ISO 22381:2018

Security and resilience — Authenticity, integrity and trust for products and documents — Guidelines for establishing interoperability among object identification systems to deter counterfeiting and illicit trade

This document gives guidelines for establishing interoperability among independently functioning product identification and related authentication systems, as described in ISO 16678. The permanent transfer of data from one system to another is out of the scope of this document. It also gives guidance on how to specify an environment open to existing or new methods of identification and authentication of objects, and which is accessible for legacy systems that may need to remain active. It is applicable to any industry, stakeholder or user group requiring object identification and authentication systems. It can be used on a global scale, or in limited environments. This document supports those involved in planning and establishing interoperation.

Sécurité et résilience — Titre manque

General Information

• Status: Published
• Publication Date: 25-Sep-2018
• ICS: 03.100.01 - Company organization and management in general
• Technical Committee: ISO/TC 292 - Security and resilience
• Drafting Committee: ISO/TC 292/WG 4 - Authenticity, integrity and trust for products and documents
• Current Stage: 9093 - International Standard confirmed
• Completion Date: 24-Jan-2024

Standards Content (Sample)

INTERNATIONAL ISO
STANDARD 22381
First edition
2018-09
Security and resilience — Authenticity,
integrity and trust for products
and documents — Guidelines for
establishing interoperability among
object identification systems to deter
counterfeiting and illicit trade
Reference number
ISO 22381:2018(E)
©
ISO 2018

---------------------- Page: 1 ----------------------
ISO 22381:2018(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO 2018
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2018 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 22381:2018(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 2
5 Planning, implementing and controlling systems’ interoperability.2
5.1 Identify stakeholders and their needs . 2
5.2 Organize stakeholders . 3
5.2.1 Identify lead stakeholder . 3
5.2.2 Define roles and responsibilities . 3
5.2.3 Develop a contractual framework . 3
5.2.4 Set up an onboarding and leaving process . 4
5.3 Plan architecture . 4
5.3.1 General principles . 4
5.3.2 Identify participating OIASs and functional blocs to form the constituents
of the I-OP . 5
5.3.3 Study types and ownership of attributes to be handled . 6
5.3.4 Specify TEPs for secure I-OP access . 6
5.3.5 Specify access rules for users . 7
5.3.6 Define and improve trust levels . 7
5.3.7 Outline or delimit the usage o
...