ISO 17442-2:2020
(Main)Financial services - Legal entity identifier (LEI) - Part 2: Application in digital certificates
Financial services - Legal entity identifier (LEI) - Part 2: Application in digital certificates
This document specifies a standardised way of embedding the legal entity identifier (LEI) code, as represented in ISO 17442-1, in digital certificates, represented by the International Telecommunications Union (ITU) Recommendation X.509 and its ISO equivalent standard, ISO/IEC 9594-8. This document specifies the structure of a public key certificate conforming with ISO/IEC 9594-8 in which the LEI is embedded.
Services financiers — Schéma d'identifiant d'entité légale (IEL) — Partie 2: Utilisation dans les certificats numériques
General Information
- Status
- Published
- Publication Date
- 17-Aug-2020
- Technical Committee
- ISO/TC 68/SC 8 - Reference data for financial services
- Drafting Committee
- ISO/TC 68/SC 8 - Reference data for financial services
- Current Stage
- 9060 - Close of review
- Completion Date
- 04-Mar-2031
Relations
- Effective Date
- 23-Apr-2020
Overview
ISO 17442-2:2020 is an international standard developed by the International Organization for Standardization (ISO) that specifies a standardized method to embed the Legal Entity Identifier (LEI) into digital certificates. The LEI, defined in ISO 17442-1, provides a unique and persistent identifier for legal entities engaged in financial transactions worldwide. This standard integrates LEI with the digital certificate framework based on ITU Recommendation X.509 and ISO/IEC 9594-8, enabling enhanced identity management for financial services and beyond.
By embedding the LEI into X.509 public key certificates, ISO 17442-2:2020 facilitates unique entity identification combined with authentication, improving trust and operational efficiency in electronic transactions.
Key Topics
- LEI Integration in Digital Certificates: Specifies the structure for embedding LEI codes within the extensions of X.509 digital certificates using Object Identifiers (OID).
- Object Identifier (OID) Usage: Defines OID
1.3.6.1.4.1.52266.1for embedding LEI and1.3.6.1.4.1.52266.2for optionally encoding roles of individuals within organizations. - Public Key Certificate Structure: Aligns with ISO/IEC 9594-8, ensuring compatibility with existing digital certificate frameworks used globally.
- Role-Based Identification: Supports inclusion of individual roles (e.g., CEO) associated with the LEI in the digital certificate to further enhance identity clarity.
- Mutual Benefits: Combines the uniqueness and persistence of LEIs with the authentication strength of digital certificates to improve identity validation and reduce reliance on repeated certificate revocation when entity data changes.
Applications
- Financial Services: Streamlines regulatory compliance, "know your customer" (KYC) procedures, and risk management by embedding verifiable LEI information in digital certificates.
- Secure Digital Identity Management: Enhances secure online business interactions, digital signing, and encrypted communication by providing both entity identity (via LEI) and owner authentication (via certificates).
- Certificate Lifecycle Efficiency: Reduces administrative overhead by separating entity reference data maintenance from the certificate renewal process, as LEI data updates do not require certificate revocation.
- Cross-Organization Authentication: Facilitates trusted interaction between entities by ensuring digital certificates reference a unique, universally recognized identifier, supporting straight-through processing (STP) in transactions.
- IT and Cybersecurity: Supports service providers and certificate authorities in creating standardized, interoperable digital certificates that include essential legal entity data with role information for identity verification.
Related Standards
- ISO 17442-1:2020 - Legal Entity Identifier (LEI) Assignment: Provides foundational guidelines for assigning LEIs to organizations.
- ISO/IEC 9594-8:2017 - Directory: Public-key and Attribute Certificate Frameworks: Defines the structure and protocols for X.509 public key certificates used in this standard.
- ITU Recommendation X.509: International framework for public key certificates used in securing digital identities.
- ISO/IEC 9834-1:2012 - Object Identifier Registration Procedures: Covers the administration of OIDs employed for encoding LEIs in certificates.
Summary
ISO 17442-2:2020 establishes a robust, interoperable method for embedding Legal Entity Identifiers in digital certificates, bridging persistent entity identification with cryptographic identity assurance. This integration fosters greater trust, efficiency, and security across financial and digital transactions worldwide. By leveraging this standard, organizations, certificate authorities, and technology providers can enhance digital identity management, reduce duplication and errors, and support a more streamlined and secure global financial ecosystem.
Keywords: ISO 17442-2, Legal Entity Identifier, LEI, digital certificates, X.509, ISO/IEC 9594-8, financial services, identity management, public key certificate, object identifier, digital identity, certificate extensions, authentication, KYC compliance, secure transactions.
Frequently Asked Questions
ISO 17442-2:2020 is a standard published by the International Organization for Standardization (ISO). Its full title is "Financial services - Legal entity identifier (LEI) - Part 2: Application in digital certificates". This standard covers: This document specifies a standardised way of embedding the legal entity identifier (LEI) code, as represented in ISO 17442-1, in digital certificates, represented by the International Telecommunications Union (ITU) Recommendation X.509 and its ISO equivalent standard, ISO/IEC 9594-8. This document specifies the structure of a public key certificate conforming with ISO/IEC 9594-8 in which the LEI is embedded.
This document specifies a standardised way of embedding the legal entity identifier (LEI) code, as represented in ISO 17442-1, in digital certificates, represented by the International Telecommunications Union (ITU) Recommendation X.509 and its ISO equivalent standard, ISO/IEC 9594-8. This document specifies the structure of a public key certificate conforming with ISO/IEC 9594-8 in which the LEI is embedded.
ISO 17442-2:2020 is classified under the following ICS (International Classification for Standards) categories: 03.060 - Finances. Banking. Monetary systems. Insurance. The ICS classification helps identify the subject area and facilitates finding related standards.
ISO 17442-2:2020 has the following relationships with other standards: It is inter standard links to ISO 17442:2019. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
You can purchase ISO 17442-2:2020 directly from iTeh Standards. The document is available in PDF format and is delivered instantly after payment. Add the standard to your cart and complete the secure checkout process. iTeh Standards is an authorized distributor of ISO standards.
Standards Content (Sample)
INTERNATIONAL ISO
STANDARD 17442-2
First edition
2020-08
Financial services — Legal entity
identifier (LEI) —
Part 2:
Application in digital certificates
Services financiers — Schéma d'identifiant d'entité légale (IEL) —
Partie 2: Utilisation dans les certificats numériques
Reference number
©
ISO 2020
© ISO 2020
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii © ISO 2020 – All rights reserved
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Structure of the X.509 public key certificate with embedded LEI .1
Annex A (informative) Example digital certificate with embedded LEI and role .3
Annex B (informative) Mutual benefits of combining LEIs and digital certificates for
identity management . 4
Bibliography . 5
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/ directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www .iso .org/ patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to the
World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www .iso .org/
iso/ foreword .html.
This document was prepared by Technical Committee ISO/TC 68, Financial services, Subcommittee SC
8, Reference data for financial services.
This first edition of ISO 17442-2, along with ISO 17442-1, cancels and replaces ISO 17442:2019, which
has been technically revised.
A list of all parts in the ISO 17442 series can be found on the ISO website.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www .iso .org/ members .html.
iv © ISO 2020 – All rights reserved
Introduction
Legal entity identification is an integrated and necessary component of financial transactions. Entering
into business relationships requires “know your customer” processes to be initiated and maintained for
the duration of these relationships and any longer-term data retention requirements to be addressed.
Parties involved in financial transactions need to be identified in the records of these transactions.
Then the risk for each party and the resulting concentration risk need to be measured. All of this needs
to be achieved while the support for straight through processing (STP) is maintained.
Both legal entity identifiers (LEIs) and digital certificates are established tools for identity management.
These tools can be of even greater benefit to users if they are combined so that they complement each
other, providing a new solution to standardized digital identity. Annex B outlines the mutual benefits of
this combination.
It is possible, for example, to display the LEI in a web browser address bar from the digital certificate or
retrieve information from the LEI data record using an application programming interface (API).
Furthermore, the public key certificate can be linked to the LEI and its associated data record.
INTERNATIONAL STANDARD ISO 17442-2:2020(E)
Financial services — Legal entity identifier (LEI) —
Part 2:
Application in digital certificates
1 Scope
This document specifies a standardised way of embedding the legal entity identifier (LEI) code, as
represented in ISO 17442-1, in digital certificates, represented by the International Telecommunications
Union (ITU) Recommendation X.509 and its ISO equivalent standard, ISO/IEC 9594-8.
This document specifies the structure of a public key certificate conforming with ISO/IEC 9594-8 in
which the LEI is embedded.
2 Normative references
There are no normative references in this document.
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at http
...
La norme ISO 17442-2:2020 se présente comme un document essentiel dans le domaine des services financiers, car elle établit une méthode normalisée pour l'incorporation de l'identifiant d'entité juridique (LEI) dans les certificats numériques. L'application de cette norme est particulièrement pertinente dans le cadre de la digitalisation croissante des transactions financières, où l'identification précise des entités est cruciale pour la transparence et la conformité réglementaire. L'un des points forts de la norme ISO 17442-2:2020 est sa capacité à définir une structure commune pour les certificats de clé publique, conforme à la norme ISO/IEC 9594-8. Cette harmonisation contribue non seulement à la sécurité et à l'intégrité des communications numériques, mais elle facilite également l'interopérabilité entre différents systèmes et plateformes. En intégrant le LEI dans ces certificats, la norme permet une identification claire et fiable des entités juridiques dans le cadre des transactions en ligne. De plus, la pertinence de cette norme ne peut être sous-estimée dans un contexte où la réglementation sur l'identification des contreparties financières devient de plus en plus stricte au niveau mondial. En offrant une approche normalisée pour le traitement des LEI dans les certificats numériques, ISO 17442-2:2020 renforce la confiance dans les systèmes financiers et soutient les efforts de conformité réglementaire, tels que ceux stipulés par des entités comme le G20 et le Comité de Bâle. En conclusion, la norme ISO 17442-2:2020 représente un avancement significatif dans le secteur des services financiers, apportant des solutions concrètes à des exigences de conformité de plus en plus présentes. Son application dans les certificats numériques est un atout majeur pour les institutions financières cherchant à moderniser leurs opérations tout en respectant les normes internationales.
Die ISO 17442-2:2020 ist ein bedeutendes Dokument im Bereich der Finanzdienstleistungen, das den rechtlichen Identifikationscode (LEI) in digitalen Zertifikaten standardisiert. Dieses Dokument bietet eine klare und präzise Anleitung zur Integration des LEI-Codes, wie er in der ISO 17442-1 definiert ist, in digitale Zertifikate, die durch die Empfehlungen der Internationalen Fernmeldeunion (ITU) und das ISO-Äquivalent ISO/IEC 9594-8 geregelt sind. Der Umfang der ISO 17442-2:2020 gewährleistet, dass die Struktur von öffentlichen Schlüsseln, wie sie in der ISO/IEC 9594-8 festgelegt sind, vollständig den Anforderungen der Einbettung des LEI entspricht. Diese Standardisierung ist von zentraler Bedeutung, da sie Klarheit und Konsistenz in der Verwendung von LEIs in digitalen Zertifikaten bietet, was für die Identifizierung und Nachverfolgbarkeit von rechtlichen Einheiten entscheidend ist. Eine der Stärken der ISO 17442-2:2020 liegt in ihrer Fähigkeit, die Interoperabilität zwischen verschiedenen Systemen und Anwendungen zu fördern. Durch die Bereitstellung eines standardisierten Formats wird sichergestellt, dass der LEI in digitalen Zertifikaten weltweit konsistent und zuverlässig verwendet werden kann. Dies reduziert Unsicherheiten und erhöht die Effizienz in transnationalen Finanztransaktionen und anderen Anwendungen, die auf rechtlichen Identitäten basieren. Darüber hinaus trägt die Norm zur allgemeinen Sicherheit in der digitalen Kommunikation bei, indem sie eine robuste Methode zur Einbettung des LEI bietet. Da das Vertrauen in digitale Zertifikate für die Authentifizierung und Identifizierung von entscheidender Bedeutung ist, stärkt die ISO 17442-2:2020 die Glaubwürdigkeit dieser Mechanismen, indem sie eine klare und überprüfbare Verbindung zwischen der Identität einer juristischen Person und ihren digitalen Repräsentationen herstellt. Insgesamt ist die ISO 17442-2:2020 nicht nur ein technischer Standard, sondern auch ein wichtiges Instrument zur Verbesserung der Transparenz und des Vertrauens im Bereich der Finanzdienstleistungen, insbesondere in einem zunehmend digitalen Umfeld. Ihre Relevanz wird durch die stetig wachsende Bedeutung von digitalen Identitäten und der Notwendigkeit einer klaren rechtlichen Identifikation unterstrichen.
ISO 17442-2:2020 표준은 법인 식별자(LEI)를 디지털 인증서에 통합하는 절차를 규정하고 있습니다. 이 문서는 ISO 17442-1에서 정의된 LEI 코드를 국제전기통신연합(ITU)의 권고안 X.509 및 ISO/IEC 9594-8의 구조에 따라 디지털 인증서에 표준화된 방식으로 포함하는 방법을 제시합니다. 이 표준의 주요 강점은 LEI의 통합이 디지털 인증서의 보안성을 높이며, 법적 식별이 필요한 금융 업무 및 거래의 신뢰성을 공고히 한다는 점입니다. ISO 17442-2:2020은 LEI가 포함된 공개 키 인증서의 구조에 대한 명확한 지침을 제공하여 일관된 관리 및 사용을 촉진합니다. 이는 금융 서비스 업계에서 법적 책임을 명확히 하고, 더 나아가 국제적으로 통합된 금융 시스템의 일부로서 LEI의 중요성을 강조합니다. 또한 이 표준은 다양한 금융 기관과 기업들이 디지털 인증서의 활용에 있어 공통의 기준을 갖추게 함으로써, 신뢰성 있는 데이터 상호작용을 가능하게 합니다. ISO 17442-2:2020은 법인 식별자의 사용을 디지털 환경에서도 유효하게 지원하고, 이에 따른 인증 절차에서 발생할 수 있는 문제를 최소화하는 데 기여할 것으로 기대됩니다. 결론적으로, ISO 17442-2:2020 표준은 LEI를 디지털 인증서에 통합하는 데 있어 필수적인 가이드라인을 제공하며, 특히 금융 서비스 분야에서의 효율성과 안전성을 강화하는 데 매우 중요한 역할을 합니다.
ISO 17442-2:2020は、金融サービスにおける法的実体識別子（LEI）のデジタル証明書への適用に関する重要な標準である。この文書は、ISO 17442-1で表現されたLEIコードを国際電気通信連合(ITU)の推奨するX.509及びそのISO等価標準であるISO/IEC 9594-8に準拠したデジタル証明書に埋め込むための標準化された方法を定義している。 この標準の強みは、LEIがデジタル証明書に統一的に組み込まれることにより、取引の透明性と信頼性が向上する点にある。特に、金融業界において、LEIが正確かつ一貫した方法で取り扱われることは、リスク管理や規制報告において極めて重要であり、ISO 17442-2:2020が提供する構造はこれを支える。 また、ISO 17442-2:2020は、ISO/IEC 9594-8に準拠した公開鍵証明書の構造を詳細に規定しており、デジタル証明書の発行機関にとっての指針となる。この標準は、異なるシステム間での相互運用性を促進し、多様な金融サービスデジタルエコシステムにおける一貫性を提供するための基盤を形成する。 さらに、デジタル証明書におけるLEIの埋め込みは、法的実体を確立・識別するための基本的な手段であり、グローバルな金融取引における規制遵守を実現する上でも不可欠なものとなっている。このため、ISO 17442-2:2020は現代のデジタル金融環境において極めて関連性が高く、業界のニーズに応えるための重要な指針といえる。
The ISO 17442-2:2020 standard offers a crucial framework for incorporating the legal entity identifier (LEI) into digital certificates, thereby enhancing the interoperability and reliability of financial services. Its primary focus on the embedding of the LEI code as delineated in ISO 17442-1 establishes a standardised approach necessary for the secure identification of legal entities. One of the key strengths of ISO 17442-2:2020 lies in its alignment with the International Telecommunications Union (ITU) Recommendation X.509 and the ISO/IEC 9594-8 standard. This harmonisation ensures that the public key certificates developed under this specification not only meet cybersecurity requirements but also facilitate consistent application across various platforms and industries, fostering trust in digital communications. The relevance of this standard is especially pronounced in today’s digital economy, where the demand for accurate and standardized identification of legal entities is paramount. By specifying the structure of a public key certificate that integrates the LEI, ISO 17442-2:2020 addresses critical needs in the realm of transparency and traceability in financial transactions, serving as a pivotal resource for institutions looking to enhance their compliance and operational efficiency. Moreover, this standard serves as a foundational component for achieving a cohesive ecosystem where financial services are governed by a consistent and reliable identification framework. The delineation of procedures and structures within the document ensures that organizations can effectively implement robust cybersecurity measures, supporting the integrity of financial networks. In summary, the ISO 17442-2:2020 standard not only sets a benchmark for embedding LEIs in digital certificates but also plays a vital role in advancing the security and reliability of the financial services sector in an increasingly interconnected digital landscape.
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...