.1.1 Initial Conditions . 70
6.4.1.1.2 Test Procedure . 71
6.4.1.2 Test case 2: A command session with multiple commands (SELECT, UPDATE BINARY,

READ BINARY) . 71
6.4.1.2.1 Initial Conditions . 71
6.4.1.2.2 Test Procedure . 71
6.4.1.3 Test case 3: A command session with multiple commands (SEARCH RECORD, UPDATE
RECORD, INCREASE, READ RECORD) . 72
6.4.1.3.1 Initial Conditions . 72
6.4.1.3.2 Test Procedure . 72
6.4.1.4 Test case 4: A command session with multiple commands (SET DATA, RETRIEVE DATA) . 73
6.4.1.4.1 Initial Conditions . 73
6.4.1.4.2 Test Procedure . 73
6.4.1.5 Test case 5: A command session with multiple commands (ACTIVATE FILE, DEACTIVATE
FILE) . 73
6.4.1.5.1 Initial Conditions . 73
6.4.1.5.2 Test Procedure . 73
6.4.1.6 Test case 6: A command session with multiple commands (VERIFY PIN, CHANGE PIN) . 73
6.4.1.6.1 Initial Conditions . 73
6.4.1.6.2 Test Procedure . 74
6.4.1.7 Test case 7: A command session with multiple commands (DISABLE PIN, ENABLE PIN) . 74
6.4.1.7.1 Initial Conditions . 74
6.4.1.7.2 Test Procedure . 74
6.4.1.8 Test case 8: A command session with multiple commands (UNBLOCK PIN) . 74
6.4.1.8.1 Initial Conditions . 74
6.4.1.8.2 Test Procedure . 75
6.4.1.9 Test case 9: A command session with multiple commands (CREATE FILE, RESIZE FILE,

DELETE FILE) . 75
6.4.1.9.1 Initial Conditions . 75
6.4.1.9.2 Test Procedure . 75
6.4.2 ADF Remote File Management . 76
6.4.2.1 Test case 1: A command session with a single SELECT command. Check access to the file tree . 76
6.4.2.1.1 Initial Conditions . 76
6.4.2.1.2 Test Procedure . 76
6.4.2.2 Test case 2: A command session with multiple commands (SELECT, UPDATE BINARY,
READ BINARY) . 76
6.4.2.2.1 Initial Conditions . 76
6.4.2.2.2 Test Procedure . 76
6.4.2.3 Test case 3: A command session with multiple commands (SEARCH RECORD, UPDATE

RECORD, INCREASE, READ RECORD) . 77
6.4.2.3.1 Initial Conditions . 77
6.4.2.3.2 Test Procedure . 77
6.4.2.4 Test case 4: A command session with multiple commands (SET DATA, RETRIEVE DATA) . 77
6.4.2.4.1 Initial Conditions . 77
6.4.2.4.2 Test Procedure . 77
6.4.2.5 Test case 5: A command session with multiple commands (ACTIVATE FILE, DEACTIVATE
FILE) . 78
6.4.2.5.1 Initial Conditions . 78
6.4.2.5.2 Test Procedure . 78
6.4.2.6 Test case 6: A command session with multiple commands (VERIFY PIN, CHANGE PIN) . 78
6.4.2.6.1 Initial Conditions . 78
ETSI
Release 16 6 ETSI TS 103 481 V16.1.0 (2023-01)
6.4.2.6.2 Test Procedure . 78
6.4.2.7 Test case 7: A command session with multiple commands (DISABLE PIN, ENABLE PIN) . 79
6.4.2.7.1 Initial Conditions . 79
6.4.2.7.2 Test Procedure . 79
6.4.2.8 Test case 8: A command session with multiple commands (UNBLOCK PIN) . 79
6.4.2.8.1 Initial Conditions . 79
6.4.2.8.2 Test Procedure . 79
6.4.2.9 Test case 9: A command session with multiple commands (CREATE FILE, RESIZE FILE,

DELETE FILE) . 80
6.4.2.9.1 Initial Conditions . 80
6.4.2.9.2 Test Procedure . 80
6.4.3 RFM implementation over HTTPS . 80
6.5 Remote Application Management (RAM) . 81
6.5.1 DELETE . 81
6.5.1.1 Test case 1: DELETE command . 81
6.5.1.1.1 Initial Conditions . 81
6.5.1.1.2 Test Procedure . 81
6.5.2 SET STATUS . 81
6.5.2.1 Test case 1: SET STATUS command within a command session . 81
6.5.2.1.1 Initial Conditions . 81
6.5.2.1.2 Test Procedure . 81
6.5.3 INSTALL . 82
6.5.3.1 INSTALL[for load] . 82
6.5.3.1.1 Test case 1: INSTALL[for load] as a single command in the session . 82
6.5.3.1.2 Test case 2: INSTALL[for load] with memory management parameters . 82
6.5.3.2 INSTALL[for install] . 83
6.5.3.2.1 Test case 1: INSTALL[for install] with SIM File Access and Toolkit Application Specific
Parameters . 83
6.5.3.2.2 Test case 2: INSTALL[for install] with UICC System Specific Parameters and SIM File
Access and Toolkit Application Specific Parameters . 83
6.5.3.2.3 Test case 3: INSTALL[for install] with UICC System Specific Parameter "UICC Toolkit
Application specific parameters field" . 84
6.5.3.2.4 Test case 4: INSTALL[for install] with UICC System Specific Parameter "UICC Access
Application specific parameters field" . 84
6.5.3.2.5 Test case 5: INSTALL[for install] with UICC System Specific Parameter "UICC
Administrative Access Application specific parameters field" . 85
6.5.3.2.6 Test case 6: INSTALL[for install] with UICC System Specific Parameter "UICC Access
Application specific parameters field" and "UICC Administrative Access Application

specific parameters field" for the same ADF . 85
6.5.3.2.7 Test case 7: INSTALL[for install] with UICC System Specific Parameter "UICC Access
Application specific parameters field" and "UICC Administrative Access Application
specific parameters field" for the same UICC file system . 86
6.5.3.2.8 Test case 8: INSTALL[for install] with the maximum number of timers required for SIM
Toolkit Application Specific Parameters set too high ('09') . 87
6.5.3.2.9 Test case 9: INSTALL[for install] with the maximum number of timers required for UICC
Toolkit Application Specific Parameters set too high ('09') . 87
6.5.3.2.10 Test case 10: INSTALL[for install] with the maximum number of channels required for SIM
Toolkit Application Specific Parameters set too high ('08') . 88
6.5.3.2.11 Test case 11: INSTALL[for install] with the maximum number of channels required for
UICC Toolkit Application Specific Parameters set too high ('08') . 88
6.5.3.2.12 Test case 12: INSTALL[for install] with the maximum number of services required for UICC
Toolkit Application Specific Parameters set too high ('09') . 88
6.5.3.2.13 Test case 13: INSTALL[for install] with requested item identifier for SIM Toolkit
Application Specific Parameters set to '128' . 89
6.5.3.2.14 Test case 14: INSTALL[for install] with requested item identifier for UICC Toolkit
Application Specific Parameters set to '128' . 89
6.5.3.2.15 Test case 15: INSTALL[for install] with Minimum Security Level field of SIM Toolkit
Application different from zero . 90
6.5.3.2.16 Test case 16: INSTALL[for install] with Minimum Security Level field of UICC Toolkit
Application different from zero . 90
6.5.3.2.17 Test case 17: INSTALL[for install] with SPI1 insufficient for Minimum Security Level field
of SIM Toolkit Application . 91
ETSI
Release 16 7 ETSI TS 103 481 V16.1.0 (2023-01)
6.5.3.2.18 Test case 18: INSTALL[for install] with SPI1 insufficient for Minimum Security Level field
of UICC Toolkit Application . 91
6.5.3.2.19 Test case 19: INSTALL[for install] SIM Toolkit Applications with Access Domain
Parameter equal to '00' and 'FF' . 92
6.5.3.2.20 Test case 20: INSTALL[for install] UICC Toolkit Applications with Access Domain
Parameter equal to '00' and 'FF' . 93
6.5.3.2.21 Test case 21: INSTALL[for install] SIM Toolkit Application with Access Domain Parameter
equal to '00' and access condition set to 'NEVER' . 94
6.5.3.2.22 Test case 22: INSTALL[for install] UICC Toolkit Application with Access Domain
Parameter equal to '00' and access condition set to 'NEVER' . 95
6.5.3.2.23 Test case 23: INSTALL[for install] SIM Toolkit Application with Access Domain Parameter
not supported . 95
6.5.3.2.24 Test case 24: INSTALL[for install] UICC Toolkit Application with Access Domain
Parameter not supported . 96
6.5.3.2.25 Test case 25: INSTALL[for install] UICC Toolkit Application with Access Domain
Parameter equal to '02' . 96
6.5.3.2.26 Test case 26: INSTALL[for install] SIM Toolkit Applications with Access Domain
Parameter equal to '00' - independency from the CHV status at UICC-Terminal interface . 97
6.5.3.2.27 Test case 27: INSTALL[for install] UICC Toolkit Applications with Access Domain
Parameter equal to '00' - independency from the PIN status at UICC-Terminal interface . 97
6.5.3.2.28 Test case 28: INSTALL[for install] of SIM Toolkit Applications with different Priority levels . 98
6.5.3.2.29 Test case 29: INSTALL[for install] of UICC Toolkit Applications with different Priority
levels . 99
6.5.3.2.30 Test case 30: INSTALL[for install] SIM Toolkit Applets with same Priority levels . 99
6.5.3.2.31 Test case 31: INSTALL[for install] UICC Toolkit Applets with same Priority levels . 100
6.5.3.2.32 Test case 32: INSTALL[for install] two SIM Toolkit Applications with identical TAR value . 100
6.5.3.2.33 Test case 33: INSTALL[for install] two UICC Toolkit Application with identical TAR value . 101
6.5.3.2.34 Test case 34: INSTALL[for install] SIM Toolkit Application with multiple TAR values . 102
6.5.3.2.35 Test case 35: INSTALL[for install] UICC Toolkit Application with multiple TAR values . 102
6.5.3.2.36 Test case 36: INSTALL[for install] SIM Toolkit Application without TAR value in the
Install parameters, the AID contains TAR value . 103
6.5.3.2.37 Test case 37: INSTALL[for install] UICC Toolkit Application without TAR value in the

Install parameters, the AID contains TAR value . 103
6.5.3.2.38 Test case 38: INSTALL[for install] for contactless application with Reader mode protocol
data type A . 104
6.5.3.2.39 Test case 39: INSTALL[for install] for contactless application with Reader mode protocol
data type B . 104
6.5.3.2.40 Test case 40: INSTALL[for install] for contactless application with Card Emulation mode . 105
6.5.3.2.41 Test case 41: INSTALL[for install] with UICC System Specific Parameter "UICC Toolkit
Application specific parameters field" and "UICC Toolkit parameters DAP" - DAP is
calculated with DES . 105
6.5.3.2.42 Test case 42: INSTALL[for install] with UICC System Specific Parameter "UICC Toolkit
Application specific parameters field" and "UICC Toolkit parameters DAP" - DAP is
calculated with AES . 106
6.5.3.2.43 Test case 43: INSTALL[for install] UICC Toolkit Applications with Access Domain DAP
using DES algorithm . 107
6.5.3.2.44 Test case 44: INSTALL[for install] UICC Toolkit Applications with Access Domain DAP
using AES algorithm . 107
6.5.4 LOAD . 108
6.5.4.1 Test case 1: LOAD with DES for DAP verification . 108
6.5.5 PUT KEY . 108
6.5.5.1 Test case 1: PUT KEY - create new 3DES 2 keys . 108
6.5.5.1.1 Initial Conditions . 108
6.5.5.1.2 Test Procedure . 108
6.5.5.2 Test case 2: PUT KEY - create new 3DES 3 keys . 109
6.5.5.2.1 Initial Conditions . 109
6.5.5.2.2 Test Procedure . 109
6.5.5.3 Void. 109
6.5.5.4 Test case 4: PUT KEY - create new 16 bytes AES keys . 109
6.5.5.4.1 Initial Conditions .
...