ISO/IEC 19286:2018

Standard
NOK 2 887,00 (excl. VAT) InformationMonitor standard
basket Webprint basket Printed and bound
Get online access
Status: Check Published
Norwegian title: Identification cards — Integrated circuit cards — Privacy-enhancing protocols and services
English title: Identification cards — Integrated circuit cards — Privacy-enhancing protocols and services
Item type: Standard
Language: Engelsk
Edition: 1 (2018-01-08)
Number of pages: 76
Price:

NOK 2 887,00 (excl. VAT)
NOK 3 608,75 (with VAT)

Scope: <p>This document aims to normalize privacy-enhancing protocols and services by</p><list list-type="bullet"><list-item><label>—</label><p>using the mechanisms from parts of <std std-id="iso:std:iso-iec:7816:en" type="undated"><std-ref>ISO/IEC 7816</std-ref></std> and parts of <std std-id="iso:std:iso-iec:18328:en" type="undated"><std-ref>ISO/IEC 18328</std-ref></std> that contribute to security and privacy,</p></list-item><list-item><label>—</label><p>providing discoverability means of privacy-enabling attributes,</p></list-item><list-item><label>—</label><p>defining requirements for attribute-based credential handling, and</p></list-item><list-item><label>—</label><p>identifying data objects and commands for ICCs.</p></list-item></list><p>Existing privacy-enhancing protocols available in a generic context are adopted for distributed systems including ICCs. Additionally, existing authentication protocols between an ICC and an external device used for establishing a secure channel are enhanced with privacy protection. Secure communication between an ICC and an on-card device is also considered.</p><p>All the protocols and services described in this document contribute to privacy. <xref ref-type="app" rid="sec_B">Annex B</xref> describes an example of privacy impact assessments of respective systems.</p>
Adopted: 2018-01-08
ICS: 35.240.15 - Identifikasjonskort og tilhørende utstyr