BS ISO IEC 24789-1-2012 Identification cards Card service life Application profiles and requirements《识别卡 卡使用寿命 应用配置文件和要求》.pdf

1、raising standards worldwide NO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAW BSI Standards Publication BS ISO/IEC 24789-1:2012 Identification cards - Card service life Part 1: Application profiles and requirementsBS ISO/IEC 24789-1:2012 BRITISH STANDARD National foreword This B

2、ritish Standard is the UK implementation of ISO/IEC 24789-1:2012. The UK participation in its preparation was entrusted to Technical Committee IST/17, Cards and personal identification. A list of organizations represented on this committee can be obtained on request to its secretary. This publicatio

3、n does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2012. Published by BSI Standards Limited 2012 ISBN 978 0 580 63151 1 ICS 35.240.15 Compliance with a British Standard cannot confer immunity

4、from legal obligations. This British Standard was published under the authority of the Standards Policy and Strategy Committee on 30 April 2012. Amendments issued since publication Date Text affectedBS ISO/IEC 24789-1:2012Reference number ISO/IEC 24789-1:2012(E) ISO/IEC 2012INTERNATIONAL STANDARD IS

5、O/IEC 24789-1 First edition 2012-04-15 Identification cards Card service life Part 1: Application profiles and requirements Cartes didentification Dure de vie des cartes Partie 1: Profils dapplication et exigences BS ISO/IEC 24789-1:2012 ISO/IEC 24789-1:2012(E) COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2

6、012 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the co

7、untry of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO/IEC 2012 All rights reservedBS ISO/IEC 24789-1:2012 ISO/IEC 24789-1:2012(E) ISO/IEC 2012 All rights rese

8、rved iiiContents Page Foreword iv Introduction . v 1 Scope 1 2 Normative references 1 3 Terms, definitions and abbreviated terms 1 3.1 Terms and definitions . 1 3.2 Abbreviated terms . 2 4 Card applications and their profiles 2 4.1 Determination of the application profile . 2 4.2 Determination of th

9、e aging and usage classes 7 5 Determination of the evaluation regime 7 5.1 General . 7 5.2 Evaluation regime using stand alone methods 8 5.3 Evaluation regime using evaluation sequences 9 Annex A (informative) Example application profiles . 15 Annex B (informative) Example evaluation regimes . 44 BS

10、 ISO/IEC 24789-1:2012 ISO/IEC 24789-1:2012(E) iv ISO/IEC 2012 All rights reservedForeword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of IS

11、O or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organization

12、s, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Direct

13、ives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the

14、national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 24789-1 was prepared by Joint Technical Committee ISO

15、/IEC JTC 1, Information technology, Subcommittee SC 17, Cards and personal identification. ISO/IEC 24789 consists of the following parts, under the general title Identification cards Card service life: Part 1: Application profiles and requirements Part 2: Methods of evaluation BS ISO/IEC 24789-1:201

16、2 ISO/IEC 24789-1:2012(E) ISO/IEC 2012 All rights reserved vIntroduction This part of ISO/IEC 24789 comprises a methodology for determining application profiles, their requirements and corresponding examples. These application profiles and requirements are intended to guide the reader of this part o

17、f ISO/IEC 24789 on the comparative rigour of various ID card service life applications. These profiles and requirements provide a means for ranking and comparing the main factors affecting ID card service life in a manner that is suitable for evaluation using the methods defined or referenced in ISO

18、/IEC 24789-2. In order to accommodate existing cards, the simplest class uses, at least, characteristics and criteria defined in ISO/IEC 7810 and test method equipment and procedures defined in ISO/IEC 10373-1. Two types of cards are taken into account, cards that contain an integrated circuit and c

19、ards that do not contain an integrated circuit. Although the equipment and parts of the procedures of certain ISO/IEC 10373-1 test methods are referenced for employment in the simulation of aging or usage in ISO/IEC 24789, such references are clearly distinguished from the normal use of ISO/IEC 1037

20、3-1. In normal use, these ISO/IEC 10373-1 test methods are applied to determine conformity to ISO/IEC 7810 and do not explicitly address application-specific requirements for card service life. Due to a lack of field/laboratory correlation data, only limited acceptance criteria (normative applicatio

21、n profiles and requirements) can be provided in the 2010 edition of this part of ISO/IEC 24789. However, it is anticipated that a more comprehensive set of values for acceptance levels will be available in future editions. At the time of publishing this first edition, there is limited data to show d

22、irect equivalence to any measure of actual field use conditions. It will not be possible to establish any such equivalence until and unless a degree of quantitative correlation has been established for the ID card construction in question. For the convenience of certain users, non-SI equivalents are

23、 given for some quantity values where these are in common use in the ID card industry. These equivalents appear in parenthesis and are for information only. BS ISO/IEC 24789-1:2012BS ISO/IEC 24789-1:2012 INTERNATIONAL STANDARD ISO/IEC 24789-1:2012(E) ISO/IEC 2012 All rights reserved 1Identification

24、cards Card service life Part 1: Application profiles and requirements 1 Scope This part of ISO/IEC 24789 comprises a methodology for determining application profiles, their requirements and corresponding examples. It contains no additional or changed requirements for the ID card properties defined i

25、n other applicable standards. It seeks to define the relative rigour of each application defined herein in terms of a set of simple but justifiable methods of evaluation. The purpose of ISO/IEC 24789 is to provide guidance on methods and their use to simulate a cards service life. In order to achiev

26、e this purpose, two parameters of card service life are defined: age and usage. This can be represented as a two-dimensional matrix in which each age/usage combination corresponds to a card service life class. The two parts of ISO/IEC 24789 together describe the evaluation methods to be used and the

27、ir criteria. ISO/IEC 24789 was originally developed for ID-1 cards conforming to ISO/IEC 7810, but might be found useful in whole or in part for other types and form factors. References are given to the corresponding methods of evaluation in ISO/IEC 24789-2 and elsewhere. 2 Normative references The

28、following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 7810, Identification cards Physical character

29、istics ISO/IEC 10373-1, Identification cards Test methods Part 1: General characteristics ISO/IEC 10373-2, Identification cards Test methods Part 2: Cards with magnetic stripes ISO/IEC 24789-2, Identification cards Card service life Part 2: Methods of evaluation 3 Terms, definitions and abbreviated

30、terms 3.1 Terms and definitions For the purposes of this document, the terms, definitions and abbreviated terms given in ISO/IEC 7810, ISO/IEC 10373-1, ISO/IEC 10373-2, ISO/IEC 24789-2 and the following apply. BS ISO/IEC 24789-1:2012 ISO/IEC 24789-1:2012(E) 2 ISO/IEC 2012 All rights reserved3.1.1 ca

31、rd service life CSL period of time and usage for which a card retains the set of characteristics specified for its application under the conditions of use specified for that application from the time it is issued to the card holder 3.1.2 application profile set of parameters that, in total, define t

32、he conditions of use specified for an application 3.1.3 evaluation regime set of evaluation methods, together with their manner of combination and application 3.2 Abbreviated terms ATM Automated Teller Machine IC Integrated Circuit PICC Proximity Integrated Circuit Card VICC Vicinity Integrated Circ

33、uit Card 4 Card applications and their profiles 4.1 Determination of the application profile 4.1.1 Raw application profile Three variables are used to establish the raw application profile. These are: environment; storage; reader profile. Raw application profiles have two parameters: age (A); usage

34、(U). NOTE Age is the time dependent parameter and usage is the stress dependent parameter (see 4.2). To determine the application profile, define the environmental, storage and reader factors in Table 1, Table 2 and Table 3 respectively by defining the probability for each condition in the column “P

35、robability p”. The sum of probabilities for each factor shall be 1. Next, for each condition with a probability greater than 0, calculate the age points in column “Age points” by multiplying the value in the column “Age” with the probability p in the column “Probability p”. Then calculate the usage

36、points in columns “Usage points” by multiplying the value in the column “Usage” with the probability p in the column “Probability p”. Then, calculate the sum A of all age points and the sum U of all usage points. This pair of values (A, U) is the raw application profile for the application. BS ISO/I

37、EC 24789-1:2012 ISO/IEC 24789-1:2012(E) ISO/IEC 2012 All rights reserved 3Table 1 Environmental factors Factor Condition Age Usage Probability p of condition (sum=1) Age points (p x age) Usage points (p x usage) Examples and guidance Temperature Normal (5C to 30C) 0 0 Low (below 5C) 1 0 High (30C to

38、 50C) 2 0 Very high (above 50C) 5 0 Temperature changes (transition between any two of the above temperature ranges) 1 per week and 1 per day and 3 per day 5 1,5 Relative humidity Normal (30% - 70%) 0 0 Dry ( 70%) 3 0 Daylight None 0 0 Normally carried in a wallet or a bag. Indoor 1 0 Worn visibly a

39、s an ID badge indoors. Outdoor 5 0 Worn visibly as an ID badge outdoors, e.g. at a building site or as a ski-pass. Chemicals and particulate exposure (e.g. sand and dust, oils and fats, corrosive gases, salt) Low 0 0 Residential, office or retail environment. Medium 2 0 Light factory environment; ou

40、tdoor ID badge usage. High 5 0 Car repair or heavy factory environment. Sum (A, U) BS ISO/IEC 24789-1:2012 ISO/IEC 24789-1:2012(E) 4 ISO/IEC 2012 All rights reservedTable 2 Storage factors Factor Condition Age Usage Probability p of condition (sum=1) Age points (p x age) Usage points (p x usage) Exa

41、mples and guidance Physical stress (bending) None 0 0 Hard plastic holder. Low 0 1 Wallet in purse or handbag; inserted in reader in vehicle. Medium 0 2 Multiple cards stacked in soft plastic holder or wallet in trouser pocket. High 0 5 Multiple cards shingled in wallet in trouser pocket; single car

42、d loose or in paper sleeve or in soft plastic holder in pocket or bag. Physical stress (friction) None 0 0 Card always remains in holder, e.g. PICC. Low 1 0 Wallet in purse or handbag; cards stacked in holder or wallet; paper sleeve. Medium 2 0 Hard plastic holder; cards shingled in holder or wallet

43、; wallet in trouser pocket; soft plastic holder. High 5 0 Inserted in reader in vehicle; loose in pocket or bag. Physical stress (compression) None 0 0 Hard plastic holder. Low 0 1 Wallet in purse or handbag; cards stacked in holder or wallet; inserted in reader in vehicle. Medium 0 2 Multiple cards

44、 shingled in holder or wallet; wallet in trouser pocket. High 0 5 Loose in bag or pocket. Sum (A, U) BS ISO/IEC 24789-1:2012 ISO/IEC 24789-1:2012(E) ISO/IEC 2012 All rights reserved 5Table 3 Reader factors Factor Condition Age Usage Probability p of condition (sum=1) Age points (p x age) Usage point

45、s (p x usage) Examples and guidance Physical stress (bending, e.g. pressure by roller) None 0 0 PICC or VICC reader. Low 0 1 Magnetic stripe or contact IC card reader with straight insertion path; motorized ATM reader with rollers running over the card. Medium 0 2 Contact IC card reader with bent in

46、sertion path a) . High 0 3 Magnetic stripe swipe reader; poor ergonomics of the reader location resulting in bending of the card during insertion/withdra wal; rough mechanical handling. Physical stress (friction) None 0 0 PICC or VICC reader; motorized card reader; low friction insertion readers. Lo

47、w 0 1 Low friction insertion readers; magnetic stripe swipe reader, where construction and installation prevent bending of the card. Medium 0 2 Medium friction insertion readers, e.g. with clamping device for in-car use. High 0 3 Magnetic stripe swipe reader, where construction or installation resul

48、ts in bending of the card. BS ISO/IEC 24789-1:2012 ISO/IEC 24789-1:2012(E) 6 ISO/IEC 2012 All rights reservedTable 3 (continued) Factor Condition Age Usage Probability p of condition (sum=1) Age points (p x age) Usage points (p x usage) Examples and guidance Physical stress (impact, e.g. pressing th

49、e card against a contactless reader) None 0 0 Insertion readers; motorized readers; VICC readers; most PICC readers. Low 0 1 Magnetic stripe swipe reader. Medium 0 2 PICC reader in public transport gate applications. High 0 3 Rough mechanical handling. Reader contamination (resulting in deposits inside the reader causing abrasion) None 0 0 Most office, retail, bank and other environments. Low 1 0 Insertion or swipe reader installed in du