UNLIMITED FREE
ACCESS TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Select Your Free Newsletters

Industry Newsletters

Select Your Free Product Alerts

Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

New! AI Engineering Assistant 
- Trained on our vast library of engineering resources.

ISO/IEC 19286

Identification cards - Integrated circuit cards - Privacy-enhancing protocols and services

active, Most Current
Buy Now
Organization: ISO
Publication Date: 1 January 2018
Status: active
Page Count: 84
ICS Code (Identification cards. Chip cards. Biometrics): 35.240.15
scope:

This document aims to normalize privacy-enhancing protocols and services by

- using the mechanisms from parts of ISO/IEC 7816 and parts of ISO/IEC 18328 that contribute to security and privacy,

- providing discoverability means of privacy-enabling attributes,

- defining requirements for attribute-based credential handling, and

- identifying data objects and commands for ICCs.

Existing privacy-enhancing protocols available in a generic context are adopted for distributed systems including ICCs. Additionally, existing authentication protocols between an ICC and an external device used for establishing a secure channel are enhanced with privacy protection. Secure communication between an ICC and an on-card device is also considered.

All the protocols and services described in this document contribute to privacy. Annex B describes an example of privacy impact assessments of respective systems.

Document History

ISO/IEC 19286
January 1, 2018
Identification cards - Integrated circuit cards - Privacy-enhancing protocols and services
This document aims to normalize privacy-enhancing protocols and services by — using the mechanisms from parts of ISO/IEC 7816 and parts of ISO/IEC 18328 that contribute to security and privacy, —...

References

This document references:
ISO/IEC 18328-3 - Identification cards - ICC-managed devices - Part 3: Organization, security and commands for interchange
Published by ISO on October 15, 2016
This document specifies the logical interface of an application supporting the necessary security features in a card-IC which communicates with the external world by a physical interface supporting...
This document references:
ISO/IEC 7816-11 - Identification cards — Integrated circuit cards — Part 11: Personal verification through biometric methods
Published by ISO on April 1, 2022
This document specifies security-related interindustry commands that are intended to be used for personal verification through biometric methods in integrated circuit cards. It also defines the data...
This document references:
ISO/IEC 7816-4 AMD 1 - Identification cards — Integrated circuit cards — Part 4: Organization, security and commands for interchange AMENDMENT 1: Support of multiple logical security devices
Published by ISO on October 1, 2023
A description is not available for this item.
This document references:
ISO/IEC 7816-8 AMD 1 - Identification cards — Integrated circuit cards — Part 8: Commands and mechanisms for security operations AMENDMENT 1: Interoperability for the interchange of security operations using quantum safe cryptography
Published by ISO on November 1, 2023
A description is not available for this item.
This document references:
ISO/IEC 7816-9 - Identification cards - Integrated circuit cards - Part 9: Commands for card management
Published by ISO on December 1, 2017
This document specifies interindustry commands for card, file and other structure management, i.e. data object and security object. These commands cover the entire life cycle of the card and...
This document is referenced by:
BS EN 419212-4 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services Part 4: Privacy specific Protocols
Published by BSI on April 30, 2018
A description is not available for this item.
This document is referenced by:
EN 419212-4 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 4: Privacy specific Protocols
Published by CEN on April 1, 2018
This part specifies mechanisms for SEs to be used as privacy-enabled devices in the context of IAS, and fulfill the requirements of Article 5 of the so-called eIDAS Regulation about data processing...
This document is referenced by:
DIN EN 419212-4 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 4: Privacy specific Protocols; English version EN 419212-4:2018
Published by DIN on June 1, 2018
This part specifies mechanisms for SEs to be used as privacy-enabled devices in the context of IAS, and fulfill the requirements of Article 5 of the so-called eIDAS Regulation about data processing...
This document is referenced by:
DIN EN 419212-4 - Application Interface for Secure Elements for Electronic Identification, Authentication and Trusted Services - Part 4: Privacy specific Protocols; English version EN 419212-4:2018
Published by DIN on June 1, 2018
A description is not available for this item.
This document is referenced by:
ISO/IEC 23220-1 - Cards and security devices for personal identification — Building blocks for identity management via mobile devices — Part 1: Generic system architectures of mobile eID systems
Published by ISO on February 1, 2023
This document specifies generic system architectures and generic life-cycle phases of mobile eID systems in terms of building blocks for mobile eID system infrastructures. It standardizes interfaces...
View Less
View All
Advertisement