scope:

The present document specifies:

a) the minimum security requirements for a Security Module (SM);

b) the general card related functions embedded in the SM - terminal protocols including minimum data exchange. The data elements and cryptographic processing described in annex A for the case where the SM is an IC card shall be supported if the SM is not an IC card or the configuration of the system, e.g. where the SM handles more than one terminal/user card. Configurations where the SM handles more than one terminal/user card are not fully described in the present document. Further mechanisms may be required to enable these configurations;

c) the necessary security services and mechanisms to provide application and cryptographic security information for the processing of telecommunication transactions,

considering several types of SM at different locations in the system and different system configurations.

The present document allows interaction between the IC card and the SM via the terminal in a way that may be functionally transparent to the terminal and possibly also the network(s). This provides the flexibility to use different techniques, commands and message formats at the terminal - SM interface.

The present document supports IC cards with payment applications following EN 726-5 [3] and all card applications following clauses 4 to 7 of the present document. The present document supports IC cards following TS 101 206-3 [2]. Other telecommunication IC cards which do not follow EN 726, e.g. simple memory cards, may also be supported by the SM described in the present document.