ISO/IEC 7816-15:2004/Amd 2:2008

Identification cards — Integrated circuit cards — Part 15: Cryptographic information application — Amendment 2: Error corrections and extensions for multi-application environments

Cartes d'identification — Cartes à circuit intégré — Partie 15: Application des informations cryptographiques — Amendement 2: Corrections d'erreurs et extensions pour environnements d'applications multiples

General Information

• Status: Withdrawn
• Publication Date: 25-Nov-2008
• Withdrawal Date: 25-Nov-2008
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: ISO/IEC JTC 1/SC 17 - Cards and security devices for personal identification
• Drafting Committee: ISO/IEC JTC 1/SC 17/WG 4 - Generic interfaces and protocols for security devices
• Current Stage: 9599 - Withdrawal of International Standard
• Completion Date: 09-May-2016

Relations

• Revised: ISO/IEC 7816-15:2016 - Identification cards — Integrated circuit cards — Part 15: Cryptographic information application
• Effective Date: 09-Nov-2013
• Amends: ISO/IEC 7816-15:2004 - Identification cards — Integrated circuit cards — Part 15: Cryptographic information application
• Effective Date: 06-Jun-2022
• Child: ISO/IEC 7816-15:2004 - Identification cards — Integrated circuit cards — Part 15: Cryptographic information application
• Effective Date: 15-Apr-2008

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 7816-15
First edition
2004-01-15
AMENDMENT 2
2008-12-15


Identification cards — Integrated circuit
cards —
Part 15:
Cryptographic information application
AMENDMENT 2: Error corrections and
extensions for multi-application
environments
Cartes d'identification — Cartes à circuit intégré —
Partie 15: Application des informations cryptographiques
AMENDEMENT 2: Corrections d'erreurs et extensions pour
environnements d'applications multiples




Reference number
ISO/IEC 7816-15:2004/Amd.2:2008(E)
©
ISO/IEC 2008

---------------------- Page: 1 ----------------------
ISO/IEC 7816-15:2004/Amd.2:2008(E)
PDF disclaimer
This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but
shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In
downloading this file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat
accepts no liability in this area.
Adobe is a trademark of Adobe Systems Incorporated.
Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation
parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In
the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below.


COPYRIGHT PROTECTED DOCUMENT


©  ISO/IEC 2008
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means,
electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or
ISO's member body in the country of the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail [e-mail]
Web www.iso.org
Published in Switzerland

ii © ISO/IEC 2008 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 7816-15:2004/Amd.2:2008(E)
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are members of
ISO or IEC participate in the development of International Standards through technical committees
established by the respective organization to deal with particular fields of technical activity. ISO and IEC
technical committees collaborate in fields of mutual interest. Other international organizations, governmental
and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information
technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1.
International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2.
The main task of the joint technical committee is to prepare International Standards. Draft International
Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as
an International Standard requires approval by at least 75 % of the national bodies casting a vote.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights.
Amendment 2 to ISO/IEC 7816-15:2004 was prepared by Joint Technical Committee ISO/IEC JTC 1,
Information technology, Subcommittee SC 17, Cards and personal identification.
© ISO/IEC 2008 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO/IEC 7816-15:2004/Amd.2:2008(E)
Identification cards — Integrated circuit cards —
Part 15:
Cryptographic information application
AMENDMENT 2: Error corrections and extensions for
multi-application environments
Page 9, 7.3, Figure 3
Replace the existing figure with the following:

MF
EF.DIR
DF.CIA
EF.CIAInfo
EF.OD EF.DCOD
EF.AOD EF.PrKD EF.CD EF.PuKD EF.SKD

NOTE 1 For the purpose of this part of ISO/IEC 7816, EF.DIR is needed on cards that do not support application selection
using AID as DF name as defined in ISO/IEC 7816-4 or when multiple CIAs reside on a single card.
NOTE 2 Square element files are mandatory for this part of ISO/IEC 7816 (see Table 1). MF may not be seen at the
interface (see ISO/IEC 7816-4).
Figure 3 — Example contents of DF.CIA
Page 9, 7.4
Replace the first sentence with the following:
This file (file identifier: ’2F00’) shall, if present, contain one or several application templates as defined in
ISO/IEC 7816-4.
Page 10, 7.4
Add following paragraph at the end of the subclause:
If within the application template for a CIA one or more nested application templates (tag '61') are present,
they may contain the application identifier (tag '4F'). Each application template corresponds to an application
to which this CIA applies.
© ISO/IEC 2008 – All rights reserved 1

---------------------- Page: 4 ----------------------
ISO/IEC 7816-15:2004/Amd.2:2008(E)
Page 10, 7.5.2
Replace the second list item with the following:
⎯ card characteristics (e.g. read only).
Page 13, 8.2.4
Replace the existing text of KeyIdentifiers with the following:
KeyIdentifiers KEY-IDENTIFIER ::= {
issuerAndSerialNumber  |
issuerAndSerialNumberHash |
subjectKeyId   |
subjectKeyHash   |
issuerKeyHash   |
issuerNameHash   |
subjectNameHash   |
pgp2KeyId    |
openPGPKeyId   |
certificateHolderReference,
...
}

Page 14, 8.2.4
Add the following list item at the end of the suclause:
⎯ certificateHolderReference: An OCTET STRING that denotes the holder of an ISO/IEC 7816-8 card
verifiable certificate and that is used as subject key identifier to reference the public key of the certificate
holder.
Page 14, 8.2.5
Replace the existing text of Path with the following:
Path ::= SEQUENCE {
efidOrTagChoice CHOICE {
efidOrPath OCTET STRING,
tagRef [0] SEQUENCE {
tag OCTET STRING,
efidOrPath OCTET STRING OPTIONAL
  },
appFileRef [1] SEQUENCE {
 aid [APPLICATION 15] OCTET STRING,
 efidOrpath OCTET STRING
},
appTagRef [2] SEQUENCE {
 aid [APPLICATION 15] OCTET STRING,
 tag OCTET STRING,
 efidOrPath OCTET STRING OPTIONAL
}
 },
index INTEGER (0 . cia-ub-index) OPTIONAL,
length [0] INTEGER (0 . cia-ub-index) OPTIONAL
} ( WITH COMPONENTS {., index PRESENT, length PRESENT}|
WITH COMPONENTS {., index ABSENT, length ABSENT} )

2 © ISO/IEC 2008 – All rights reserved

---------------------- Page: 5 ----------------------
ISO/IEC 7816-15:2004/Amd.2:2008(E)
Page 15, 8.2.5
Add the following at the end of the second paragraph, which is explaining path.
aid and tag are used for referencing from CIA of logical data structures located in application context.
Page 15, 8.2.5
Replace the last sentence of the last paragraph with the following:
In the urlWithDigest case, assuming that the CIO card is protected against unauthorized data modifications,
the digest component will protect the externally protected object against unauthorized modifications too.
Page 16, 8.2.8
Replace the existing definition o
...