SIST-TS CEN/TS 15480-1:2013
(Main)Identification card systems - European Citizen Card - Part 1: Physical, electrical and transport protocol characteristics
Identification card systems - European Citizen Card - Part 1: Physical, electrical and transport protocol characteristics
This Technical Specification specifies Electronic Citizen Card (ECC) requirements. The requirements described in this Technical Specification are used to: 1) define a plastic body card with associated physical and logical securities; 2) specify the electrical interface and data transport protocols for the ECC; 3) support the basic set of Identification and, authentication elements visible at the card surface; 4) provide guidance for the specification of the ECC Durability. In addition to the above requirements, informative Annex A in this document recommends different Physical Layouts for the ECC for two scenarios: - when the ECC is issued to act as a travelling document; - when the ECC is not issued to act as a travelling document.
Identifikationskartensysteme - Europäische Bürgerkarte - Teil 1: Physikalische, elektrische und transportprotokollbezogene Merkmale
Systèmes de cartes d'identification - Carte européenne du citoyen - Partie 1 : Caractéristiques physiques, électriques et des protocoles de transmission
Sistemi z identifikacijskimi karticami - Kartica evropskih državljanov - 1. del: Fizične, električne in transportne značilnosti protokola
Ta tehnična specifikacija določa zahteve v zvezi s kartico evropskih državljanov (ECC). Zahteve iz te tehnične specifikacije se uporabljajo za: 1) opredelitev plastične kartice s povezanimi fizičnimi in logičnimi varnostnimi funkcijami, 2) opredelitev električnega vmesnika in protokolov za prenos podatkov za kartico evropskih državljanov, 3) podporo osnovnega sklopa elementov identifikacije in preverjanja pristnosti elementov, vidnih na površini kartice, 4) pripravo navodil za specifikacijo trajnosti kartice evropskih državljanov. Informativni dodatek A v tem dokumentu poleg zgornjih zahtev v dveh primerih priporoča drugačen fizičen videz kartice evropskih državljanov: – kadar se kartica evropskih državljanov izda, da bi se uporabljala kot potovalni dokument, – kadar se kartica evropskih državljanov ne izda, da bi se uporabljala kot potovalni dokument.
General Information
Relations
Standards Content (Sample)
SLOVENSKI STANDARD
SIST-TS CEN/TS 15480-1:2013
01-januar-2013
1DGRPHãþD
SIST-TS CEN/TS 15480-1:2009
6LVWHPL]LGHQWLILNDFLMVNLPLNDUWLFDPL.DUWLFDHYURSVNLKGUåDYOMDQRYGHO
)L]LþQHHOHNWULþQHLQWUDQVSRUWQH]QDþLOQRVWLSURWRNROD
Identification card systems - European Citizen Card - Part 1: Physical, electrical and
transport protocol characteristics
Identifikationskartensysteme - Europäische Bürgerkarte - Teil 1: Physikalische,
elektrische und transportprotokollbezogene Merkmale
Systèmes de cartes d'identification - Carte européenne du citoyen - Partie 1 :
Caractéristiques physiques, électriques et des protocoles de transmission
Ta slovenski standard je istoveten z: CEN/TS 15480-1:2012
ICS:
35.240.15 Identifikacijske kartice in Identification cards and
sorodne naprave related devices
SIST-TS CEN/TS 15480-1:2013 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
---------------------- Page: 1 ----------------------
SIST-TS CEN/TS 15480-1:2013
---------------------- Page: 2 ----------------------
SIST-TS CEN/TS 15480-1:2013
TECHNICAL SPECIFICATION
CEN/TS 15480-1
SPÉCIFICATION TECHNIQUE
TECHNISCHE SPEZIFIKATION
October 2012
ICS 35.240.15 Supersedes CEN/TS 15480-1:2007
English Version
Identification card systems - European Citizen Card - Part 1:
Physical, electrical and transport protocol characteristics
Systèmes de cartes d'identification - Carte Européenne du Identifikationskartensysteme - Europäische Bürgerkarte -
Citoyen - Partie 1: Caractéristiques physiques, électriques Teil 1: Physikalische, elektrische und
et des protocoles de transmission transportprotokollbezogene Merkmale
This Technical Specification (CEN/TS) was approved by CEN on 18 June 2012 for provisional application.
The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their
comments, particularly on the question whether the CEN/TS can be converted into a European Standard.
CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available
promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS)
until the final decision about the possible conversion of the CEN/TS into an EN is reached.
CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION
EUROPÄISCHES KOMITEE FÜR NORMUNG
Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2012 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TS 15480-1:2012: E
worldwide for CEN national Members.
---------------------- Page: 3 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
Contents Page
Foreword .3
Introduction .4
1 Scope .5
2 Normative references .5
3 Terms and definitions .5
4 Symbols and abbreviations .8
5 ECC requirements for citizen identification using physical means .8
6 ECC physical characteristics .9
6.1 General .9
6.2 Materials . 10
6.3 ECC physical security elements . 10
6.3.1 General . 10
6.3.2 Security levels . 11
6.3.3 Security elements . 11
6.3.4 Background and text printing . 11
6.3.5 Ink and other imaging media . 12
6.4 Durability . 12
7 Electrical characteristics . 12
7.1 Dimensions and location of the contacts or coupling area . 12
7.2 The contact interface . 12
7.3 Contactless interface . 12
8 Transport protocols . 13
9 Terminal characteristics . 13
Annex A (informative) Recommendations for the layout of the ECC . 14
A.1 Introduction . 14
A.2 ICAO 9303-3-based layout with contacts . 14
A.2.1 Document zones and information related . 14
A.2.2 Card size and printing margins . 15
A.2.3 Location of the contact module in the card . 15
A.2.4 Portrait side . 15
A.2.5 Non-portrait side . 18
A.2.6 Security Features for both portrait and non-portrait side . 19
A.3 ICAO 9303-3-based contactless layout . 20
A.4 Enhancements for the ECC layout . 21
A.4.1 General . 21
A.4.2 Zone I enhancements . 21
A.4.3 Zone II enhancements . 21
A.4.4 Zone IV enhancements . 21
A.4.5 Zone VII enhancements . 21
A.4.6 Optional elements . 21
A.4.7 Printing margins . 22
Bibliography . 23
2
---------------------- Page: 4 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
Foreword
This document (CEN/TS 15480-1:2012) has been prepared by Technical Committee CEN/TC 224 “Personal
identification, electronic signature and cards and their related systems and operations”, the secretariat of
which is held by AFNOR.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This document supersedes CEN/TS 15480-1:2007.
Compared with the previous version, the following changes have been made:
Framework information, which was mainly included in the former Clause 5, has been moved to Part 5.
Re-drafting to include the existence of contactless or dual (i.e. contact and contactless) technology in a
European Citizen Card (in the previous version only contact-based ICCs were considered).
The ECC security evaluation has been removed as it is considered outside the scope of this part.
Annex A has been changed completely in order to allow different formats which are not necessarily
related to the European driving licence defined in Directive 96/47/EC. The new version of this annex
defines layouts to consider using contacts, or having exclusively a contactless interface. In all these
formats, a high level of compatibility with ICAO 9303 has been the aim.
Annex B concerning durability testing has been removed from the standard; instead only some reference
information is provided in 6.4.
Annex C has been removed as it was not considered physical information and therefore outside the
scope of this standard.
CEN/TS 15480 Identification card systems — European Citizen Card consist of the two following parts:
Part 1: Physical, electrical and transport protocol characteristics
Part 2: Logical data structures and card services
Part 3: ECC interoperability using an application interface
Part 4: Recommendations for ECC issuance, operation and use
Part 5: General Introduction
According to the CEN/CENELEC Internal Regulations, the national standards organisations of the following
countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria, Croatia, Cyprus,
Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany,
Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland,
Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom.
3
---------------------- Page: 5 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
Introduction
This Technical Specification describes a set of requirements covering the physical, electrical and transport
protocol characteristics of the European Citizen Card. Part of these requirements come from ISO/IEC JTC 1
SC 17 published standards and ICAO specifications, in order to maximise the ECC interoperability and
acceptance for the OSI layers addressed by this specification.
This Technical Specification is intended to offer the card issuer with a great deal of flexibility for the ECC
specification, in connection with services that the ECC provides, the authentication mechanisms supported
and the national specific public policy with a special concern to protect the citizen privacy according to the
applicable European legislation.
The relationships between this document and the other parts of the ECC specification can be found in ECC
part 5.
The reader is warned that the ECC Durability methodology available in the original version of this Technical
Specification has been replaced by a reference to the ISO/IEC 24789-1 and ISO/IEC 24789-2 standards.
4
---------------------- Page: 6 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
1 Scope
This Technical Specification specifies Electronic Citizen Card (ECC) requirements.
The requirements described in this Technical Specification are used to:
1) define a plastic body card with associated physical and logical securities;
2) specify the electrical interface and data transport protocols for the ECC;
3) support the basic set of Identification and, authentication elements visible at the card surface;
4) provide guidance for the specification of the ECC Durability.
In addition to the above requirements, informative Annex A in this document recommends different Physical
Layouts for the ECC for two scenarios:
when the ECC is issued to act as a travelling document;
when the ECC is not issued to act as a travelling document.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated references,
the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 7810, Identification cards — Physical characteristics
ISO/IEC 7816-1, Identification cards — Integrated circuit(s) card(s) with contacts — Part 1: Physical
characteristics
ISO/IEC 7816-2, Identification cards — Integrated circuit(s) cards with contacts — Part 2: Cards with contacts
— Dimensions and location of the contacts
ISO/IEC 7816-3, Information technology — Identification cards — Integrated circuit(s) cards with contacts —
Part 3: Electronic signals and transmission protocols
ISO/IEC 7816-12, Identification cards — Integrated circuit cards — Part 12: Cards with contact — USB
electrical interface and operating
ISO/IEC 14443 (all parts), Identification cards — Contactless integrated circuit(s) cards — Proximity cards
Supplement to ICAO Doc 9303 - Release 10,
http://www2.icao.int/en/MRTD/Downloads/Supplements%20to%20Doc%209303/Supplement%20to%20ICAO
%20Doc%209303%20-%20Release_10.pdf
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
5
---------------------- Page: 7 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
3.1
alteration
fraudulent action of changing a part of an original document, e.g. by changing the biographical data of the
document holder
3.2
authentication
provision of assurance of the claimed identity of an entity (see ISO/IEC 10181-2:1996)
3.3
card holder
legal holder of the ECC
3.4
card issuing authority
entity that issues the ECC
3.5
Certification Authority (CA)
means an entity or a legal or natural person who issues certificates or provides other services related to
electronic signatures (see Directive 1999/93/EC)
3.6
counterfeiting
unauthorised document that has the same security characteristics as the original document and that cannot
be distinguished from a legitimate one
Note 1 to entry: For instance a card made from a blank stolen document.
3.7
credentials
known data attesting to the truth of certain citizen identity attributes and stored in the ECC
3.8
electronic certificate
means an electronic attestation which links signature-verification data to a person and confirms the identity of
that person (see Directive 1999/93/EC)
3.9
fingerprint minutia(e)
characteristics of digital fingerprint ridges (start, end, ridge bifurcation), each of which is represented by a
mathematical point and an angle defining a position and a direction
Note 1 to entry: Minutiae are represented by a dot map used to single out digital fingerprints and people.
3.10
falsification
refer to alteration and simulation
3.11
fixed administrative information
general information on an identity document in a predefined, precise order, pre-printed or otherwise,
constituting the structure for all personal information contained in the said document
3.12
identification
process necessary to recognise the identity of the cardholder
6
---------------------- Page: 8 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
3.13
interoperability
property enabling heterogeneous equipment concerned by electronic exchanges, to inter-communicate in
compliance with standards
Note 1 to entry: These standards specify the following common characteristics:
electrical and mechanical interfaces;
structure and coding of exchanged messages;
data identifiers;
commands structure and coding for data processing.
3.14
machine readable zone (MRZ)
three lines of OCR-B characters on the back of a ID1 card that may be read by a machine (see ICAO 9303)
3.15
microcontroller
electronic component integrating the different physical elements of a card (CPU, ROM, RAM, EEPROM and
possibly a cryptoprocessor etc.)
3.16
micromodule
electronic part of the ECC including the integrated circuit and components required to connect to the outside
world
Note 1 to entry: There are several micromodule types. The main types are:
contact micromodule: this type of micromodule is designed to communicate using embedded mechanical
characteristics in compliance with the rules of ISO/IEC 7816;
contactless micromodule: this type of micromodule is designed to allow the card to only communicate using radio
frequencies whose characteristics are defined in ISO/IEC 14443;
mixed micromodule: this type of micromodule is designed to allow the card to communicate in both contact and
contact-less modes via a radio frequency link, whose characteristics are defined in ISO/IEC 14443, with the reader.
Cards with this type of micromodule are called “combination cards” or “dual interface cards”.
3.17
optical variable feature
image or device whose colour and/or design changes depending on the angle of vision or the amount of light
used
3.18
private key
key of an entity’s asymmetric key pair which should only be used by that entity (see ISO/IEC 11770-1:1996)
3.19
public key
key of an entity’s asymmetric key pair which can be made public (see ISO/IEC 11770-1:1996)
3.20
remote procedure
paperless exchange of administrative processes between public authorities (ministers, public bodies etc.) and
their partners and citizens
7
---------------------- Page: 9 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
Note 1 to entry: The main stages are:
request for access to an on-line procedure;
loading of an on-line procedure;
loading of procedure-related data;
filling up of document on screen;
signature and transfer of procedure-related data.
3.21
remote transmission
transmission via a paperless data network of non-secure and secure data (encoding and/or electronic
signature)
3.22
simulation
unauthorised document that simulates the original document in term of overall aspect and in terms of security
characteristics but without having the original ones
3.23
variable information
personal information on an identity document, summarising data linked to the document holder
3.24
visual inspection
inspection in which an agent responsible for this procedure inspects the document and information
specifications without instrumentation
Note 1 to entry: If the agent uses a device to inspect all or part of a document's characteristics, this inspection is
considered to be automatic.
4 Symbols and abbreviations
ECC European Citizen Card
ICAO International Civil Aviation Organization
ISO International Organization for Standardization
MRZ Machine Readable Zone
OVF Optical Variable Feature
UV Ultra Violet
5 ECC requirements for citizen identification using physical means
The ECC may be issued to identify the citizen using electronic and physical means or by electronic means
only.
The ECC shall serve to verify the identity of its holder by physical means when:
8
---------------------- Page: 10 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
1) The ECC body includes both issuer and cardholder personalised visual data. These visual data are
intended to avoid the ECC being used by a third party and to prevent this third party illegally using a
found or stolen ECC. In order for the ECC to protect its cardholder, these visual data are to be
consistent with logical identification & authentication information stored in the chip which is to be
accessed and processed using ECC-2 and ECC-3 mechanisms. In particular the following applies:
the information in the identity electronic certificate shall match the information printed on the
card;
the link between the “proof of identity” and its holder is confirmed by a microcontroller with
textual data, digital certificates and related key pairs, routines for execution of cryptographic
calculations and possibly execution of biometric based authentication;
the photograph and signature of the cardholder on the card body are mandatory.
NOTE Refer to Annex A for additional information for the position of visual information on the card body.
2) The ECC body is protected against different types of risk by incorporating security features as per
Clause 6. The card shall reflect sufficiently the outcome of the national global risk analysis
incorporating visual identification risks, natural or accidental risks, fraud or counterfeiting risks and
risks linked to the voluntary degradation of the protective covering and micromodule. In particular,
these physical security features:
shall avoid any text or graphics on the card surfaces from being modified for fraudulent or
improper use;
shall be designed for visual inspection by suitable technological means;
shall be designed for easy control only by visual inspection;
shall offer stringent security to match the level of the threat of fraud;
shall enable the owner to check the personal data printed on the card with the information
contained in the chip of the card.
6 ECC physical characteristics
6.1 General
The ECC shall be a personalised smart card with an ID-1 format as defined in ISO/IEC 7810 and a chip
compliant with ISO/IEC 7816 parts 1 and 2 (for an ECC using a contact interface) and/or a chip and interface
compliant with ISO/IEC 14443 (for an ECC using a contactless interface).
9
---------------------- Page: 11 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
The ECC shall integrate at least one IC chip, accessed either by means of a module compliant with
ISO/IEC 7816 parts 1 and 2 and/or by establishing a contactless communication channel compliant with
ISO/IEC 14443. If visual inspection is required then the ECC shall include:
a unique variable text specific to each ECC and appended to the “fixed administration information”
providing the holder’s name, status and other information;
a general informative text corresponding to the “fixed administrative information” (for guidance and
clarification see Annex A);
when requiring identity authentication, a black-and-white or colour photograph, signatures of the holder
and issuing authority (depending on the plastic personalisation technique in place), personalised using
the adapted processes to the card body material. This personalisation system also concerns the variable
information” indicated above, and shall be as such that any falsification (alteration and / or simulation)
shall be detectable in the initial or secondary examinations;
In case of the ECC being used as ICAO travel document, the card shall include MRZ following ICAO
recommendations 9303-3;
NOTE In case the ECC is not to be used as an ICAO eMRtd, the ECC card may have other machine readable data
like secure barcodes (pdf 417 , matrix …) or only 1 OCR MRZ line on the front or a CAN number on the front as
replacement, or in addition of the 3 MRZ lines specified as mandatory at the back side by ICAO.
the card shall include the physical security elements as per 6.3;
the front and back surfaces of the ECC body may be adapted to ECC usage for direct printing depending
on the applications, and environment;
the position of the data on the card may correspond to the example provided by the informative Annex A.
6.2 Materials
This Technical Specification does not mandate any particular card body material. However the materials
selected to manufacture the ECC shall:
Be compatible with printing procedures currently available in security printing technology.
Allow the use of contact or contact-less interfaces, depending on the kind of chips or chip packaging
used, and according to the functional requirements of this Technical Specification.
6.3 ECC physical security elements
6.3.1 General
As it will be explained in the following sub-clauses, the ECC shall provide those security elements and
mechanisms that will reduce the probability of fraud in its use. The following sub-clauses provide a set of
definitions and guidelines that should be used as a basic baseline, which can be enhanced by any other
security mechanism and elements that will be available in the future, as to adjust to the proper risk level
demanded by the issuing organisation.
If the ECC is intended to be used as a travel document, the basic baseline for the security elements and
mechanisms, shall be the specifications detailed in ICAO 9303-3.
10
---------------------- Page: 12 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
6.3.2 Security levels
The physical features are not dedicated to be cosmetic features. They should assume a certain level of
security. In fact, the security elements shall be classified in three categories:
level 1 (also defined as “overt”): all secure features that are seen at a glance with human eyes
(objectives: 10 s to get opinion from security officer);
level 2 (also defined as covert level): secure features that need either portable equipment specialist tool
to be used by non trained officer or specialist tool with in general ciphering and so computing (objectives:
to be used for instance on the road, at customs, or need special environment);
level 3 (also defined as “forensic feature”): only known by supplier and/or by the governmental
administration, permit (need special environment) to authenticate supplier and/or to check the authenticity
of the card and / or to follow the counterfeiting.
The ECC card shall at least include secure features of the level 1 and 2; some are described in this Technical
Specification (see 6.4). They represent a minimum set of required common physical requirements.
Moreover, it is highly recommended that the ECC card also includes secure features of level 3 and 4.
However since this Technical Specification recognises that member states might wish to introduce confidential
and/or security elements requiring specific devices, for these two levels 3 and 4, these confidential elements
are out of the scope of this Technical Specification.
6.3.3 Security elements
Any additional physical security elements that complement the minimum set of physical features, that may be
required under the discretion of member states, shall not compromise the interoperability, functional and
durability requirements of the ECC as defined in this present Technical Specification.
The ECC security elements should comply with the following requirements:
1) resistance to counterfeiting;
2) resistance to alteration;
3) resistance to simulation.
These security elements protect the ECC against physical attacks by:
making easily detectable any attempt to counterfeit, alter or simulate; and
deterring the possible attacker because of the economic cost associated to the attack.
All the security elements, that are easy to detect and allow systematic control (all features of level 1 and
level 2 and some of the level 3 depending of the features), shall be compatible with the test sequence of the
durability class associated to the card.
6.3.4 Background and text printing
The printing area should be compatible with adhesion and the durability objectives of the card issuer
according to ISO/IEC 7810 and/or tamper evident properties as well as the de-lamination requirements.
11
---------------------- Page: 13 ----------------------
SIST-TS CEN/TS 15480-1:2013
CEN/TS 15480-1:2012 (E)
As visual inspection is a requirement for the ECC, the ECC shall
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.