CAN CSA-ISO IEC 7064-2004 Information technology - Security techniques - Check character systems.pdf

1、 Reference numberISO/IEC 7064:2003(E)ISO/IEC 2003Information technology Security techniques Check character systems Technologies de linformation Techniques de scurit Systmes de caractres de contrle National Standard of CanadaCAN/CSA-ISO/IEC 7064:04(ISO/IEC 7064:2003)International Standard ISO/IEC 70

2、64:2003 (first edition, 2003-02-15) has been adopted without modification(IDT) as CSA Standard CAN/CSA-ISO/IEC 7064:04, which has been approved as a National Standard of Canada bythe Standards Council of Canada.ISBN 1-55397-336-4 January 2004The Canadian Standards Association (CSA), The Standards Co

3、uncil of Canada is theunder whose auspices this National Standard has been coordinating body of the National Standards system, produced, was chartered in 1919 and accredited by a federation of independent, autonomousthe Standards Council of Canada to the National organizations working towards the fu

4、rtherStandards system in 1973. It is a not-for-profit, development and improvement of voluntarynonstatutory, voluntary membership association standardization in the national interest.engaged in standards development and certification The principal objects of the Council are to foster activities. and

5、 promote voluntary standardization as a means CSA standards reflect a national consensus of of advancing the national economy, benefiting theproducers and users including manufacturers, health, safety, and welfare of the public, assisting consumers, retailers, unions and professional and protecting

6、the consumer, facilitating domestic organizations, and governmental agencies. The and international trade, and furthering internationalstandards are used widely by industry and commerce cooperation in the field of standards.and often adopted by municipal, provincial, and A National Standard of Canad

7、a is a standard whichfederal governments in their regulations, particularly in has been approved by the Standards Council ofthe fields of health, safety, building and construction, Canada and one which reflects a reasonableand the environment. agreement among the views of a number of capableIndividu

8、als, companies, and associations across individuals whose collective interests provide to theCanada indicate their support for CSAs standards greatest practicable extent a balance ofdevelopment by volunteering their time and skills to representation of producers, users, consumers, andCSA Committee w

9、ork and supporting the Associations others with relevant interests, as may be appropriateobjectives through sustaining memberships. The more to the subject in hand. It normally is a standardthan 7000 committee volunteers and the 2000 which is capable of making a significant and timelysustaining memb

10、erships together form CSAs total contribution to the national interest.membership from which its Directors are chosen. Approval of a standard as a National Standard ofSustaining memberships represent a major source of Canada indicates that a standard conforms to theincome for CSAs standards developm

11、ent activities. criteria and procedures established by the StandardsThe Association offers certification and testing Council of Canada. Approval does not refer to theservices in support of and as an extension to its technical content of the standard; this remains thestandards development activities.

12、 To ensure the continuing responsibility of the accreditedintegrity of its certification process, the Association standards-development organization.regularly and continually audits and inspects products Those who have a need to apply standards arethat bear the CSA Mark. encouraged to use National S

13、tandards of CanadaIn addition to its head office and laboratory complex whenever practicable. These standards are subject in Toronto, CSA has regional branch offices in major to periodic review; therefore, users are cautioned centres across Canada and inspection and testing to obtain the latest edit

14、ion from the organizationagencies in eight countries. Since 1919, the preparing the standard.Association has developed the necessary expertise to The responsibility for approving National Standards meet its corporate mission: CSA is an independent of Canada rests with theservice organization whose m

15、ission is to provide an Standards Council of Canadaopen and effective forum for activities facilitating the 270 Albert Street, Suite 200exchange of goods and services through the use of Ottawa, Ontario, K1P 6N7standards, certification and related services to meet Canadanational and international nee

16、ds.For further information on CSA services, write toCanadian Standards Association5060 Spectrum Way, Suite 100Mississauga, Ontario, L4W 5N6CanadaAlthough the intended primary application of this Standard is stated in its Scope, it is importantto note that it remains the responsibility of the users t

17、o judge its suitability for their particular purpose.Registered trade-mark of Canadian Standards AssociationCAN/CSA-ISO/IEC 7064:04 Information technology Security techniques Check character systemsJanuary 2004 Canadian Standards Association CSA/1CAN/CSA-ISO/IEC 7064:04Information technology Securit

18、ytechniques Check charactersystemsCSA PrefaceStandards development within the Information Technology sector is harmonized with internationalstandards development. Through the CSA Technical Committee on Information Technology (TCIT),Canadians serve as the Canadian Advisory Committee (CAC) on ISO/IEC

19、Joint Technical Committee 1 onInformation Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO memberbody for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of theInternational Telecommunication Union (ITU), Canada participates in the Inte

20、rnational Telegraph andTelephone Consultative Committee (ITU-T).This International Standard was reviewed by the CSA TCIT under the jurisdiction of the StrategicSteering Committee on Information Technology and deemed acceptable for use in Canada. (Acommittee membership list is available on request fr

21、om the CSA Project Manager.) From time to time,ISO/IEC may publish addenda, corrigenda, etc. The CSA TCIT will review these documents for approvaland publication. For a listing, refer to the CSA Information Products catalogue or CSA Info Update orcontact a CSA Sales representative. This Standard has

22、 been formally approved, without modification, bythe Technical Committee and has been approved as a National Standard of Canada by the StandardsCouncil of Canada.January 2004 Canadian Standards Association 2004All rights reserved. No part of this publication may be reproduced in any form whatsoever

23、without the prior permission ofthe publisher. ISO/IEC material is reprinted with permission. Where the words “this International Standard” appear in thetext, they should be interpreted as “this National Standard of Canada”. Inquiries regarding this National Standard of Canada should be addressed to

24、Canadian Standards Association 5060 Spectrum Way, Suite 100, Mississauga, Ontario, Canada L4W 5N6 1-800-463-6727 416-747-4044www.csa.caReference numberISO/IEC 7064:2003(E)ISO/IEC 2003INTERNATIONAL STANDARD ISO/IEC7064First edition2003-02-15Information technology Security techniques Check character s

25、ystems Technologies de linformation Techniques de scurit Systmes de caractres de contrle ISO/IEC 7064:2003(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which

26、 are embedded are licensed to and installed on the computer performing the editing. In downloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secretariat accepts no liability in this area. Adobe is a trademark of Adobe Systems Inco

27、rporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event th

28、at a problem relating to it is found, please inform the Central Secretariat at the address given below. ISO/IEC 2003 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopyin

29、g and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org ii ISO/IEC 2003 All rig

30、hts reservedISO/IEC 7064:2003(E) ISO/IEC 2003 All rights reserved iiiContents1Scope 12Termsanddefinitions 13Symbolsandnotation 24Typesofsystems 24.1 Pure systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24.2 Hybrid systems . . . . . . . . . . .

31、. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Complianceanddesignation 25.1 Strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25.2 Check character generating products . . . . . . . . . . . . . . . . . . . . . .

32、 . . . . . . . . . . . . . 25.3 Checking products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25.4 System designation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Specificationofpuresystems 36.1 Formula . .

33、. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36.2 Calculation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46.3 Check character position . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

34、 . . . . . . . . . . . . . 47Computationalmethodsforpuresystemswithonecheckcharacter 47.1 Pure system recursive method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47.1.1 Computation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

35、. . 47.1.2 Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57.2 Pure system polynomial method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57.2.1 Computation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

36、 . . . . . . . . . . . . . . 57.2.2 Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58Computationalmethodsforpuresystemswithtwocheckcharacters 68.1Computation68.2Exampleusingrecursivemethod.68.3 Example using polynomial method . . . . . . . . . .

37、 . . . . . . . . . . . . . . . . . . . . . . . . . . 78.4 Simplified procedure for ISO/IEC 7064, MOD 9710 . . . . . . . . . . . . . . . . . . . . . . . . . . 79Specificationforhybridsystems 79.1 Formula . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

38、 . . 79.2 Check character position . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 810Computationalmethodforhybridsystems 810.1Hybridsystemrecursivemethod.810.1.1 Computation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

39、10.1.2Example.8Annex A (informative) Criteria for the selection of check character systems for applications . 10Annex B (informative) Check character systems for other alphabets . 12Bibliography 13ISO/IEC 7064:2003(E) iv ISO/IEC 2003 All rights reservedForeword ISO (the International Organization fo

40、r Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective or

41、ganization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information techn

42、ology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standard

43、s adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subj

44、ect of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 7064 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 27, IT Security techniques. This first edition of ISO/IEC 7064 cancels and repl

45、aces ISO 7064:1983, which has been technically revised. Note,however, that implementations which comply with ISO 7064:1983 will be compliant with ISO/IEC 7064:2003. ISO/IEC 7064:2003(E) ISO/IEC 2003 All rights reserved vIntroductionThe need for standardization of check character systems was determin

46、ed by the following considerations:a)ofthemultitudeofsystemsinuse,manyhaveverysimilarcharacteristics,andmuchofthevarietyfailstoprovideanysignificantbenefit;b)fewoftheexistingsystemshavebeenthoroughlyverifiedmathematicallyandseveralhaveseriousdefects;c) the variety of systems undermines the economics

47、 of products which generate or validate check characters, andfrequentlypreventsthecheckingofinterchangeddata.Therefore a small set of compatible systems were selected to cope with various application needs; they werevalidated, and within the constraints of each application, offer high protection aga

48、inst typical transcription andkeying errors.Existing check character systems as specified in ISO 2108, ISO 2894 and ISO 6166 are used in special applicationfields (ISO 2894 has been withdrawn). These do not however, achieve the error detection rate of the systemsspecified in this International Standard.Annex A summari