ISO 37180:2021
(Main)Smart community infrastructures — Guidance on smart transportation with QR code identification and authentification in transportation and its related or additional services
Smart community infrastructures — Guidance on smart transportation with QR code identification and authentification in transportation and its related or additional services
This document provides guidance on transportation and its related or additional services using quick response (QR) codes for identification and authentication in data transfer, in order to make their services both convenient and advantageous for customers and service agents while protecting them from cheating and illegal action in data transfer.
Infrastructures urbaines intelligentes — Lignes directrices relatives au transport intelligent utilisant l'identification et l'authentification par QR code dans le domaine du transport et de ses services connexes ou supplémentaires
General Information
Buy Standard
Standards Content (Sample)
INTERNATIONAL ISO
STANDARD 37180
First edition
2021-08
Smart community infrastructures —
Guidance on smart transportation
with QR code identification and
authentification in transportation and
its related or additional services
Infrastructures urbaines intelligentes — Lignes directrices relatives
au transport intelligent utilisant l'identification et l'authentification
par QR code dans le domaine du transport et de ses services connexes
ou supplémentaires
Reference number
©
ISO 2021
© ISO 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii © ISO 2021 – All rights reserved
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Concept of smart transportation with QR code identification and authentication .2
4.1 Background . 2
4.2 Practical usefulness of QR codes . 2
4.3 Satisfying the Sustainable Development Goals . 2
5 QR code identification and authentication-applicable transportation and its related
or additional services . 2
5.1 General . 2
5.2 Services to customers in public transportation . 3
5.3 Services to customers in private transportation . 3
5.4 Services to customers in inter-modal, carrier or line operational transportation for
public and private purposes . 3
5.5 Business work by operators, administrators and facilities owners of public
transportation and its related or additional services . 3
5.6 Business work by operators, administrators and facilities owners of private
transportation and its related or additional services . 3
6 QR code identification, authentication and authorization in or for smart transportation .3
6.1 General . 3
6.2 QR code identification . 4
6.3 QR code authentication . 4
6.4 QR code authorization . 4
6.4.1 General. 4
6.4.2 Authorization processes . . 4
6.5 Other practically useful applications of QR codes in transportation and its related
or additional services . 5
6.5.1 General. 5
6.6 Application to data transfer validation . 5
7 Security of smart transportation with QR code identification and authentication .6
7.1 General . 6
7.2 QR code identification and authentication security . 6
7.3 QR code authorization security . 6
7.3.1 General. 6
7.3.2 Personal information collection and encryptions . 7
7.3.3 Security procedures . 7
8 Organization and operation of smart transportation with QR code identification
and authentication . 7
8.1 General . 7
8.2 Secure-trusted infrastructures for QR code identification and authentication . 7
8.2.1 Credible service management modules . 7
8.2.2 Big data analysis centres . 7
8.2.3 Registration centres . 8
8.2.4 Data transfer modules . 8
8.2.5 Terminal application modules . 8
9 Quality maintenance of smart transportation with QR code identification and
authentication . 8
9.1 General . 8
9.2 Parameters to be observed . 8
Bibliography .10
iv © ISO 2021 – All rights reserved
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/ directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www .iso .org/ patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to the
World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www .iso .org/
iso/ foreword .html.
This document was prepared by Technical Committee ISO/TC 268, Sustainable cities and communities,
Subcommittee SC 1, Smart community infrastructures.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www .iso .org/ members .html.
Introduction
Quick Response (or QR) codes are widely used worldwide due to their extremely large capacity for
data storage and data transfer instead of barcodes. In the transportation field, QR codes have been
used for over 20 years. However, their application is limited since the identification and authentication
procedure with QR codes in data transfer takes over one second. In cities, a ticket inspection gate
should communicate with 60 customers per minute for their ticket validation at rail stations. As the
number of people delayed due to ticket processing in a concourse increases, this results in more risk
leading to passenger injuries. A typical example is the metro in Bangkok, Thailand. The slow processing
rate of ticket inspection machines disturbs passenger flows in the station. The passengers are delayed
frequently at the gate due to the processing resulting in missed trains.
In the past, the security of QR codes was very limited, and so it was highly risky to use the QR code for
ticket value information retention. If the QR codes were falsely duplicated, the copies would work as a
valid ticket. Transportation operators were hesitant to apply QR codes in ticketing and used the code
only for specific purposes or particular situations. For example, a bus stop numbered ticket for fare
adjustment in bus services and seat reservation sold within one hour of train departure.
However, the lack of security features has been overcome by improving QR code identification and
authentication procedures through the use of dynamic encryption keys and their matching fields.
These processes aid in achieving fluidity enhancement, controllable anonymity, non-forgery, non-
repeatable data transfer and non-repudiation. QR codes are now effective tools to identify data senders
and recipients. Further, QR codes can be used to authenticate information contents and authorize
personal status, by completing the procedures safely and quickly. This advanced performance and
security cultivate improved transportation and its related or additional service fields, such as money
transfer services for payment and charging pre-paid cards. Thereby, ensuring that the services are
...
INTERNATIONAL ISO
STANDARD 37180
First edition
2021-08
Smart community infrastructures —
Guidance on smart transportation
with QR code identification and
authentification in transportation and
its related or additional services
Infrastructures urbaines intelligentes — Lignes directrices relatives
au transport intelligent utilisant l'identification et l'authentification
par QR code dans le domaine du transport et de ses services connexes
ou supplémentaires
Reference number
©
ISO 2021
© ISO 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii © ISO 2021 – All rights reserved
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Concept of smart transportation with QR code identification and authentication .2
4.1 Background . 2
4.2 Practical usefulness of QR codes . 2
4.3 Satisfying the Sustainable Development Goals . 2
5 QR code identification and authentication-applicable transportation and its related
or additional services . 2
5.1 General . 2
5.2 Services to customers in public transportation . 3
5.3 Services to customers in private transportation . 3
5.4 Services to customers in inter-modal, carrier or line operational transportation for
public and private purposes . 3
5.5 Business work by operators, administrators and facilities owners of public
transportation and its related or additional services . 3
5.6 Business work by operators, administrators and facilities owners of private
transportation and its related or additional services . 3
6 QR code identification, authentication and authorization in or for smart transportation .3
6.1 General . 3
6.2 QR code identification . 4
6.3 QR code authentication . 4
6.4 QR code authorization . 4
6.4.1 General. 4
6.4.2 Authorization processes . . 4
6.5 Other practically useful applications of QR codes in transportation and its related
or additional services . 5
6.5.1 General. 5
6.6 Application to data transfer validation . 5
7 Security of smart transportation with QR code identification and authentication .6
7.1 General . 6
7.2 QR code identification and authentication security . 6
7.3 QR code authorization security . 6
7.3.1 General. 6
7.3.2 Personal information collection and encryptions . 7
7.3.3 Security procedures . 7
8 Organization and operation of smart transportation with QR code identification
and authentication . 7
8.1 General . 7
8.2 Secure-trusted infrastructures for QR code identification and authentication . 7
8.2.1 Credible service management modules . 7
8.2.2 Big data analysis centres . 7
8.2.3 Registration centres . 8
8.2.4 Data transfer modules . 8
8.2.5 Terminal application modules . 8
9 Quality maintenance of smart transportation with QR code identification and
authentication . 8
9.1 General . 8
9.2 Parameters to be observed . 8
Bibliography .10
iv © ISO 2021 – All rights reserved
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/ directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www .iso .org/ patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to the
World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www .iso .org/
iso/ foreword .html.
This document was prepared by Technical Committee ISO/TC 268, Sustainable cities and communities,
Subcommittee SC 1, Smart community infrastructures.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www .iso .org/ members .html.
Introduction
Quick Response (or QR) codes are widely used worldwide due to their extremely large capacity for
data storage and data transfer instead of barcodes. In the transportation field, QR codes have been
used for over 20 years. However, their application is limited since the identification and authentication
procedure with QR codes in data transfer takes over one second. In cities, a ticket inspection gate
should communicate with 60 customers per minute for their ticket validation at rail stations. As the
number of people delayed due to ticket processing in a concourse increases, this results in more risk
leading to passenger injuries. A typical example is the metro in Bangkok, Thailand. The slow processing
rate of ticket inspection machines disturbs passenger flows in the station. The passengers are delayed
frequently at the gate due to the processing resulting in missed trains.
In the past, the security of QR codes was very limited, and so it was highly risky to use the QR code for
ticket value information retention. If the QR codes were falsely duplicated, the copies would work as a
valid ticket. Transportation operators were hesitant to apply QR codes in ticketing and used the code
only for specific purposes or particular situations. For example, a bus stop numbered ticket for fare
adjustment in bus services and seat reservation sold within one hour of train departure.
However, the lack of security features has been overcome by improving QR code identification and
authentication procedures through the use of dynamic encryption keys and their matching fields.
These processes aid in achieving fluidity enhancement, controllable anonymity, non-forgery, non-
repeatable data transfer and non-repudiation. QR codes are now effective tools to identify data senders
and recipients. Further, QR codes can be used to authenticate information contents and authorize
personal status, by completing the procedures safely and quickly. This advanced performance and
security cultivate improved transportation and its related or additional service fields, such as money
transfer services for payment and charging pre-paid cards. Thereby, ensuring that the services are
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.