KS X ISO IEC 7816-9-2007 Identification cards－Integrated circuit(s) cards with contacts－Part 9：Additional interindustry commands and security attributes《识别卡 接触式IC卡 第9部分 部门间附加命令和安全属.pdf

1、 KS X ISO/IEC 7816 9KSKSKSKSSKSKSKS KSKSKS SKSKS KSKS SKS KS ID IC9： KS X ISO/IEC 7816 9 : 2007 2007 11 30 http:/www.kats.go.krKS X ISO/IEC 7816 9： 2007 ： e- () ( ) () ( ) : (http:/www.standard.go.kr) ： : 2001 12 31 : 2007 11 30 2007-1129 ： e- ： e- ( 02-509-7262) (http:/www.kats.go.kr ). 7 5 , . KS

2、X ISO/IEC 7816 9： 2007 i e- . KS X ISO/IEC 7816 9 A( ) B( ) KS X ISO/IEC 7816 “ID IC ” . 1 : (KS X 6507 1) 2 : (KS X 6507 2) 3 : (KS X 6507 3) 4 : (KS X ISO/IEC 7816 4) 5 : (KS X ISO/IEC 7816 5) 6 : (KS X ISO/IEC 7816 6) 7 : (SCQL)(KS X ISO/IEC 7816 7) 8 : (KS X ISO/IEC 7816 8) 9 : (KS X ISO/IEC 781

3、6 9) 10 : (KS X ISO/IEC 7816 10) KS X ISO/IEC 7816 9 : 2007 ID IC 9： Identification cardsIntegrated circuit(s) cards with contacts Part 9：Additional interindustry commands and security attributes 2000 1 ISO/IEC 7816 9, Identification cards Integrated circuit(s) cards with contacts Part 9： Additional

4、 interindustry commands and security attributes , . 1 . life cycle . 2 . ( ) . ( ) ( .) . KS X ISO IEC 7816 4： 2002, ID IC 4： ISO IEC 7816 4： 1995, Information technology Identification card Integrated circuit(s) ards with contacts Part 4： Interindustry commands for interchange) KS X ISO IEC 7816 7：

5、 2002, ID IC 7： (SCQL) ISO IEC 7816 7： 1999, Information technology Identification cards Integrated circuit(s) ards with contacts Part7： Interindustry commands for Structured Card Query Language(SCQL) KS X ISO IEC 7816 8： 2001, ID IC 8： ISO/IEC 7816 8： 1999, Information technology Identification car

6、ds Integrated circuit(s) cards with contacts Part 8： Security related interindustry commands KS X ISO/IEC 7816 9： 2007 2 ISO/IEC TR 9577： 1996, Information technology Protocol identification in the network layer. 3 . 3.1 AND Template 3.2 (access rule) ( ) ( ) 3.3 (application) , 3.4 OR Template 3.5

7、security attributes) . 4 . AM access mode AM_DO access mode data object APDU application protocol data unit ARR access rule references AT authentication template BER basic encoding rules(of ASN.1) CRT control reference template DE data element DF dedicated file DO data object EF elementary file FCP

8、 file control parameters File ID file identifier IFD interface device LCS life cycle status LCSI life cycle status integer MF master file RF radio frequency RFU reserved for future use SC security condition KS X ISO/IEC 7816 9： 2007 3 SC_DO security condition data object SE security environment SE#

9、security environment number SM security messaging SW1-SW2 status words TLV tag. Length, value 5 1 (FCP, tag 62) . 1 7816 Tag L Value 4 80 2 Transparent EFs4 81 2 4 9 82 1 2 3 4 5 or 6 1 2 2 1 2 EFs EFs EFs 4 83 2 4 84 116 DF DFs 4 85 Var 4 86 Var , 4 87 2 FCI EF 9 88 0or 1 EF , b8 b4 . b3, b2, b1 00

10、0 EFs 9 8A 1 life cycle (LCSI) 9 8B Var , 9 8C Var , 9 8D 2 SE DFs 9 A0 Var DOs 9 A1 Var 9 A2 Var EF / , EF (tag 88)| (tag 51) KS X ISO/IEC 7816 6(ISO/IEC 7816 6)| 2 DFs 9 A5 Var , . 9 AB Var , 1 tag 82 DOS . 2 EF EF . EF tag 88 (tag 83) 5 . EF FCP tag 88 DO EF EF . KS X ISO/IEC 7816 9： 2007 4 6 lif

11、e cycle 6.1 , A life cycle . life cycle . A . life cycle (LCS) . life cycle life cycle , . life cycle . LCS . life cycle . ( ) . 6.2 LCS . LCS . KS X 6507 KS X ISO/IEC 7816(ISO/IEC 7816) . current LCS . life cycle 4 . life cycle . 2 . 6.3 life cycle LCS . , : , : , : KS X ISO/IEC 7816 9： 2007 5 , .

12、 . A . life cycle (KS X ISO/IEC 7816 4 ) , 2 . Master file(MF, KS X ISO/IEC 7816 4 ) , . 6.4 LCS Integer LCS Integer(LCSI tag 8A) current LCS . 2 . 2 LCSItag 8A b8b5 b4 b3 b2 B1 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 1 1 0 0 1 0 1 1 1 0 7 7.1 (KS X ISO/IEC 7816 4 ). , . . . : : 7.2 . KS X ISO/IEC 7816 9

13、 2007 6 . . EF DF . . . ( : ) . 8. . 7.3 (SEs, KS X ISO/IEC 7816 8 ) SE Template DO(tag 7B) . SE template DO SE SE# DO(tag 80), LCSI DO(tag 8A) CRTs . LCSI SE life cycle . SE SE LCSI . LCSI , SE . tag DOs CRT( DOs) DOs (OR ). SE SE#(#1) . MANAGE SECURITY ENVIRONMENT CRT CRT CRT (tag 95) . 3 . KS X

14、ISO/IEC 7816 9： 2007 7 3 CRT DO b8 b7 b6 b5 b4 b3 b2 b1 1 (DST, CCT) (CT) (AT) 1 (DST, CCT) 1 SM (CCT, CT, DST) 1 SM (CCT, CT, DST) 1 (AT) 1 (AT) RFU( 00) 7.4 . tag 5F4B DE DO . DO, tag 5F4B template(AT) . 8 8.1 . . (8.4 ) TLV (8.5 ) 8.2 8.2.1 FCI (FCI, KS X ISO/IEC 7816 4 ) . 1 . 8.2.2 SCQL SCQL SC

15、QL CREATE TABEL CREATE VIEW . , SCQL tag 8C, 8B or AB DO . KS X ISO/IEC 7816 9： 2007 8 8.2.3 DF FCI ( 1 ). DOs, tag AO template DO taglist DO( DOs ) . 8.3 (tag A1) template , (RF) . Template DOs 86, 8B, 8C, A0, AB DO( 4 5 ) . 4 DO Tag L 91 1 DE 5 DE b8b3 b2b1 000000 RFU(0 .) 00 01 10 11 . RFU ( ICC

16、) RF( ICC ) RF( ICC ) 8.4 8.4.1 . . (AM) , 6 9 . (SC) , 10 . 8.4.2 AM AM (b8 ) 1 SC . SC AM . DO, tag 8C value filed , OR . 8.4.3 6 9 AM . KS X ISO/IEC 7816 9： 2007 9 DFs; Efs; Table view; DOs. AM 1 b7 b1 SC . 0 SC . 6 DFS AM b8 b7 b6 b5 b4 b3 b2 b1 0 b7b1 1 b3b1 b7.b4 1 DELETE FILE(self) 1 TERMINAT

17、E CARD USAGE(MF), TERMINATE DF 1 ACTIVATE FILE 1 DEACTIVATE FILE 1 CREATE FILE_ DF creation 1 CREATE FILE_ DF creation 1 CREATE FILE_ DF (child) 7 EFS AM b8 b7 b6 b5 b4 b3 b2 b1 0 b7b1 1 b3b1 b7.b4 1 DELETE FILE 1 TERMINATE EF 1 ACTIVATE FILE 1 DEACTIVATE FILE 1 WRITE BINARY, WRITE RECORD, APPEND RE

18、CORD 1 UPDATE BINARY, UPDATE RECORD, ERASE BINARY 1 READ BINARY, READ RECORD, SEARCH BINARY, SEARCH RECORD 8 AM b8 b7 b6 b5 b4 b3 b2 b1 0 b7b1 1 b3b1 b7.b4 1 CREATE USER, DELETE USER 1 GRANT, REVOKE 1 CREATE TABLE, CREATE VIEW, CREATE DICTIONARY 1 DROP TABLE, DROP VIEW 1 INSERT 1 UPDATE, DELETE 1 FE

19、TCH KS X ISO/IEC 7816 9： 2007 10 9 DOS AM b8 b7 b6 b5 b4 b3 b2 b1 0 b7b1 1 b3b1 b7.b4 0(1 RFU) 0(1 RFU) 0(1 RFU) 0(1 RFU) 1 1 PUT DATA 1 GET DATA , 6 9 . 8.4.4 SC . 4 . SE b4 b1 . SE b8 b5 , , . SC 10 . 10 b8 b7 b6 b5 b4.b1 0 1 0 1 0 1 0 1 0000 1111 0000 00011110 1111 . . SE . SE# RFU 0 1 1 1 1 ( )

20、b8 1 b7 b5 . b8 0 b7 b5 . b7 1 b4 b1 SE CRT SM APDU, APDU ( 3 ). 8.5 KS X ISO/IEC 7816 9： 2007 11 8.5.1 . . AM_DO. 11 . SC_DOs, 13 . tag AB DO Field ( 1 ). 8.5.2 (AM_DO) AM_DO . AM ( 6, 7, 8, 9 ) SC_DOs AM_DO . 11 AM_DOs . 11 AM_DOs tag L 80 1 AM 6 9 818F (：INS-P2 |INS-P2) CLAINSP1P2 , 12 b4 b1 tag

21、9C tag 81 8F AM_DO field CLA-INS-P1-P2 . Tag b4 b1 indicated reference value 12 . 12 AM_DO tag b4 b1 b4 b3 b2 b1 1 CLA . 1 INS . 1 P1 . 1 P2 . CLA 0 . 8.5.3 objects(SC_DO) SC_DO AM_DO object . KS X ISO/IEC 7816 9： 2007 12 object (： ). . 13 SC_DOs . 13 SC_DOs Tag TSC_DO L 90 00 97 00 . A4 CRT CRT ( )