ISO/IEC JTC 1/SC 17 - Cards and security devices for personal identification

This document specifies security-related interindustry commands that are intended to be used for personal verification through biometric methods in integrated circuit cards. It also defines the data structure and data access methods for use of the card as a carrier of the biometric reference and/or as the device to perform the verification of the cardholder's biometric probe (on-card biometric comparison). Identification of persons using biometric methods is outside the scope of this document.

This document defines physical characteristics and test methods for cards with devices, including but not limited to, power supplying devices, displays, sensors, microphones, loudspeakers, buttons or keypads. This document also covers aspects of coexistence of technologies of devices on the card and other machine-readable card technologies. Additional requirements related to biometric capture devices are defined in ISO/IEC 17839-2. Such requirements can be applied in addition to the ones defined in this document. ISO/IEC 17839-2 defines a type S2 card; the physical dimensions of the type S2 card are specified in Annex A.

This document establishes interface specifications for the implementation of a driving licence in association with a mobile device. This document specifies the interface between the mDL and mDL reader and the interface between the mDL reader and the issuing authority infrastructure. This document also enables parties other than the issuing authority (e.g. other issuing authorities, or mDL verifiers in other countries) to: — use a machine to obtain the mDL data; — tie the mDL to the mDL holder; — authenticate the origin of the mDL data; — verify the integrity of the mDL data. The following items are out of scope for this document: — how mDL holder consent to share data is obtained; — requirements on storage of mDL data and mDL private keys.

This document defines the conformance test plan, based on ISO/IEC 10373-6, for the contactless interface of eMRTDs and eMRTD associated readers compliant with ICAO Doc 9303. Application requirements for eMRTD and eMRTD reader are outside of the scope of this document and are defined in ICAO Doc 9303-10.

This document summarizes how some of the main international standards and recommendations approach personal identification and its related information security, with regard to the integration of biometrics and integrated circuit cards (ICCs). It also provides examples of how biometrics and ICCs are integrated in applications.

This document specifies interindustry commands which can be used for security operations. This document also provides informative directives on how to construct security mechanisms with commands defined in ISO/IEC 7816‑4. The choice and conditions of use of cryptographic mechanism in security operations can affect card exportability. The evaluation of the suitability of algorithms and protocols is outside the scope of this document. It does not cover the internal implementation within the card and/or the outside world.

This document specifies the requirements for a protocol derived from HCI/HCP (see ETSI TS 102 622) enabling communication for devices regardless of data link and physical layers. This document covers the following: a) outline of a system comprised of one or more hosts and one controller; b) extension of connection topology between hosts and host controller (i.e. star topology and additional other topologies); c) segregation between existing system using ETSI TS102 613 and new system compliant to this document (this document refers ETSI TS 102 613, but does not change its specification and does not use RFU). For ETSI TS 102 622, data link layer and physical layer like SWP specified in ETSI TS 102 613 is out of the scope. Albeit questioned in this document, the duplication of OSI transport layer by e.g. enforcing encapsulation of HCP into T=1 or the reverse, is out of the scope.

This document lists all the test conditions to be performed on a PT reader or a PT object in order to ensure that all the requirements specified in ISO/IEC TS 24192-1 are met for the PT device under test. This document applies to PT devices only: — PT readers which are contactless fare management system terminals acting as a PCD contactless reader based on ISO/IEC 14443 (all parts); — PT objects which are contactless fare media acting as a PICC contactless object based on ISO/IEC 14443 (all parts). This document applies solely to the contactless communication layers described in ISO/IEC 14443 (all parts). Application-to-application exchanges executed once contactless communication has been established at RF level fall outside the scope of this document. However, a test application is used to make end-to-end transactions during tests on the RF communication layer. This document does not duplicate the contents of ISO/IEC 14443 (all parts) or ISO/IEC 10373‑6. It makes reference to the ISO/IEC 10373‑6 applicable test methods, specifies the test conditions to be used and describes the additional specific test conditions that can be run.

This document defines the technical requirements to be met by contactless public transport (PT) devices in order to be able to interface together using the ISO/IEC 14443 (all parts) contactless communications protocol. This document applies to PT devices: — PT readers which are contactless fare management system terminals acting as a PCD contactless reader based on ISO/IEC 14443 (all parts); — PT objects which are contactless fare media acting as a PICC contactless object based on ISO/IEC 14443 (all parts). This document addresses interoperability of consumer-market NFC mobile devices, compliant to NFC Forum specifications, with above mentioned PT devices, aligns with ISO/IEC 14443 (all parts) and does not seek to limit compliance for PT readers with EMV Contactless Interface Specification.

This document describes the test methods for characteristics of identification cards according to ISO/IEC 7810 and other standards, such as those listed in the Introduction. NOTE 1 Criteria for acceptability do not form part of this document but are found in other International Standards including those mentioned in the introduction. NOTE 2 Test methods described in this document are intended to be performed separately. A given card is not required to pass through all the tests sequentially.

This document specifies the characteristics of the fields to be provided for power and bi-directional communication between proximity coupling devices (PCDs) and proximity cards or objects (PICCs). This document does not specify the means of generating coupling fields, nor the means of compliance with electromagnetic radiation and human exposure regulations, which can vary depending on the country.

The ISO/IEC 10373 series defines test methods for characteristics of identification cards according to the definition given in ISO/IEC 7810. Each test method is cross‑referenced to one or more base standards, which can be ISO/IEC 7810 or one or more of the supplementary standards that define the information storage technologies employed in identification card applications. NOTE 1 Criteria for acceptability do not form part of the ISO/IEC 10373 series, but can be found in the International Standards mentioned above. This document defines test methods which are specific to proximity cards and objects, proximity coupling devices and proximity extended devices, defined in ISO/IEC 14443‑1, ISO/IEC 14443‑2, ISO/IEC 14443‑3 and ISO/IEC 14443‑4. NOTE 2 Test methods defined in this document are intended to be performed separately. A given proximity card or object, proximity coupling device or proximity extended device, is not required to pass through all the tests sequentially. ISO/IEC 10373‑1 defines test methods which are common to one or more integrated circuit card technologies and other parts in the ISO/IEC 10373 series deal with other technology‑specific tests. The conformance test plan defined in Annex O specifies the list of tests applicable for each part of the ISO/IEC 14443 series.

The purpose of storing IDL data on machine-readable media on the IDL is to: — increase productivity (of data and IDL use), — facilitate electronic data exchange, and — assist in authenticity and integrity validation. This document thus specifies the following: — mandatory and optional machine-readable data; — the logical data structure; — encoding rules for the machine-readable technologies currently supported. To prevent unauthorised access to the data contained on a contactless IC (e.g. by eavesdropping), the privacy of the licence holder is protected via basic access protection requiring a human-readable and/or machine-readable key/password on the IDL to access the data on the PIC (via protected-channel communication). The implementation details of this function are defined in ISO/IEC 18013-3.

This document is intended to be used in any sector of activity. It specifies: — contents of command-response pairs exchanged at the interface, — means of retrieval of data elements and data objects in the card, — structures and contents of historical bytes to describe operating characteristics of the card, — structures for applications and data in the card, as seen at the interface when processing commands, — access methods to files and data in the card, — a security architecture defining access rights to files and data in the card, — means and mechanisms for identifying and addressing applications in the card, — methods for secure messaging, — access methods to the algorithms processed by the card. It does not describe these algorithms. It does not cover the internal implementation within the card or the outside world. This document is independent from the physical interface technology. It applies to cards accessed by one or more of the following methods: contacts, close coupling and radio frequency. If the card supports simultaneous use of more than one physical interface, the relationship between what happens on different physical interfaces is out of the scope of this document.

This document describes the characteristics for identification cards and the use of such cards for international interchange. This document specifies the physical characteristics of identification cards including card materials, construction, characteristics and dimensions for four sizes of cards. ISO/IEC 10373‑1 and ISO/IEC 24789‑2 specify the test procedures used to check cards against the parameters specified in this document. This document specifies the requirements for cards and card interface devices used for identification. It takes into consideration both human and machine aspects and states minimum requirements. It is the purpose of this document to provide criteria for the performance of cards. No consideration is given within this document to the amount of use, if any, experienced by the card prior to test. NOTE 1 Numeric values in the SI and/or Imperial measurement system in this document have been rounded off and therefore are consistent with, but not exactly equal to, each other. Either system can be used, but intermixing or reconverting the two can result in errors. The original design was made using the Imperial measurement system. NOTE 2 Thin flexible cards are not within the scope of this document (see the ISO/IEC 15457 series).

This document describes the test methods used for conformity testing, that is methods for determining whether a driving licence can be considered to comply with the requirements of the ISO/IEC 18013 series for: — machine readable technologies (ISO/IEC 18013-2), and — access control, authentication and integrity validation (ISO/IEC 18013-3). The test methods described in this document are based on specifications defined in ISO/IEC 18013-2 and ISO/IEC 18013-3 and underlying normative specifications. This document deals with test methods specific to IDL requirements. Test methods applicable to (smart) cards in general (e.g. those specified in the ISO/IEC 10373 series) are outside the scope of this document. Hence the purpose of this document is to: — provide IDL implementers with requirements for conformity evaluation, — provide IDL issuing authorities with requirements for quality assurance, and — provide test laboratories and test tool providers with test suite requirements.

The ISO/IEC 10373 series defines test methods for characteristics of identification cards according to the definition given in ISO/IEC 7810. Each test method is cross‑referenced to one or more base standards, which can be ISO/IEC 7810 or one or more of the supplementary standards that define the information storage technologies employed in identification card applications. NOTE 1 Criteria for acceptability do not form part of the ISO/IEC 10373 series, but can be found in the International Standards mentioned above. NOTE 2 Test methods defined in the ISO/IEC 10373 series are intended to be performed separately. A given card is not required to pass through all the tests sequentially. This document deals with test methods, which are specific to contactless integrated circuit card (vicinity card) technology. ISO/IEC 10373-1 deals with test methods which are common to one or more ICC technologies and other parts in the ISO/IEC 10373 series deal with other technology‑specific tests. Unless otherwise specified, the tests in this document apply exclusively to vicinity cards defined in ISO/IEC 15693‑1, ISO/IEC 15693-2 and ISO/IEC 15693-3.

This document specifies the nature and characteristics of the fields to be provided for power and bi-directional communications between vicinity coupling devices (VCDs) and vicinity cards (VICCs). This document is intended to be used in conjunction with other parts of the ISO/IEC 15693 series. This document does not preclude the incorporation of other standard technologies on the card as described in Annex A.

This document specifies: — protocols and commands; — other parameters required to initialize communications between a vicinity integrated circuit card and a vicinity coupling device; — methods to detect and communicate with one card among several cards ("anticollision"); — optional means to ease and speed up the selection of one among several cards based on application criteria. This document does not preclude the incorporation of other standard technologies on the card as described in Annex A.

This document establishes — architectures of biometric comparison using an ICC, — on-card biometric comparison, both in sensor-off-card systems and as part of biometric system-on-card, — work-sharing on-card biometric comparison, and — security policies for on-card biometric comparison. This document does not establish — requirements for off-card biometric comparison, — requirements for biometric system-on-card (as defined in ISO/IEC 17839), or — modality-specific requirements for storage and comparison.

This document defines test methods for characteristics of integrated circuit cards with contacts and related interface devices according to the definition given in ISO/IEC 7816-3. Each test method is cross‑referenced to one or more base standards, which can be ISO/IEC 7810 that defines the information storage technologies employed in identification card applications. NOTE Criteria for acceptability do not form part of this document but can be found in the International Standards mentioned above. This document defines test methods which are specific to integrated circuit technology with contacts. ISO/IEC 10373-1 defines test methods which are common to one or more card technologies and other parts of the ISO/IEC 10373 series define other technology‑specific tests. Test methods defined in this document are intended to be performed separately and independently. A given card is not required to pass through all the tests sequentially. The test methods defined in this document are based on ISO/IEC 7816-3. Conformance of cards and IFDs determined using the test methods defined in this document does not preclude failures in the field. Reliability testing is outside the scope of this document. This document does not define any test to establish the complete functioning of integrated circuit cards. The test methods require only that the minimum functionality be verified. The minimum functionality is defined as follows. — Any integrated circuit present in the card continues to show an Answer to Reset response which conforms to the base standard. — Any contacts associated with any integrated circuit present in the card continue to show electrical resistance which conforms to the base standard.

This document is one of a series of standards describing the characteristics for identification cards as defined in the definitions clause and the use of such cards for international interchange. This document specifies requirements for a high coercivity magnetic stripe (including any protective overlay) on an identification card and encoding technique. It takes into consideration both human and machine aspects and states minimum requirements. Coercivity influences many of the quantities specified in this document but is not itself specified. The main characteristic of the high coercivity magnetic stripe is its improved resistance to erasure. This is achieved with minimal probability of damage to other magnetic stripes by contact while retaining read compatibility with magnetic stripes as defined in ISO/IEC 7811-2. This document provides for a card capacity of approximately 10 times that of a card conforming to ISO/IEC 7811-6. The number of tracks has been increased to 6, each track being approximately half the width of tracks conforming to ISO/IEC 7811-6, located so that readers designed to read these high density tracks will also be able to read cards conforming to ISO/IEC 7811-2 and ISO/IEC 7811-6. Data is encoded in 8 bit bytes using the MFM encoding technique. Data framing is used to limit error propagation and error correction techniques further improve reliability of reading. It is the purpose of the ISO/IEC 7811 series of standards to provide criteria to which cards shall perform. No consideration is given within these standards to the amount of use, if any, experienced by the card prior to test. Failure to conform to specified criteria is negotiated between the involved parties. ISO/IEC 10373-2 specifies the test procedures used to check cards against the parameters specified in this document. NOTE Numeric values in the SI and/or Imperial measurement system in this document may have been rounded off and are consistent with, but not exactly equal to each other. Using either system is correct but intermixing or reconverting values can result in errors. The original design was made using the Imperial measurement system.

ISO/IEC 7811 defines the characteristics for identification cards as defined in Clause 4 of this document and the use of such cards for international interchange. This document specifies requirements for a low coercivity magnetic stripe (including any protective overlay) on an identification card, the encoding technique and coded character sets. It takes into consideration both human and machine aspects and states minimum requirements. Coercivity influences many of the quantities specified in this document but is not itself specified. ISO/IEC 7811 provides criteria to which cards are to perform. No consideration is given within ISO/IEC 7811 to the amount of use, if any, experienced by the card prior to test. Failure to conform to specified criteria is negotiated between the involved parties. ISO/IEC 10373-2 specifies the test procedures used to check cards against the parameters specified in this document. NOTE Numeric values in the SI and/or Imperial measurement system in this document may have been rounded off and are consistent with, but not exactly equal to each other. Using either system is correct but intermixing or reconverting values can result in errors. The original design was made using the Imperial measurement system.

This document is one of a series of International Standards describing the parameters for identification cards as defined in the terms and definitions clause and the use of such cards for international interchange. This document specifies requirements for embossed characters on identification cards. The embossed characters are intended for transfer of data either by use of imprinters or by visual or machine reading. It takes into consideration both human and machine aspects and states minimum requirements. It is the purpose of this document to provide criteria to which cards shall perform. No consideration is given within this document to the amount of use, if any, experienced by the card prior to test. Failure to conform to specified criteria is negotiated between the involved parties. ISO/IEC 10373‑1 specifies the test procedures used to check cards against the parameters specified in this document. NOTE 1 Numeric values in the SI and/or Imperial measurement system in this document may have been rounded off and are consistent with, but not exactly equal to each other. Using either system is correct but intermixing or reconverting values can result in errors. The original design was made using the Imperial measurement system. NOTE 2 Tactile Identifier Mark (TIM) defined by ISO/IEC 7811‑9 can be located in the name and address area of this document. The layout of embossed characters in this area is not intended to interfere with TIM.

ISO/IEC 7811 defines the characteristics for identification cards as defined in Clause 3 of this document and the use of such cards for international interchange. This document specifies requirements for a high coercivity magnetic stripe (including any protective overlay) on an identification card, the encoding technique and coded character sets. It takes into consideration both human and machine aspects and states minimum requirements. Coercivity influences many of the quantities specified in this document but is not itself specified. The main characteristic of the high coercivity magnetic stripe is its improved resistance to erasure. This is achieved with minimal probability of damage to other magnetic stripes by contact while retaining read compatibility with magnetic stripes as defined in ISO/IEC 7811-2. ISO/IEC 7811 provides criteria to which cards are to perform. No consideration is given within ISO/IEC 7811 to the amount of use, if any, experienced by the card prior to test. Failure to conform to specified criteria is negotiated between the involved parties. ISO/IEC 10373-2 specifies the test procedures used to check cards against the parameters specified in this document. NOTE Numeric values in the SI and/or Imperial measurement system in this document may have been rounded off and are consistent with, but not exactly equal to each other. Using either system is correct but intermixing or reconverting values can result in errors. The original design was made using the Imperial measurement system.

This document provides a set of instructions for evaluation of MRPs which may incorporate contactless integrated circuits. This evaluation is an instrument to establish the ability in principle of a specific type of document to fulfil the requirements of use. It supplies a structured approach to evaluate MRPs by: — defining reproducible stress methods to submit the document(s) under evaluation to specific stress or environmental conditions; — defining reproducible evaluation methods to measure numerical values for specific document properties; — defining test sequences that specify the order in which stress methods and evaluation methods are to be performed; — defining test plans to link specific user requirements to test sequences and related parameters. It specifies the minimum criteria to be achieved in order to meet ICAO's expectations for durability of fully personalized MRPs.

This document establishes guidelines for the design format and data content of an ISO-compliant driving licence (IDL) in regard to both visual human-readable features and ISO machine-readable technologies. It creates a common basis for international use and mutual recognition of the IDL without impeding individual national/community/regional motor vehicle authorities in taking care of their specific needs. The design approach of the IDL ISO ID-1 size card is to establish a secure domestic driving permit (DDP) for both human verification and machine readability and accompanying booklet with sleeve insert pocket for international use instead of the international driving permit (IDP) paper document (see Annex G). The basic document design premises include: — A minimum common mandatory data element set. — A common layout for ease of recognition. — Minimum security requirements for both human and machine verification. — Interoperability of the machine-readable content. At the discretion of national/community/regional motor vehicle authorities it allows for: — Inclusion of supplementary optional data elements to meet the needs of specific national/community/regional requirements apart from the minimum common mandatory data element set. — Additional document physical security elements at the option of national/community/regional authorities, and facilitates international procurements. — Incorporation of ISO/IEC JTC1/SC17 machine-readable technologies including integrated circuit with contacts and contactless integrated circuit technology, and ISO/IEC JTC1/SC31 1-dimensional / 2-dimensional bar codes, at the option of national/community/regional authorities. — Incorporation of current and future technologies (including biometrics, cryptography, data compression) at the option of national/community/regional authorities. A major benefit of these design premises is that a single card may serve a dual purpose of both a national/community/regional licence as well as an internationally recognized licence. Therefore, one card, in most cases, can replace the need for two documents. Alternatively, those countries that choose to maintain their individual domestic design or not to use Latin characters on their domestic driving licence for example can issue a second card with or without ISO machine-readable technologies. This second card can serve as DDP to be used with the accompanying booklet with sleeve insert pocket for international use instead of the current IDP paper document. This new IDL design yields a document that: — Is more secure from counterfeiting and alteration than the previous DDP and IDP documents. — Allows authorities to verify the authenticity of the document. — Integrates the personal data into a secure ID-1 size medium. — Allows a more reliable identification of the licence holder. — Allows for machine-readable technologies. — Facilitates information exchange and mutual recognition among motor vehicle authorities. — Allows the IDL to serve simultaneously as a DDP and IDP when accompanied by the booklet. Issuing authorities may introduce other functions to an IDL provided that it does not interfere with the driving licence function and the requirements in this document are not compromised.

This document defines the physical characteristics of vicinity cards (VICCs). It is intended to be used in conjunction with other parts of the ISO/IEC 15693 series.

This document specifies a half-duplex block transmission protocol featuring the special needs of a contactless environment and defines the activation and deactivation sequence of the protocol. This document is intended to be used in conjunction with other parts of ISO/IEC 14443 and is applicable to proximity cards or objects of Type A and Type B.

This document describes the following: - polling for proximity cards or objects (PICCs) entering the field of a proximity coupling device (PCD); - the byte format, the frames and timing used during the initial phase of communication between PCDs and PICCs; - the initial Request and Answer to Request command content; - methods to detect and communicate with one PICC among several PICCs (anticollision); - other parameters required to initialize communications between a PICC and PCD; - optional means to ease and speed up the selection of one PICC among several PICCs based on application criteria; - optional capability to allow a device to alternate between the functions of a PICC and a PCD to communicate with a PCD or a PICC, respectively. A device which implements this capability is called a PXD. Protocol and commands used by higher layers and by applications and which are used after the initial phase are described in ISO/IEC 14443‑4. This document is applicable to PICCs of Type A and of Type B (as described in ISO/IEC 14443‑2), to PCDs (as described in ISO/IEC 14443‑2) and to PXDs. NOTE 1 Part of the timing of data communication is defined in ISO/IEC 14443‑2. NOTE 2 Test methods for this document are defined in ISO/IEC 10373‑6.

This document specifies the test methods used for conformity testing, to determine whether an ICC with at least one ICC-managed device is considered to conform with the specifications of ISO/IEC 18328-3, e.g. device management and device handling.

ISO/IEC 14443-1:2018 defines the physical characteristics of proximity cards (PICCs). ISO/IEC 14443-1:2018 is intended to be used in conjunction with other parts of ISO/IEC 14443.

ISO/IEC 19286:2018 aims to normalize privacy-enhancing protocols and services by - using the mechanisms from parts of ISO/IEC 7816 and parts of ISO/IEC 18328 that contribute to security and privacy, - providing discoverability means of privacy-enabling attributes, - defining requirements for attribute-based credential handling, and - identifying data objects and commands for ICCs. Existing privacy-enhancing protocols available in a generic context are adopted for distributed systems including ICCs. Additionally, existing authentication protocols between an ICC and an external device used for establishing a secure channel are enhanced with privacy protection. Secure communication between an ICC and an on-card device is also considered. All the protocols and services described in this document contribute to privacy. Annex B describes an example of privacy impact assessments of respective systems.

ISO/IEC 7816-9:2017 specifies interindustry commands for card, file and other structure management, i.e. data object and security object. These commands cover the entire life cycle of the card and therefore some commands are used before the card has been issued to the cardholder or after the card has expired. For details on record life cycle status, refer to ISO/IEC 7816-4. ISO/IEC 7816-9:2017 is not applicable to the internal implementation within the card and/or the outside world.

ISO/IEC 11695-3:2017 specifies the optical properties and characteristics of optical memory cards using the holographic recording method.

ISO/IEC 18013 establishes guidelines for the design format and data content of an ISO-compliant driving licence (IDL) with regard to human-readable features (ISO/IEC 18013‑1), machine-readable technologies (ISO/IEC 18013‑2), and access control, authentication and integrity validation (ISO/IEC 18013‑3). It creates a common basis for international use and mutual recognition of the IDL without impeding individual countries/states to apply their privacy rules and national/community/regional motor vehicle authorities in taking care of their specific needs. ISO 18013-3:2017 - is based on the machine-readable data content specified in ISO/IEC 18013‑2; - specifies mechanisms and rules available to issuing authorities (IAs) for: - access control (i.e. limiting access to the machine-readable data recorded on the IDL), - document authentication (i.e. confirming that the document was issued by the claimed IA), and - data integrity validation (i.e. confirming that the data has not been changed since issuing). ISO 1813-3:2017 does not address issues related to the subsequent use of data obtained from the IDL, e.g. privacy issues.

ISO/IEC 7812-2:2017 specifies the application and registration procedures for Issuer Identification Numbers (IINs) issued in accordance with ISO/IEC 7812‑1.

ISO/IEC 7812-1:2017 specifies a numbering system for the identification of the card issuers, the format of the issuer identification number (IIN) and the primary account number (PAN).

ISO/IEC 17839-3:2016 - logical data structures for a BSoC, - enrolment procedures, and - usage of commands and data structures defined in other ISO standards for BSoC. ISO/IEC 17839-3.2016 does not define requirements for - commands and data structures that apply to devices external to a BSoC, and - commands and data structures that apply to logical interfaces inside a BSoC.