Identification cards — Integrated circuit cards — Part 6: Interindustry data elements for interchange

ISO/IEC 7816-6:2016 specifies directly or by reference, data elements, including composite data elements that may be used in interindustry interchange. It identifies the following characteristics of each data element: - identifier; - name; - description and reference; - format and coding (if not available in other ISO standards or parts of ISO/IEC 7816). The layout of each data element is described as seen at the interface between the interface device and the card. It provides the definition of data elements without consideration of any restrictions on the usage of the data elements. It does not cover the internal implementation within the card and/or the outside world. With the exception of login data objects (6.5), only application class tags are eligible in ISO/IEC 7816-6:2016. When using an interindustry template, an application is allowed to nest context-specific class tags (see ISO/IEC 7816‑4) under such a template unless it is previously marked as Reserved for Future Use ISO/IEC JTC 1/SC 17.

Cartes d'identification — Cartes à circuit intégré — Partie 6: Éléments de données intersectoriels pour les échanges

General Information

Status
Withdrawn
Publication Date
13-Jun-2016
Current Stage
9092 - International Standard to be revised
Completion Date
08-Nov-2018
Ref Project

Relations

Buy Standard

Standard
ISO/IEC 7816-6:2016 - Identification cards -- Integrated circuit cards
English language
28 pages
sale 15% off
Preview
sale 15% off
Preview
Standard
ISO/IEC 7816-6:2016 - Identification cards -- Integrated circuit cards
English language
28 pages
sale 15% off
Preview
sale 15% off
Preview

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 7816-6
Third edition
2016-06-15
Identification cards — Integrated
circuit cards —
Part 6:
Interindustry data elements for
interchange
Cartes d’identification — Cartes à circuit intégré —
Partie 6: Éléments de données intersectoriels pour les échanges
Reference number
ISO/IEC 7816-6:2016(E)
©
ISO/IEC 2016

---------------------- Page: 1 ----------------------
ISO/IEC 7816-6:2016(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2016, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. +41 22 749 01 11
Fax +41 22 749 09 47
copyright@iso.org
www.iso.org
ii © ISO/IEC 2016 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 7816-6:2016(E)

Contents Page
Foreword .iv
Introduction .vi
1 Scope .1
2 Normative references .1
3 Terms and definitions .1
4 Abbreviated terms and notation . 2
5 Maintenance of interindustry data objects .3
6 Specific interindustry data elements .3
6.1 Name of an individual . 3
6.2 Proprietary login data . . 3
6.3 Magnetic stripe data . 4
6.4 PIN usage policy . 4
6.5 Login template. 4
6.6 Qualified name template . 5
6.7 Cardholder image template . 6
6.8 Application image template . 6
6.9 Display control template . 6
7 Identification of integrated circuit manufacturers .6
7.1 General . 6
7.2 Identifier . 7
7.3 Rules for assignment . 7
8 Interchange profile .7
9 Interindustry data elements in alphabetic order .8
10 Interindustry tags in numeric order.15
11 Interindustry templates .24
11.1 Interindustry data objects within interindustry templates .24
11.2 Interindustry templates defining a context .26
Annex A (normative) Application for integrated circuit manufacturers number .27
Bibliography .28
© ISO/IEC 2016 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO/IEC 7816-6:2016(E)

Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work. In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical
Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/IEC JTC 1, Information technology, SC 17, Cards and
personal identification.
This third edition cancels and replaces the second edition (ISO/IEC 7816-6:2004), which has been
technically revised. It also incorporates the Technical Corrigendum ISO/IEC 7816-6:2004/Cor 1:2006.
ISO/IEC 7816 consists of the following parts, under the general title Identification cards — Integrated
circuit cards:
— Part 1: Cards with contacts — Physical characteristics
— Part 2: Cards with contacts — Dimensions and location of the contacts
— Part 3: Cards with contacts — Electrical interface and transmission protocols
— Part 4: Organization, security and commands for interchange
— Part 5: Registration of application providers
— Part 6: Interindustry data elements for interchange
— Part 7: Interindustry commands for Structured Card Query Language (SCQL)
— Part 8: Commands and mechanisms for security operations
— Part 9: Commands for card management
— Part 10: Electronic signals and answer to reset for synchronous cards
— Part 11: Personal verification through biometric methods
— Part 12: Cards with contacts — USB electrical interface and operating procedures
— Part 13: Commands for application management in a multi-application environment
iv © ISO/IEC 2016 – All rights reserved

---------------------- Page: 4 ----------------------
ISO/IEC 7816-6:2016(E)

— Part 15: Cryptographic information application
© ISO/IEC 2016 – All rights reserved v

---------------------- Page: 5 ----------------------
ISO/IEC 7816-6:2016(E)

Introduction
ISO/IEC 7816 is a series of International Standards specifying integrated circuit cards and the use of
such cards for interchange. These cards are identification cards intended for information exchange
negotiated between the outside world and the integrated circuit in the card. As a result of an information
exchange, the card delivers information (computation result, stored data), and/or modifies its content
(data storage, event memorization).
— Five parts are specific to cards with galvanic contacts and three of them specify electrical interfaces.
— ISO/IEC 7816-1 specifies physical characteristics for cards with contacts.
— ISO/IEC 7816-2 specifies dimensions and location of the contacts.
— ISO/IEC 7816-3 specifies electrical interface and transmission protocols for asynchronous cards.
— ISO/IEC 7816-10 specifies electrical interface and answer to reset for synchronous cards.
— ISO/IEC 7816-12 specifies electrical interface and operating procedures for USB cards.
— All the other parts are independent from the physical interface technology. They apply to cards
accessed by contacts and/or by radio frequency.
— ISO/IEC 7816-4 specifies organization, security and commands for interchange.
— ISO/IEC 7816-5 specifies registration of application providers.
— ISO/IEC 7816-6 specifies interindustry data elements for interchange.
— ISO/IEC 7816-7 specifies commands for structured card query language.
— ISO/IEC 7816-8 specifies commands for security operations.
— ISO/IEC 7816-9 specifies commands for card management.
— ISO/IEC 7816-11 specifies personal verification through biometric methods.
— ISO/IEC 7816-13 specifies commands for handling the life cycle of applications.
— ISO/IEC 7816-15 specifies cryptographic information application.
ISO/IEC 10536 specifies access by close coupling. ISO/IEC 14443 and ISO/IEC 15693 specify access by
radio frequency. Such cards are also known as contactless cards.
vi © ISO/IEC 2016 – All rights reserved

---------------------- Page: 6 ----------------------
INTERNATIONAL STANDARD ISO/IEC 7816-6:2016(E)
Identification cards — Integrated circuit cards —
Part 6:
Interindustry data elements for interchange
1 Scope
This part of ISO/IEC 7816 specifies directly or by reference, data elements, including composite data
elements that may be used in interindustry interchange.
It identifies the following characteristics of each data element:
— identifier;
— name;
— description and reference;
— format and coding (if not available in other ISO standards or parts of ISO/IEC 7816).
The layout of each data element is described as seen at the interface between the interface device and
the card.
This part of ISO/IEC 7816 provides the definition of data elements without consideration of any
restrictions on the usage of the data elements.
It does not cover the internal implementation within the card and/or the outside world. With the
exception of login data objects (6.5), only application class tags are eligible in this part of ISO/IEC 7816.
When using an interindustry template, an application is allowed to nest context-specific class tags
(see ISO/IEC 7816-4) under such a template unless it is previously marked as Reserved for Future Use
ISO/IEC JTC 1/SC 17.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 4909, Identification cards — Financial transaction cards — Magnetic stripe data content for track 3
ISO/IEC 7813, Information technology — Identification cards — Financial transaction cards
ISO/IEC 7816 (all parts), Identification cards — Integrated circuit cards
ISO/IEC 10918-1, Information technology — Digital compression and coding of continuous-tone still
images — Part 1: Requirements and guidelines
ISO/IEC 11544, Information technology — Coded representation of picture and audio information —
Progressive bi-level image compression
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
© ISO/IEC 2016 – All rights reserved 1

---------------------- Page: 7 ----------------------
ISO/IEC 7816-6:2016(E)

3.1
data element
item of information seen at the interface for which are defined a name, a description of logical content,
a format and a coding
[SOURCE: ISO/IEC 7816-4:2013, 3.16, modified]
3.2
data object
information seen at the interface consisting of the concatenation of a mandatory tag field, a mandatory
length field and a conditional value field
[SOURCE: ISO/IEC 7816-4:2013, 3.17]
3.3
template
concatenation of BER-TLV data objects forming the value field of a constructed BER-TLV data object
Note 1 to entry: The meaning of which is the same when found in ‘XY’ template, template for ‘XY’ DOs or ‘XY’ DOs
template
[SOURCE: ISO/IEC 7816-4:2013, 3.58]
4 Abbreviated terms and notation
a alphabetic character
n numeric (binary-coded decimal format)
s special character
an alphanumeric character
ans alphanumeric and special characters
.. denotes a range of values between two numbers
BCD binary coded decimal
Any number following the notation denotes the number of digits or characters.
EXAMPLE
— a3 means three alphabetic characters;
— n.3 means one, two or three binary-coded decimal digits;
— n2.4 means two, three or four binary-coded decimal digits.
2 © ISO/IEC 2016 – All rights reserved

---------------------- Page: 8 ----------------------
ISO/IEC 7816-6:2016(E)

If the number of bits representing a data element is not a multiple of eight, then the mapping into a byte
string should be defined in the context of the respective data element. If not specified otherwise, the
appropriate number of bits shall be set to one in the last byte starting from bit 1.
YYMMDD 6 BCD-encoded digits
YYYYMMDD 8 BCD-encoded digits
YDDDHHMMSS 10 BCD-encoded digits
YDDD last digit of year concatenated with day of year on three digits
YDDDHHMMSS YDDD concatenated with hour of day, minute and second each on two digits
YYMM last two digits of year concatenated month on two digits
YYMMDD YYMM concatenated with day of month on two digits
YYYYMMDD four digits of year concatenated with month and day of month each on two digits
NOTE The former 3-period notation being equivalent to 2-period notation, it is deprecated.
5 Maintenance of interindustry data objects
It is the intention that every interindustry data object, specified at the time of publication, should be
listed in this part of ISO/IEC 7816. To allow the introduction, deletion, or amendment of any data object,
the following procedures shall be adopted:
— Interindustry data objects from ISO/IEC 7816 — if any part of ISO/IEC 7816 introduces new data
objects, then the normal ballot process shall approve them. Following publication of that part of
ISO/IEC 7816, these data objects will be incorporated into this part of ISO/IEC 7816 at the next
revision.
— Interindustry data objects from other standards — for such data objects, an amendment to this
document will be required and this will be subject to the normal ISO/IEC JTC 1 voting procedures.
Following successful ballot the data objects will be incorporated into this part of ISO/IEC 7816.
— Allocation Authority — once an Application class tag is allocated to a norm as described above,
this norm becomes the allocation authority for all context-specific Data Objects it endorses and
encapsulates under the aforementioned Tag.
6 Specific interindustry data elements
6.1 Name of an individual
Referenced by tag ‘5B’, this interindustry data element consists of up to 39 bytes; each byte is a character
as defined in ISO/IEC 7501-1. The data element consists of surname, i.e. family name, given name(s), i.e.
forename(s), name suffix, e.g. Jr., number, and filler(s), all coded according to ISO/IEC 8859-1.
National languages with non-Latin characters shall be transliterated or transcribed into the Latin
alphabet using the appropriate International Standard. In cases where names cannot be shown in full
or a special alphabet is needed or the transliteration or transcription is not sufficient, the qualified
name template should be used.
6.2 Proprietary login data
Referenced by tag ‘5E’, this interindustry data element consists of login data with proprietary structures
not specified in ISO/IEC 7816.
© ISO/IEC 2016 – All rights reserved 3

---------------------- Page: 9 ----------------------
ISO/IEC 7816-6:2016(E)

6.3 Magnetic stripe data
The coding of the magnetic stripe data is as follows:
— referenced respectively by tags ‘5F21’, ‘5F22’ and ‘5F23’, these interindustry data elements shall code
card tracks 1, 2 and 3. Such a tag shall be used when the data element is identical to the data coded
on the corresponding track on the magnetic stripe of the card (see ISO/IEC 7813 and ISO/IEC 4909);
— referenced respectively by tags ‘56’, ‘57’ and ‘58’, these interindustry data elements shall code
application tracks 1, 2 and 3. Such a tag shall be used when, while formatted according to ISO/IEC 7813
and ISO/IEC 4909, the data element may differ from the data coded on the corresponding track of
the magnetic stripe of the card.
6.4 PIN usage policy
Referenced by tag ‘5F2F’, this interindustry data element shall consist of two bytes. It lists the tests
the terminal shall perform in order to determine whether a PIN (personal identification number) is
applicable to the current transaction, and, therefore, whether the terminal should prompt for the PIN. If
set to one, bit 8 of the first byte specifies that a PIN applies to this application and the terminal should
prompt for the PIN. The meaning of the other fifteen bits is application-dependent. If all bits are set to
zero, then the terminal should not prompt for the PIN. If bit 8 of the first byte is set to one or if any test
implies a PIN, but the PIN cannot be presented, then the action to take is application-dependent.
6.5 Login template
Referenced by tag ‘6A’, this interindustry template shall consist of one or more primitive data objects.
Within the login template, the context-specific class (first byte in the range ‘80’ to ‘BF’) is reserved
for login data objects, such as qualifiers, numbers, texts and delay indicators, as listed in Table 1 and
specified hereafter.
Table 1 — Login data objects
Tag (hex) Meaning
6A Interindustry template for nesting login data objects with the following tags
80 Qualifier
81 Number
82 Text
83, 84 Delay indicators
In this context, ISO/IEC JTC 1/SC 17 reserves any other data object of the context-specific class (first byte
from ‘80’ to ‘BF’)
— Qualifier — Referenced by tag ‘80’ in a login template, this data element shall consist of one to
nine bytes: a mandatory first byte coding a rank, followed by up to eight optional bytes coding a
mnemonic. It shall qualify the subsequent objects in the template, until the next qualifier, if any.
— The rank is a number from zero to 255. If two or more qualifiers have the same rank within the
same context, then only the set of objects qualified by the most recent one is valid.
— The mnemonic is a string of up to eight bytes consisting of 7-bit characters (bit 8 set to 0, see
ISO/IEC 646) to display at the man-machine interface.
— Number — Referenced by tag ‘81’ in a login template, this data element shall consist of an even
number of quartets where each quartet codes one character for representing a telephone number
according to Table 2.
4 © ISO/IEC 2016 – All rights reserved

---------------------- Page: 10 ----------------------
ISO/IEC 7816-6:2016(E)

Table 2 — Telephone number
Quartet Character Meaning
‘0’ to ‘9’ 0 to 9 Decimal digits
‘A’ ( Opening bracket
‘B’ ) Closing bracket
‘C’ C Requirement for connecting to the line before continuing
‘D’ + Introduction to an international telephone number
‘E’ — If first, introduction of a number to use without prefix
If not first, requirement for a delay (two seconds) before continuing
‘F’ Reserved for padding
— Text — Referenced by tag ‘82’ in a login template, this data element shall consist of one or more
bytes where each byte codes one character. Bit 8 sets the difference between data characters (bit 8
set to zero) and control characters (bit 8 set to one). The byte string consists of one or more strings
of data characters (7-bit character, see ISO/IEC 646) separated by strings of control characters. The
following control characters are defined.
— ‘80’ — A message has to be received before sending the next character.
— ‘C0’ — A modulation has to be present before sending the next character.
— ‘8X’ — X characters have to be received in echo before waiting for a message.
— Delay indicators — Referenced by tag ‘83’ or ‘84’ in a login template, this data element shall consist
of one byte as specified in Table 3.
— When present, a delay indicator data object with tag ‘83’ fixes the time for detecting an end of
message. The default value shall be two seconds.
— When present, a delay indicator data object with tag ‘84’ fixes the time for detecting an absence
of response. The default value shall be sixty seconds.
Table 3 — Delay indicator byte
b8 b7 b6 b5 b4 b3 b2 b1 Meaning
0 0 Any other value is reserved for future use by ISO/IEC JTC 1/SC 17.
— — x x — — — — The time unit is
— — 0 0 — — — — — 100 milliseconds
— — 0 1 — — — — — 1 second
— — 1 0 — — — — — 10 seconds
— — 1 1 — — — — — 100 seconds
  x x x x Number of time units from zero to fifteen
6.6 Qualified name template
Referenced by tag ‘6B’, this interindustry template shall consist of the following:
— one or more object identifiers (tag ‘06’) referring to the standards defining the qualified name
presentation;
— a name (tag ‘80’ or ‘A0’), the value and coding of which are defined by the aforementioned standards;
— other related optional information (e.g. sex, nationality, place of birth).
© ISO/IEC 2016 – All rights reserved 5

---------------------- Page: 11 ----------------------
ISO/IEC 7816-6:2016(E)

6.7 Cardholder image template
Referenced by tag ‘6C’, this interindustry template shall contain at least one data object as defined
hereafter, possibly preceded by a tag allocation authority indicator (see ISO/IEC 7816-4) for identifying
the authority responsible for the data object format.
— Cardholder biometric data — referenced by tag ‘5F2E’, this interindustry data element contains
biometric data for verifying the claimed identity of the person presenting the card. Examples of
biometric data are fingerprints, palm prints, voiceprints, dynamic signatures, etc.
— Cardholder portrait image — referenced by tag ‘5F40’, this interindustry data element shall
be formatted as defined in ISO/IEC 10918-1, unless otherwise specified and/or requested by an
authority.
— Cardholder handwritten signature image — referenced by tag ‘5F43’, this interindustry data
element shall be formatted as defined in ISO/IEC 11544 unless otherwise specified and/or requested
by an authority.
The use of this interindustry data object should be associated with appropriate security measures.
Further information on personal verification through biometric methods may be found in
ISO/IEC 7816-11.
6.8 Application image template
Referenced by tag ‘6D’, this interindustry template shall contain at least an application image (tag
‘5F44’), i.e. an icon or a logo related to the application. It may also contain an authority indicator (see
ISO/IEC 7816-4) identifying the authority responsible for the data format of the application image. In
the absence of authority indicator, the format shall be as defined in ISO/IEC 10918-1.
6.9 Display control template
Referenced by tag ‘7F20’, this interindustry template may contain one or more data objects, the value of
which, either directly or indirectly through templates, is not intended to be displayed and should only
be used, when relevant, for processing of transmission.
7 Identification of integrated circuit manufacturers
7.1 General
This Clause specifies
— a numbering system for integrated circuit manufacturer identifiers, and
— rules for registration of integrated circuit manufacturers and rules for assignment of identifiers
to identify manufacturers of integrated circuits to be embedded in contact and/or contactless
integrated circuits cards. The assigned values of the integrated circuit manufacturer identifiers will
form the register, published as SC 17 Standing Document 5.
Applications for a number may be made using the form in Annex A.
6 © ISO/IEC 2016 – All rights reserved

---------------------- Page: 12 ----------------------
ISO/IEC 7816-6:2016(E)

7.2 Identifier
The identifier is referenced by tag ‘5F4D’. It may be present in pre-issuing data (compact header ‘6Y’ in
the historical bytes and interindustry tag ‘46’ in EF.ATR/INFO) on a proprietary basis.
NOTE In ISO/IEC 7816-6:1996/Amd 1:2000, tag ‘5F4B’ references an integrated circuit manufacturer
identifier (a data element of one byte). In ISO/IEC 7816-9:2000, tag ‘5F4B’ references a certificate holder
authorization (a data element of five or more bytes). Consequently, tag ‘5F4B’ is now deprecated in ISO/IEC 7816.
The identifier consists of one byte where the bits are not all set to one; the value ‘FF’ is reserved for
future extension. Longer identifiers are reserved for future use by ISO/IEC JTC 1/SC 17.
The identifier byte shall be used according to Table 4.
Table 4 — Identifier byte
Value Meaning
‘00’ Reserved for future use by ISO/IEC JTC 1/SC 17
‘01’ . ‘7E’ Reserved for the register
‘7F’, ‘80’ Reserved for future use by ISO/IEC JTC 1/SC 17
‘81’ . ‘FE’ Proprietary
‘FF’ Reserved for future extension by ISO/IEC JTC 1/SC 17
7.3 Rules for assignment
1)
The ISO/IEC JTC 1/SC 17 Secretariat will assign and register the integrated circuit manufacturer
identifiers (range ‘01’ to ‘7E’) according to the following rules:
a) the assignment is made upon request from any integrated circuit manufacturer or any
interested party;
b) the form contained in Annex A should be used to request an assignment;
c) a single number shall be assigned to each manufacturer (next available number);
d) the assigned values shall form the register provided in SC 17 Standing Document 5;
e) SC 17 Standing Document 5 will be updated as required;
f) SC 17 shall, at a periodicity of 12 months, check the content of SC 17 Standing Document 5 for
accuracy;
g) a copy of SC 17 Standing Document 5 shall be available at the SC 17 website http://isotc.iso.
org/livelink/livelink/open/jtc1sc17.
NOTE: SC 17 Standing Document 5 can be found under “01. Public information” folder.
8 Interchange profile
The specification of data objects associated with the interchange profile of the card (e.g. available
authentication methods and security functions) may be further detailed in future parts of ISO/IEC 7816.
Table 5 shows interindustry data objects reserved for interchange profile.
1) Please refer to www.iso.org/iso/standards_development/technical_committees/maintenance_agencies.htm for
details of where to submit the completed form.
© ISO/IEC 2016 – All rights reserved 7

---------------------- Page: 13 ----------------------
ISO/IEC 7816-6:2016(E)

Table 5 — Interindustry data objects reserved for interchange profile
Tag Value
5F29 Interchange profile
5F37 Static internal authentication (one-step)
...

FINAL
INTERNATIONAL ISO/IEC
DRAFT
STANDARD FDIS
7816-6
ISO/IEC JTC 1/SC 17
Identification cards — Integrated
Secretariat: BSI
circuit cards —
Voting begins on:
2015-11-25
Part 6:
Voting terminates on:
Interindustry data elements for
2016-01-25
interchange
Cartes d’identification — Cartes à circuit intégré —
Partie 6: Éléments de données intersectoriels pour les échanges
RECIPIENTS OF THIS DRAFT ARE INVITED TO
SUBMIT, WITH THEIR COMMENTS, NOTIFICATION
OF ANY RELEVANT PATENT RIGHTS OF WHICH
THEY ARE AWARE AND TO PROVIDE SUPPOR TING
DOCUMENTATION.
IN ADDITION TO THEIR EVALUATION AS
Reference number
BEING ACCEPTABLE FOR INDUSTRIAL, TECHNO-
ISO/IEC FDIS 7816-6:2015(E)
LOGICAL, COMMERCIAL AND USER PURPOSES,
DRAFT INTERNATIONAL STANDARDS MAY ON
OCCASION HAVE TO BE CONSIDERED IN THE
LIGHT OF THEIR POTENTIAL TO BECOME STAN-
DARDS TO WHICH REFERENCE MAY BE MADE IN
©
NATIONAL REGULATIONS. ISO/IEC 2015

---------------------- Page: 1 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2015, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. +41 22 749 01 11
Fax +41 22 749 09 47
copyright@iso.org
www.iso.org
ii © ISO/IEC 2015 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

Contents Page
Foreword .iv
Introduction .vi
1 Scope .1
2 Normative references .1
3 Terms and definitions .1
4 Abbreviated terms and notation .2
5 Maintenance of interindustry data objects .3
6 Specific interindustry data elements .3
6.1 Name of an individual . 3
6.2 Proprietary login data . . 3
6.3 Magnetic stripe data . 3
6.4 PIN usage policy . 3
6.5 Login template. 4
6.6 Qualified name template . 5
6.7 Cardholder image template . 5
6.8 Application image template . 6
6.9 Display control template . 6
7 Identification of integrated circuit manufacturers .6
7.1 General . 6
7.2 Identifier . 6
7.3 Rules for assignment . 7
8 Interchange profile .7
9 Interindustry data elements in alphabetic order .7
10 Interindustry tags in numeric order.14
11 Interindustry templates .27
11.1 Interindustry data objects within interindustry templates .27
11.2 Interindustry templates defining a context .29
Annex A (normative) Application for integrated circuit manufacturers number .31
Bibliography .32
© ISO/IEC 2015 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work. In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical
Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/IEC JTC 1, Information technology, Subcommittee
SC 17, Cards and personal identification.
This third edition cancels and replaces the second edition (ISO/IEC 7816-6:2004), which has been
technically revised. It also incorporates the Technical Corrigendum ISO/IEC 7816-6:2004/Cor. 1:2006.
ISO/IEC 7816 consists of the following parts, under the general title Identification cards — Integrated
circuit cards:
— Part 1: Cards with contacts — Physical characteristics
— Part 2: Cards with contacts — Dimensions and location of the contacts
— Part 3: Cards with contacts — Electrical interface and transmission protocols
— Part 4: Organization, security and commands for interchange
— Part 5: Registration of application providers
— Part 6: Interindustry data elements for interchange
— Part 7: Interindustry commands for Structured Card Query Language (SCQL)
— Part 8: Commands and mechanisms for security operations
— Part 9: Commands for card management
— Part 10: Electronic signals and answer to reset for synchronous cards
— Part 11: Personal verification through biometric methods
— Part 12: Cards with contacts — USB electrical interface and operating procedures
— Part 13: Commands for application management in a multi-application environment
iv © ISO/IEC 2015 – All rights reserved

---------------------- Page: 4 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

— Part 15: Cryptographic information application
© ISO/IEC 2015 – All rights reserved v

---------------------- Page: 5 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

Introduction
ISO/IEC 7816 is a series of International Standards specifying integrated circuit cards and the use of
such cards for interchange. These cards are identification cards intended for information exchange
negotiated between the outside world and the integrated circuit in the card. As a result of an information
exchange, the card delivers information (computation result, stored data) and/or modifies its content
(data storage, event memorization).
— Five parts are specific to cards with galvanic contacts and three of them specify electrical interfaces.
— ISO/IEC 7816-1 specifies physical characteristics for cards with contacts.
— ISO/IEC 7816-2 specifies dimensions and location of the contacts.
— ISO/IEC 7816-3 specifies electrical interface and transmission protocols for asynchronous cards.
— ISO/IEC 7816-10 specifies electrical interface and answer to reset for synchronous cards.
— ISO/IEC 7816-12 specifies electrical interface and operating procedures for USB cards.
— All the other parts are independent from the physical interface technology. They apply to cards
accessed by contacts and/or by radio frequency.
— ISO/IEC 7816-4 specifies organization, security and commands for interchange.
— ISO/IEC 7816-5 specifies registration of application providers.
— ISO/IEC 7816-6 specifies interindustry data elements for interchange.
— ISO/IEC 7816-7 specifies commands for structured card query language.
— ISO/IEC 7816-8 specifies commands for security operations.
— ISO/IEC 7816-9 specifies commands for card management.
— ISO/IEC 7816-11 specifies personal verification through biometric methods.
— ISO/IEC 7816-13 specifies commands for handling the life cycle of applications.
— ISO/IEC 7816-15 specifies cryptographic information application.
ISO/IEC 10536 specifies access by close coupling. ISO/IEC 14443 and ISO/IEC 15693 specify access by
radio frequency. Such cards are also known as contactless cards.
vi © ISO/IEC 2015 – All rights reserved

---------------------- Page: 6 ----------------------
FINAL DRAFT INTERNATIONAL STANDARD ISO/IEC FDIS 7816-6:2015(E)
Identification cards — Integrated circuit cards —
Part 6:
Interindustry data elements for interchange
1 Scope
This part of ISO/IEC 7816 specifies directly or by reference, data elements, including composite data
elements, that may be used in interindustry interchange.
It identifies the following characteristics of each data element:
— identifier;
— name;
— description and reference;
— format and coding (if not available in other ISO standards or parts of ISO/IEC 7816).
The layout of each data element is described as seen at the interface between the interface device
and the card.
This part of ISO/IEC 7816 provides the definition of data elements without consideration of any
restrictions on the usage of the data elements.
It does not cover the internal implementation within the card and/or the outside world. With
the exception of login data objects (see 6.5), only application class tags are eligible in this part of
ISO/IEC 7816 .
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 4909, Identification cards — Financial transaction cards — Magnetic stripe data content for track 3
ISO/IEC 7813, Information technology — Identification cards — Financial transaction cards
ISO/IEC 7816 (all parts), Identification cards — Integrated circuit cards
ISO/IEC 10918-1, Information technology — Digital compression and coding of continuous-tone still
images: Requirements and guidelines — Part 1
ISO/IEC 11544, Information technology — Coded representation of picture and audio information —
Progressive bi-level image compression
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
© ISO/IEC 2015 – All rights reserved 1

---------------------- Page: 7 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

3.1
data element
item of information seen at the interface for which are defined a name, a description of logical content,
a format and a coding
[SOURCE: ISO/IEC 7816-4:2013, 3.16, modified]
3.2
data object
information seen at the interface consisting of the concatenation of a mandatory tag field, a mandatory
length field and a conditional value field
[SOURCE: ISO/IEC 7816-4:2013, 3.17]
3.3
template
concatenation of BER-TLV data objects forming the value field of a constructed BER-TLV data object
[SOURCE: ISO/IEC 7816-4:2013, 3.58]
4 Abbreviated terms and notation
For the purposes of this part of ISO/IEC 7816, the following abbreviated terms and notations apply.
a alphabetic character
n numeric (binary-coded decimal format)
s special character
an alphanumeric character
ans alphanumeric and special characters
.. denotes a range of values between two numbers
BCD Binary Coded Decimal
Any number following the notation denotes the number of digits or characters.
EXAMPLE
— a3 means three alphabetic characters;
— n.3 means one, two or three binary-coded decimal digits;
— n2.4 means two, three or four binary-coded decimal digits.
If the number of bits representing a data element is not a multiple of eight, then the mapping into a byte
string should be defined in the context of the respective data element. If not specified otherwise, the
appropriate number of bits shall be set to one in the last byte starting from bit 1.
YYMMDD 6 BCD-encoded digits
YYYYMMDD 8 BCD-encoded digits
YDDDHHMMSS 10 BCD-encoded digits
2 © ISO/IEC 2015 – All rights reserved

---------------------- Page: 8 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

5 Maintenance of interindustry data objects
It is the intention that every interindustry data object, specified at the time of publication, should be
listed in this part of ISO/IEC 7816. To allow the introduction, deletion or amendment of any data object,
the following procedures shall be adopted.
— Interindustry data objects from ISO/IEC 7816 — if any part of ISO/IEC 7816 introduces new
data objects, then the normal ballot process shall approve them. Following publication of that
part of ISO/IEC 7816, these data objects will be incorporated into this part of ISO/IEC 7816 at the
next revision.
— Interindustry data objects from other standards — for such data objects, an amendment to
this part of ISO/IEC 7816 will be required and this will be subject to the normal ISO/IEC JTC 1
voting procedures. Following successful ballot the data objects will be incorporated into this part
of ISO/IEC 7816.
— Allocation authority — once an application class tag is allocated to a norm as described above,
this norm becomes the allocation authority for all context-specific Data Objects it endorses and
encapsulates under the aforementioned tag.
6 Specific interindustry data elements
According to its needs, any application may use the following interindustry data elements and templates.
6.1 Name of an individual
Referenced by tag ‘5B’, this interindustry data element consists of up to 39 bytes; each byte is a character
as defined in ISO/IEC 7501-1. The data element consists of surname, i.e. family name, given name(s), i.e.
forename(s), name suffix, e.g. Jr., number, and filler(s), all coded according to ISO/IEC 8859-1.
National languages with non-Latin characters shall be transliterated or transcribed into the Latin
alphabet using the appropriate ISO standard. In cases where names cannot be shown in full or a special
alphabet is needed or the transliteration or transcription is not sufficient, the qualified name template
should be used.
6.2 Proprietary login data
Referenced by tag ‘5E’, this interindustry data element consists of login data with proprietary structures
not specified in ISO/IEC 7816.
6.3 Magnetic stripe data
The coding of the magnetic stripe data is as follows:
— referenced respectively by tags ‘5F21’, ‘5F22’ and ‘5F23’, these interindustry data elements shall code
card tracks 1, 2 and 3. Such a tag shall be used when the data element is identical to the data coded
on the corresponding track on the magnetic stripe of the card (see ISO/IEC 7813 and ISO/IEC 4909);
— referenced respectively by tags ‘56’, ‘57’ and ‘58’, these interindustry data elements shall code
application tracks 1, 2 and 3. Such a tag shall be used when, while formatted according to ISO/IEC 7813
and ISO/IEC 4909, the data element may differ from the data coded on the corresponding track of
the magnetic stripe of the card.
6.4 PIN usage policy
Referenced by tag ‘5F2F’, this interindustry data element shall consist of two bytes. It lists the tests
the terminal shall perform in order to determine whether a personal identification number (PIN) is
applicable to the current transaction, and, therefore, whether the terminal should prompt for the PIN. If
© ISO/IEC 2015 – All rights reserved 3

---------------------- Page: 9 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

set to one, bit 8 of the first byte specifies that a PIN applies to this application and the terminal should
prompt for the PIN. The meaning of the other fifteen bits is application-dependent. If all bits are set to
zero, then the terminal should not prompt for the PIN. If bit 8 of the first byte is set to one or if any test
implies a PIN, but the PIN cannot be presented, then the action to take is application-dependent.
6.5 Login template
Referenced by tag ‘6A’, this interindustry template shall consist of one or more primitive data objects.
Within the login template, the context-specific class (first byte in the range ‘80’ to ‘BF’) is reserved
for login data objects such as qualifiers, numbers, texts and delay indicators, as listed in Table 1 and
specified hereafter.
Table 1 — Login data objects
Tag (hex) Meaning
6A Interindustry template for nesting login data objects with the following tags
80 Qualifier
81 Number
82 Text
83, 84 Delay indicators
In this context, ISO/IEC JTC 1/SC17 reserves any other data object of the context-specific class (first byte from
‘80’ to ‘BF’)
— Qualifier — referenced by tag ‘80’ in a login template, this data element shall consist of one to
nine bytes: a mandatory first byte coding a rank, followed by up to eight optional bytes coding a
mnemonic. It shall qualify the subsequent objects in the template until the next qualifier, if any.
— The rank is a number from 0 to 255. If two or more qualifiers have the same rank within the
same context, then only the set of objects qualified by the most recent one is valid.
— The mnemonic is a string of up to eight bytes consisting of 7-bit characters (bit 8 set to 0; see
ISO/IEC 646) to display at the man-machine interface.
— Number — Referenced by tag ‘81’ in a login template, this data element shall consist of an even
number of quartets where each quartet codes one character for representing a telephone number
according to Table 2.
Table 2 — Telephone number
Quartet Character Meaning
‘0’ to ‘9’ 0 to 9 Decimal digits
‘A’ ( Opening bracket
‘B’ ) Closing bracket
‘C’ C Requirement for connecting to the line before continuing
‘D’ + Introduction to an international telephone number
‘E’ - If first, introduction of a number to use without prefix
If not first, requirement for a delay (two seconds) before continuing
‘F’ Reserved for padding
— Text — referenced by tag ‘82’ in a login template, this data element shall consist of one or more
bytes where each byte codes one character. Bit 8 sets the difference between data characters (bit 8
set to zero) and control characters (bit 8 set to one). The byte string consists of one or more strings
4 © ISO/IEC 2015 – All rights reserved

---------------------- Page: 10 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

of data characters (7-bit character, see ISO/IEC 646) separated by strings of control characters. The
following control characters are defined.
— ‘80’ — a message has to be received before sending the next character.
— ‘C0’ — a modulation has to be present before sending the next character.
— ‘8X’ — x characters have to be received in echo before waiting for a message.
— Delay indicators — referenced by tag ‘83’ or ‘84’ in a login template, this data element shall consist
of one byte as specified in Table 3.
— When present, a delay indicator data object with tag ‘83’ fixes the time for detecting an end of
message. The default value shall be two seconds.
— When present, a delay indicator data object with tag ‘84’ fixes the time for detecting an absence
of response. The default value shall be 60 seconds.
Table 3 — Delay indicator byte
b8 b7 b6 b5 b4 b3 b2 b1 Meaning
0 0   Any other value is reserved for future use by ISO/IEC JTC 1/SC 17.
- - x x - - - - The time unit is
- - 0 0 - - - - — 100 ms
- - 0 1 - - - - — 1 s
- - 1 0 - - - - — 10 s
- - 1 1 - - - - — 100 s
  x x x x Number of time units from 0 to 15
6.6 Qualified name template
Referenced by tag ‘6B’, this interindustry template shall consist of
— one or more object identifiers (tag ‘06’) referring to the standards defining the qualified name
presentation,
— a name (tag ‘80’ or ‘A0’), the value and coding of which are defined by the aforementioned standards,
— other related optional information (e.g. sex, nationality, place of birth).
6.7 Cardholder image template
Referenced by tag ‘6C’, this interindustry template shall contain at least one data object as defined
hereafter, possibly preceded by an tag allocation authority indicator [see ISO/IEC 7816 (all parts)] for
identifying the authority responsible for the data object format.
— Cardholder biometric data — referenced by tag ‘5F2E’, this interindustry data element contains
biometric data for verifying the claimed identity of the person presenting the card. Examples of
biometric data are fingerprints, palm prints, voiceprints, dynamic signatures, etc.
— Cardholder portrait image — referenced by tag ‘5F40’, this interindustry data element shall be
formatted as defined in ISO/IEC 10918-1, unless otherwise specified and/or requested by an authority.
— Cardholder handwritten signature image — referenced by tag ‘5F43’, this interindustry data
element shall be formatted as defined in ISO/IEC 11544 unless otherwise specified and/or requested
by an authority.
The use of this interindustry data object should be associated with appropriate security measures.
© ISO/IEC 2015 – All rights reserved 5

---------------------- Page: 11 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

Further information on personal verification through biometric methods may be found in
ISO/IEC 7816 (all parts).
6.8 Application image template
Referenced by tag ‘6D’, this interindustry template shall contain at least an application image (tag
‘5F44’), i.e. an icon or a logo related to the application. It may also contain an authority indicator [see
ISO/IEC 7816 (all parts)] identifying the authority responsible for the data format of the application
image. In the absence of authority indicator, the format shall be as defined in ISO/IEC 10918-1.
6.9 Display control template
Referenced by tag ‘7F20’, this interindustry template may contain one or more data objects, the value of
which, either directly or indirectly through templates, is not intended to be displayed and should only
be used, when relevant, for processing of transmission.
7 Identification of integrated circuit manufacturers
7.1 General
This Clause specifies
— a numbering system for integrated circuit manufacturer identifiers, and
— rules for registration of integrated circuit manufacturers and rules for assignment of identifiers
to identify manufacturers of integrated circuits to be embedded in contact and/or contactless
integrated circuits cards. The assigned values of the integrated circuit manufacturer identifiers will
form the register, published as SC 17 Standing Document 5.
Applications for a number may be made using the form in Annex A.
7.2 Identifier
The identifier is referenced by tag ‘5F4D’. It may be present in pre-issuing data (compact header ‘6Y’ in
the historical bytes and interindustry tag ‘46’ in EF.ATR/INFO) on a proprietary basis.
NOTE In amendment 1 to the first edition of this part of ISO/IEC 7816, tag ‘5F4B’ references an integrated
circuit manufacturer identifier (a data element of one byte). In the first edition of ISO/IEC 7816-9, tag ‘5F4B’
references a certificate holder authorization (a data element of five or more bytes). Consequently, tag ‘5F4B’ is
now deprecated in ISO/IEC 7816 (all parts).
The identifier consists of one byte where the bits are not all set to one; the value ‘FF’ is reserved for
future extension. Longer identifiers are reserved for future use by ISO/IEC JTC 1/SC 17.
The identifier byte shall be used according to Table 4.
Table 4 — Identifier byte
Value Meaning
‘00’ Reserved for future use by ISO/IEC JTC 1/SC 17
‘01’ – ‘7E’ Reserved for the register
‘7F’, ‘80’ Reserved for future use by ISO/IEC JTC 1/SC 17
‘81’ – ‘FE’ Proprietary
‘FF’ Reserved for future extension by ISO/IEC JTC 1/SC 17
6 © ISO/IEC 2015 – All rights reserved

---------------------- Page: 12 ----------------------
ISO/IEC FDIS 7816-6:2015(E)

7.3 Rules for assignment
1)
The ISO/IEC JTC 1/SC 17 Secretariat will assign and register the integrated circuit manufacturer
identifiers (range ‘01’ to ‘7E’) according to the following rules:
a) the assignment is made upon request from any integrated circuit manufacturer or any
interested party;
b) the form contained in Annex A should be used to request an assignment;
c) a single number shall be assigned to each manufacturer (next available number);
d) the assigned values shall form the register provided in SC 17 Standing Document 5;
e) SC 17 Standing Document 5 will be updated as required;
f) SC 17 shall, at a periodicity of 12 months, check the content of SC 17 Standing Document 5 for accuracy;
g) a copy of SC 17 Standing Document 5 shall be available at the SC 17 website http://isotc.iso.
org/livelink/open/jtc1sc17
8 Interchange profile
The specification of data objects associated with the interchange profile of the card (e.g. available
authentication methods and security functions) may be further detailed in future parts of ISO/IEC 7816.
Table 5 shows interindustry data objects reserved for interchange profile.
Table 5 — Interindustry data objects reserved for interchange profile
Tag Value
5F29 Interchange profile
5F37 Static internal authentication (one-step)
5F38 Static internal authentication – first associated data
5F39 Static internal authentication – second associated data
5F3A Dynamic internal authentication
5F3B Dynamic external authentication
5F3C Dynamic mutual authentication
9 Interindustry data element
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.