SIST EN 726-2:1998

• Abstract:

  This part of EN 726 specifies a security framework for telecommunication use of IC cards. This specification does not describe any implementation details. It describes: - a general security approach resulting in a methodology, different card phases for identifying security requirements and a description of security services which can be offered by the IC card.

• Status: Published
• Publication Date: 31-May-1998
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: BFS - Banking and related financial services
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 01-Jun-1998
• Due Date: 01-Jun-1998
• Completion Date: 01-Jun-1998
• Ref Project: EN 726-2:1995 - Identification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 2: Security framework

• Referred By: SIST EN 726-7:2004 - Identification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 7: Security module
• Effective Date: 28-Jan-2026
• Referred By: SIST EN 726-5:2004 - Identification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 5: Payment methods
• Effective Date: 28-Jan-2026

Overview

SIST EN 726-2:1998, titled Identification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 2: Security framework, defines the security framework for the use of integrated circuit (IC) cards in telecommunications. Developed by the Slovenski inštitut za standardizacijo (SIST), this European standard outlines the security methodology and key considerations for safeguarding identification card systems, with a specific focus on telecommunications applications. The framework is designed to address security challenges without prescribing implementation details.

Key Topics

This standard is centered around several essential security concepts for telecommunications IC card systems:

• General Security Methodology: Presents a broad approach for identifying and addressing risks related to IC cards in telecom environments.
• Security Phases of Cards: Describes different operational phases of the IC card lifecycle, each necessitating specific security requirements.
• Security Services: Introduces a range of security services that can be supported by telecommunications IC cards and their terminals.

These topics collectively contribute to a robust system for protecting sensitive information and ensuring secure interactions between cards and terminals.

Applications

SIST EN 726-2:1998 is highly relevant in areas where secure identification and data protection are required, including:

• Telecommunications Networks: Ensures that subscriber identity modules (SIM cards) and similar IC cards used in mobile networks are managed within a trusted security framework.
• Access Control: Provides foundations for the protection of user authentication and secure access to telecom services.
• Secure Transactions: Supports safe execution and management of telecommunication services that depend on reliable card-based security.
• Development and Assessment: Assists engineers, developers, and security professionals in designing, evaluating, or auditing IC card systems to check for compliance with standardized security methodologies.

Organizations deploying identification card systems can use this standard to align their security strategies with recognized European requirements, improving both user trust and regulatory compliance.

Related Standards

To fully implement or complement the guidance of SIST EN 726-2:1998, consider the following related standards:

• EN 726 Series: Covers further aspects of identification card systems and telecommunication IC cards, ensuring broader interoperability and protection.
• ISO/IEC 7816: Specifies international standards for integrated circuit cards, providing foundational requirements for card structure and command sets.
• ISO/IEC 9798: Details entity authentication mechanisms, often essential for secure identification card processes.
• ISO/IEC 27001: Offers best practices for information security management systems, supporting overall security planning.

By applying the security framework described in SIST EN 726-2:1998 along with related standards, organizations can ensure a comprehensive, consistent, and future-proof approach to the security of identification card systems in telecommunications. This enhances operational reliability, protects sensitive data, and supports the seamless integration of secure IC card technology across diverse telecom environments.

2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.Identification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 2: Security frameworkIdentifikationskartensysteme - Chipkarten und Endgeräte für Telekommunikationszwecke - Teil 2: SicherheitsgrundgerüstSystemes de cartes d'identification - Cartes a circuit intégré et terminaux pour les télécommunications - Partie 2: Cadre général pour la sécuritéIdentification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 2: Security framework35.240.15Identifikacijske kartice in sorodne napraveIdentification cards and related devicesICS:Ta slovenski standard je istoveten z:EN 726-2:1995SIST EN 726-2:1998en01-junij-1998SIST EN 726-2:1998SLOVENSKI
STANDARD
SIST EN 726-2
...