scope:

ISO/IEC 24727 defines a set of programming interfaces for interactions between integrated circuit cards and external applications to include generic services for multi-sector use. This part of ISO/IEC 24727 standardizes the connectivity and security mechanisms between the clientapplication and the card-application. It specifies API-Administration of service-independent and implementation-independent ISO/IEC 24727 compliant modules, including security, that enables action requests to a specific card-application of an ICC such that, when coupled to data model and content discovery operations, the card-application can be used by a variety of client-applications. 1. Extend and update as necessary the stack configurations to address the XML representation such that it is compatible with the relevant XML-based standards (e.g. SAML). 2. Clarify use of secure messaging. 3. As a result of Amendments under development for other parts of 24727, portions of this standard may be deleted and referenced. 4. Consider additional forms of secure messaging and consider separating the security of information transferred across a general network versus security of information transferred across the card interface. 5. Refine TC_API to allow channel initiation for various mechanisms; e.g. web service communication (SOAP PAOS), AJAX. 6. Update the current XML specifications to align with ISO and not import 3 party schemas e.g. OASIS. 7. Remove ambiguities by elaborating and re-specifying concepts that may not be clear in the current standard. 8. Incorporate concepts that are captured in other parts of ISO/IEC 24727 but are more relevant for ISO/IEC 24727-4. 9. Include C and Java bindings in a Normative Annex (for C) and an Informative Annex (Java); moved from Part 5 10. Consider relocating data structure generation to the local machine level; e.g. remote ICC Stack