ISO/IEC 7816




ISO/IEC 7816 is an international standard related to electronic identification cards with contacts, especially smart cards, managed jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).


It is edited by the Joint technical committee (JTC) 1 / Sub-Committee (SC) 17, Cards and personal identification.[1]


The following describes the different parts of this standard.



Note: abstracts and dates, when present, are mere quotations from the ISO website,[2] and are neither guaranteed at the time of edition nor in the future.



Contents






  • 1 Parts


  • 2 7816-1: Cards with contacts — Physical characteristics


  • 3 7816-2: Cards with contacts — Dimensions and location of the contacts


  • 4 7816-3: Cards with contacts — Electrical interface and transmission protocols


  • 5 7816-4: Organization, security and commands for interchange


  • 6 7816-5: Registration of application providers


  • 7 7816-6: Interindustry data elements for interchange


  • 8 7816-7: Interindustry commands for Structured Card Query Language (SCQL)


  • 9 7816-8: Commands and mechanisms for security operations


  • 10 7816-9: Commands for card management


  • 11 7816-10: Electronic signals and answer to reset for synchronous cards


  • 12 7816-11 Personal verification through biometric methods


  • 13 7816-12 Cards with contacts — USB electrical interface and operating procedures


  • 14 7816-13: Commands for application management in multi-application environment


  • 15 7816-15: Cryptographic information application


  • 16 See also


  • 17 References


  • 18 External links





Parts



  • ISO/IEC 7816-1:2011 Part 1: Cards with contacts—Physical characteristics

  • ISO/IEC 7816-2:2007 Part 2: Cards with contacts—Dimensions and location of the contacts

  • ISO/IEC 7816-3:2006 Part 3: Cards with contacts—Electrical interface and transmission protocols

  • ISO/IEC 7816-4:2013 Part 4: Organization, security and commands for interchange

  • ISO/IEC 7816-5:2004 Part 5: Registration of application providers

  • ISO/IEC 7816-6:2016 Part 6: Interindustry data elements for interchange

  • ISO/IEC 7816-7:1999 Part 7: Interindustry commands for Structured Card Query Language (SCQL)

  • ISO/IEC 7816-8:2016 Part 8: Commands and mechanisms for security operations

  • ISO/IEC 7816-9:2017 Part 9: Commands for card management

  • ISO/IEC 7816-10:1999 Part 10: Electronic signals and answer to reset for synchronous cards

  • ISO/IEC 7816-11:2017 Part 11: Personal verification through biometric methods

  • ISO/IEC 7816-12:2005 Part 12: Cards with contacts—USB electrical interface and operating procedures

  • ISO/IEC 7816-13:2007 Part 13: Commands for application management in a multi-application environment

  • ISO/IEC 7816-15:2016 Part 15: Cryptographic information application



7816-1: Cards with contacts — Physical characteristics


Created in 1987, updated in 1998, amended in 2003, updated in 2011.[3]


This part describes the physical characteristics of the card, primarily by reference to ISO/IEC 7810 Identification cards — Physical characteristics, but also with other characteristics such as mechanical strength.



7816-2: Cards with contacts — Dimensions and location of the contacts


Created in 1988, updated in 1999, amended in 2004, updated in 2007.[4]



7816-3: Cards with contacts — Electrical interface and transmission protocols


Created in 1989, amended in 1992 (addition of the T=1 protocol), amended in 1994 (revision of Protocol Type Selection), updated in 1997 (including addition of 3 Volt operation), amended in 2002 (including addition of 1.8 Volt operation), last updated in 2006 (including removal of Vpp).[5]



7816-4: Organization, security and commands for interchange


Created in 1995, updated in 2013, amended in 2014.[6][7]


According to its abstract, it specifies:



  • contents of command-response pairs exchanged at the interface,

  • means of retrieval of data elements and data objects in the card,

  • structures and contents of historical bytes to describe operating characteristics of the card,

  • structures for applications and data in the card, as seen at the interface when processing commands,

  • access methods to files and data in the card,

  • a security architecture defining access rights to files and data in the card,

  • means and mechanisms for identifying and addressing applications in the card,

  • methods for secure messaging,

  • access methods to the algorithms processed by the card. It does not describe these algorithms.


It does not cover the internal implementation within the card or the outside world.


ISO/IEC 7816-4:2013 is independent of the physical interface technology, and applies equally to contact cards, proximity cards and vicinity cards.



7816-5: Registration of application providers


Created in 1995, updated in 2004.[8]


According to its abstract, ISO/IEC 7816-5 defines how to use an application identifier to ascertain the presence of and/or perform the retrieval of an application in a card.


ISO/IEC 7816-5:2004 shows how to grant the uniqueness of application identifiers through the international registration of a part of this identifier, and defines



  • the registration procedure,

  • the authorities in charge thereof,

  • the availability of the register which links the registered parts of the identifiers and the relevant application providers.



7816-6: Interindustry data elements for interchange


Created in 1996, updated in 2004, amended in 2006, updated in 2016.[9]


According to its abstract, it specifies the Data Elements (DEs) used for interindustry interchange based on integrated circuit cards (ICCs) both with contacts and without contacts. It gives the identifier, name, description, format, coding and layout of each DE and defines the means of retrieval of DEs from the card.



7816-7: Interindustry commands for Structured Card Query Language (SCQL)


Created in 1999.[10]



7816-8: Commands and mechanisms for security operations


Created in 1995, updated in 2004, updated in 2016.[11]


According to its abstract, it specifies interindustry commands for integrated circuit cards (either with contacts or without contacts) that may be used for cryptographic operations. These commands are complementary to and based on the commands listed in ISO/IEC 7816-4.


Annexes are provided that give examples of operations related to digital signatures, certificates and the import and export of asymmetric keys.


The choice and conditions of use of cryptographic mechanisms may affect card exportability. The evaluation of the suitability of algorithms and protocols is outside the scope of ISO/IEC 7816-8.



7816-9: Commands for card management


Created in 1995, updated in 2004, updated in 2017.[12]


According to its abstract, it specifies interindustry commands for integrated circuit cards (both with contacts and without contacts) for card and file management, e.g. file creation and deletion. These commands cover the entire life cycle of the card and therefore some commands may be used before the card has been issued to the cardholder or after the card has expired.


An annex is provided that shows how to control the loading of data (secure download) into the card, by means of verifying the access rights of the loading entity and protection of the transmitted data with secure messaging. The loaded data may contain, for example, code, keys and applets.



7816-10: Electronic signals and answer to reset for synchronous cards


Created in 1999.[13]


This part specifies the power, signal structures, and the structure for the answer to reset between an integrated circuit card(s) with synchronous transmission and an interface device such as a terminal.



7816-11 Personal verification through biometric methods


Created in 2004, updated in 2017.[14]


This part of ISO/IEC 7816 specifies security-related interindustry commands to be used for personal verification through biometric methods in integrated circuit cards. It also defines the data structure and data access methods for use of the card as a carrier of the biometric reference and/or as the device to perform the verification of the cardholder’s biometric probe (on-card biometric comparison). Identification of persons using biometric methods is outside the scope of this standard.



7816-12 Cards with contacts — USB electrical interface and operating procedures


Created in 2005.[15]


According to its abstract, it specifies the operating conditions of an integrated circuit card that provides a USB interface. An integrated circuit card with a USB interface is named USB-ICC.


ISO/IEC 7816-12:2005 specifies:



  • the electrical conditions when a USB-ICC is operated by an interface device - for those contact fields that are not used, when the USB interface is applied;

  • the USB standard descriptors and the USB-ICC class specific descriptor;

  • the data transfer between host and USB-ICC using bulk transfers or control transfers;

  • the control transfers which allow two different protocols named version A and version B;

  • the (optional) interrupt transfers to indicate asynchronous events;

  • status and error conditions.


ISO/IEC 7816-12:2005 provides two protocols for control transfers. This is to support the protocol T=0 (version A) or to use the transfer on APDU level (version B). ISO/IEC 7816-12:2005 provides the state diagrams for the USB-ICC for each of the transfers (bulk transfers, control transfers version A and version B). Examples of possible sequences which the USB-ICC must be able to handle are given in an informative annex.


The USB CCID device class defines a standard for communicating with ISO/IEC 7816 smart cards over USB.



7816-13: Commands for application management in multi-application environment


This part specifies commands for application management in a multi-application environment.[16]



7816-15: Cryptographic information application


Created in 2004, amended in 2004, 2007, 2008, updated in 2016.[17]


According to its abstract, it specifies a card application. This application contains information on cryptographic functionality. Further, ISO/IEC 7816-15:2016 defines a common syntax (in ASN.1) and format for the cryptographic information and mechanisms to share this information whenever appropriate.


ISO/IEC 7816-15:2016 supports the following capabilities:



  • storage of multiple instances of cryptographic information in a card;

  • use of the cryptographic information;

  • retrieval of the cryptographic information;

  • cross-referencing of the cryptographic information with DOs defined in ISO/IEC 7816 when appropriate;

  • different authentication mechanisms; and

  • multiple cryptographic algorithms.



See also




  • ISO/IEC 14443, a proximity card standard related to smart cards, on a different physical communication support.


  • ISO/IEC 15693, a vicinity card standard related to smart cards, on a different physical communication support.

  • List of ISO standards

  • Smart card



References





  1. ^ "ISO/IEC JTC 1/SC 17 Cards and security devices for personal identification". Iso.org. Retrieved 2017-10-11..mw-parser-output cite.citation{font-style:inherit}.mw-parser-output q{quotes:"""""""'""'"}.mw-parser-output code.cs1-code{color:inherit;background:inherit;border:inherit;padding:inherit}.mw-parser-output .cs1-lock-free a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/6/65/Lock-green.svg/9px-Lock-green.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .cs1-lock-limited a,.mw-parser-output .cs1-lock-registration a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/d/d6/Lock-gray-alt-2.svg/9px-Lock-gray-alt-2.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .cs1-lock-subscription a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/a/aa/Lock-red-alt-2.svg/9px-Lock-red-alt-2.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .cs1-subscription,.mw-parser-output .cs1-registration{color:#555}.mw-parser-output .cs1-subscription span,.mw-parser-output .cs1-registration span{border-bottom:1px dotted;cursor:help}.mw-parser-output .cs1-hidden-error{display:none;font-size:100%}.mw-parser-output .cs1-visible-error{font-size:100%}.mw-parser-output .cs1-subscription,.mw-parser-output .cs1-registration,.mw-parser-output .cs1-format{font-size:95%}.mw-parser-output .cs1-kern-left,.mw-parser-output .cs1-kern-wl-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right,.mw-parser-output .cs1-kern-wl-right{padding-right:0.2em}


  2. ^ "Browse by ICS". www.iso.org. Retrieved 19 April 2018.


  3. ^ "ISO/IEC 7816-1:2011 Identification cards — Integrated circuit cards — Part 1: Cards with contacts — Physical characteristics". Iso.org. 2011-01-31. Retrieved 2017-10-11.


  4. ^ "ISO/IEC 7816-2:2007 Identification cards — Integrated circuit cards — Part 2: Cards with contacts — Dimensions and location of the contacts". Iso.org. 2007-10-11. Retrieved 2017-10-11.


  5. ^ "ISO/IEC 7816-3:2006 Identification cards — Integrated circuit cards — Part 3: Cards with contacts — Electrical interface and transmission protocols". Iso.org. 2006-10-30. Retrieved 2017-10-11.


  6. ^ "ISO/IEC 7816-4:2013 Identification cards — Integrated circuit cards — Part 4: Organization, security and commands for interchange". Iso.org. 2013-04-04. Retrieved 2017-10-11.


  7. ^ "ISO/IEC 7816-4:2013/Cor 1:2014". Iso.org. 2014-08-14. Retrieved 2017-10-11.


  8. ^ "ISO/IEC 7816-5:2004 Identification cards — Integrated circuit cards — Part 5: Registration of application providers". Iso.org. 2010-03-17. Retrieved 2017-10-11.


  9. ^ "ISO/IEC 7816-6:2016 Identification cards — Integrated circuit cards — Part 6: Interindustry data elements for interchange". Iso.org. 2016-06-14. Retrieved 2017-10-11.


  10. ^ "ISO/IEC 7816-7:1999 Identification cards — Integrated circuit(s) cards with contacts — Part 7: Interindustry commands for Structured Card Query Language (SCQL)". Iso.org. 2010-06-17. Retrieved 2017-10-11.


  11. ^ "ISO/IEC 7816-8:2016 Identification cards — Integrated circuit cards — Part 8: Commands and mechanisms for security operations". Iso.org. 2016-11-01. Retrieved 2017-10-11.


  12. ^ "ISO/IEC 7816-9:2017 Identification cards — Integrated circuit cards — Part 9: Commands for card management". Iso.org. 2017-12-07. Retrieved 2018-01-04.


  13. ^ "ISO/IEC 7816-10:1999 Identification cards — Integrated circuit(s) cards with contacts — Part 10: Electronic signals and answer to reset for synchronous cards". Iso.org. 2010-06-17. Retrieved 2017-10-11.


  14. ^ "ISO/IEC 7816-11:2007 Identification cards — Integrated circuit cards — Part 11: Personal verification through biometric methods". Iso.org. 2017-12-01. Retrieved 2018-01-04.


  15. ^ "ISO/IEC 7816-12:2005 Identification cards — Integrated circuit cards — Part 12: Cards with contacts — USB electrical interface and operating procedures". Iso.org. 2011-03-17. Retrieved 2017-10-11.


  16. ^ "ISO/IEC 7816-13:2007 Identification cards — Integrated circuit cards — Part 13: Commands for application management in a multi-application environment". Iso.org. 2007-03-09. Retrieved 2017-10-11.


  17. ^ "ISO/IEC 7816-15:2016 Identification cards — Integrated circuit cards — Part 15: Cryptographic information application". Iso.org. 2016-05-09. Retrieved 2017-10-11.




External links



  • Overview of ISO/IEC 7816 parts 1-4

  • ISO/IEC JTC1/SC17 Working Groups

  • DS8007 and Smart Card Interface Fundamentals

  • Tutorial - Introduction to Smart Cards - David B Everett (1992)


  • read and write ISO 7816 smart cards using a PIC -Simple Operating System for Smartcard Education

  • various types of identification cards using the ID-1 format defined in ISO standard 7810


  • Spelunking Credit Cards with Ruby // Speaker Deck - Sau Sheong Chang

  • Interface for ISO 7816 Smart Cards










-

這個網誌中的熱門文章

Xamarin.form Move up view when keyboard appear

圖片
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box; } 0 I'm trying to build a Chat app UI, the idea of the Layout was pretty simple: When the input bar is focused, keyboard show up and "push" up the chat bar, as it's a grid, the ListView will resize to fit the screen: I update the input bar's margin to "push" it up: NSValue result = (NSValue)args.Notification.UserInfo.ObjectForKey(new NSString(UIKeyboard.FrameEndUserInfoKey)); CGSize keyboardSize = result.RectangleFValue.Size; if (Element != null){ Element.Margin = new Thickness(0, 0, 0,keyboardSize.Height); //push the entry up to keyboard height when keyboard is activated } And this is ...
閱讀完整內容

Post-Redirect-Get with Spring WebFlux and Thymeleaf

圖片
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box; } 2 Can someone explain to me how to implement the post-redirect-get pattern in Spring WebFlux and Thymeleaf? What subscribes on the database save method? @GetMapping("/register") public String showRegisterForm(Model model) { model.addAttribute("user", new User()); return "register"; } @PostMapping public String processRegisterForm(@Valid User user, BindingResult bindingResult) { if (bindingResult.hasErrors()) { return "register"; } else { userRepository.save(user); //what subscribes on this? //how to redirect on e.g. "/login"? ...
閱讀完整內容

Anylogic : not able to use stopDelay()

圖片
-2 I am building a railway station model. I want a train to depart when I click a button. I want to call stopDelay() for that but I am not sure how to do that and from which place. anylogic share | improve this question asked Nov 23 '18 at 10:12 Anupam Singh Anupam Singh 1 Hi Anupam, welcome to SOF. Please check how to ask good questions, see link below. Your question is...
閱讀完整內容