1、raising standards worldwide NO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAW BSI Standards Publication BS ISO/IEC 29167-1:2012 Information technology Automatic identification and data capture techniques Part 1: Air interface for security services and file management for RFID ar
2、chitectureBS ISO/IEC 29167-1:2012 BRITISH STANDARD National foreword This British Standard is the UK implementation of ISO/IEC 29167-1:2012. The UK participation in its preparation was entrusted to Technical Committee IST/34, Automatic identification and data capture techniques. A list of organizati
3、ons represented on this committee can be obtained on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2012. Published by BSI Standards Limited 2012 I
4、SBN 978 0 580 73943 9 ICS 35.040 Compliance with a British Standard cannot confer immunity from legal obligations. This British Standard was published under the authority of the Standards Policy and Strategy Committee on 31 March 2012. Amendments issued since publication Date Text affectedBS ISO/IEC
5、 29167-1:2012Reference number ISO/IEC 29167-1:2012(E) ISO/IEC 2012INTERNATIONAL STANDARD ISO/IEC 29167-1 First edition 2012-03-01 Information technology Automatic identification and data capture techniques Part 1: Air interface for security services and file management for RFID architecture Technolo
6、gies de linformation Techniques automatiques didentification et de capture de donnes Partie 1: Interface dair pour services de scurit et gestion des fichiers pour architecture RFID BS ISO/IEC 29167-1:2012 ISO/IEC 29167-1:2012(E) COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2012 All rights reserved. Unless o
7、therwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requester. ISO copyr
8、ight office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO/IEC 2012 All rights reservedBS ISO/IEC 29167-1:2012 ISO/IEC 29167-1:2012(E) ISO/IEC 2012 All rights reserved iiiForeword ISO (the Interna
9、tional Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees establishe
10、d by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the fiel
11、d of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft
12、International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this do
13、cument may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 29167-1 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 31, Automatic identification and data capture techniqu
14、es. ISO/IEC 29167 consists of the following parts, under the general title Information technology Automatic identification and data capture techniques: Part 1: Air interface for security services and file management for RFID architecture BS ISO/IEC 29167-1:2012 ISO/IEC 29167-1:2012(E) iv ISO/IEC 201
15、2 All rights reservedIntroduction ISO/IEC 29167 describes file management and security as applicable for ISO/IEC 18000. ISO/IEC 29167 is an optional extension to the ISO/IEC 18000 air interfaces. The ISO/IEC 18000 series of International Standards on radio frequency identification (RFID) for item ma
16、nagement does not offer strong security of the tag and interrogator data and identity. For example, the unique item identifiers (UII) of tags are typically transmitted to every other device in the RF field and can thus be easily tracked. Additionally, sensitive data such as passwords are typically t
17、ransmitted over RF without encryption and can easily be intercepted. Moreover, utilized passwords may be short in length. ISO/IEC 29167 fulfils the need for applications requiring effective security in the handling of sensitive information including the unauthorized interception and tracking of data
18、 and devices. ISO/IEC 29167 covers the air interface for interrogators and tags that have security mechanisms and/or file management on board. ISO/IEC 29167 only applies to tags that perform the computations that are required for the security and file management mechanisms. Tag to tag communication
19、is not excluded. BS ISO/IEC 29167-1:2012 INTERNATIONAL STANDARD ISO/IEC 29167-1:2012(E) ISO/IEC 2012 All rights reserved 1Information technology Automatic identification and data capture techniques Part 1: Air interface for security services and file management for RFID architecture 1 Scope This par
20、t of ISO/IEC 29167 defines the architecture for security and file management for the ISO/IEC 18000 air interface standards for radio frequency identification (RFID) devices. It provides a common technical specification for security and file management for RFID devices that can be used by ISO committ
21、ees developing RFID application standards. This part of ISO/IEC 29167 specifies architecture for untraceability, security services, and file management as a further optional extension of the air interface. Both security and file management are defined in alignment with existing air interfaces and th
22、is part of ISO/IEC 29167 only covers extensions on security and file management beyond the scope of the ISO/IEC 18000 air interfaces. This part of ISO/IEC 29167 defines various security features called security mechanisms that can be implemented by a tag depending on the application. A tag can suppo
23、rt one, a subset, or all of the specified security mechanisms. For an interrogator it is possible to get information about the security mechanisms that are actually implemented and supported by a tag. Moreover, it has been considered that adding new security mechanisms remains possible. Besides sign
24、aling the presence of certain security services, further details of the mechanisms such as utilized encryption algorithm and key length also need to be specified and accessible. 2 Conformance In general it is assumed that all requirements defined in this part of ISO/IEC 29167 shall be fulfilled. A t
25、ag is compliant to this part of ISO/IEC 29167 if it supports one or more of the security mechanisms or file management mechanisms as defined in this part of ISO/IEC 29167. The discovery services are mandatory for interoperability. BS ISO/IEC 29167-1:2012 ISO/IEC 29167-1:2012(E) 2 ISO/IEC 2012 All ri
26、ghts reserved3 Normative references The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 15962
27、, Information technology Radio frequency identification (RFID) for item management Data protocol: data encoding rules and logical memory functions ISO/IEC 19762 (all parts), Information technology Automatic identification and data capture (AIDC) techniques Harmonized vocabulary 4 Terms and definitio
28、ns For the purposes of this document, the terms and definitions given in ISO/IEC 19762 (all parts) apply. 5 Safeguarding personal privacy and data 5.1 Motivation RFID technology enables the processing of data without physical contact or visible interaction between the interrogator and the tag. The t
29、echnology can deliver numerous economic and societal benefits. RFID applications hold the potential to process data relating to an identified or identifiable person who is being identified directly or indirectly. Furthermore, the potential exists for this technology to be used to monitor an individu
30、al through his/her possession of one or more items that contain a unique RFID item number. This interaction can happen without the individual concerned being aware of it. The functionality offered by ISO/IEC 29167 allows RFID applications to ensure privacy, integrity, authenticity and confidentialit
31、y of the data on the tag. This functionality includes organization of data and access control. ISO/IEC 29167, in combination with ISO/IEC 18000, addresses issues of privacy and security related to the use of RFID for Item Management. This part of ISO/IEC 29167 provides an overview, while details wil
32、l be described in the specific parts of ISO/IEC 29167 in combination with the corresponding parts of ISO/IEC 18000. ISO/IEC 29167 extends ISO/IEC 18000 with the following features: untraceability; authenticity; secure access to data and functions. 5.2 Features of this International Standard The tag
33、features and air interface commands in ISO/IEC 29167 enable the implementation of the following features in an RFID system: Untraceability: by putting the tag in a special mode (called untraceability mode) where the RFID tag hides all or part of its identity. Certify authenticity: by using one or mo
34、re air interface commands a tag can produce a certificate of authenticity. Verification of this certificate may require additional features such as key management to be implemented in the RFID system. BS ISO/IEC 29167-1:2012 ISO/IEC 29167-1:2012(E) ISO/IEC 2012 All rights reserved 3 Secure access to
35、 tag data and functions: data can be organized in files, access to these files and tag functions can be configured and transmission of the data can be secured. In addition to these features, the tag also provides the necessary information about the features and air interface commands it supports. 5.
36、3 Safeguarding personal privacy and data on the tag Privacy and information security features should be built into the RFID applications before their widespread use 1) . ISO/IEC 29167 is intended to assist RFID application operators in taking reasonable measures to achieve security and privacy-by-de
37、sign. The main properties that need to be protected are: 1) Identity of the tag The identity of the tag can be protected by the untraceability feature. Untraceability prevents unauthorized tracking of a tag. Untraceability prevents associating the tag to an identified or identifiable person. 2) Data
38、 on the tag Access to the data (and other features of the tag) may be protected by verifying the authenticity of the interrogator. The data on the tag may be organized in files. Access rights may be associated to each individual file. 3) Communication between the tag and the interrogator The data th
39、at needs to be exchanged between the tag and the interrogator can be overheard by somebody who intercepts this communication. The integrity and confidentiality of the data may be protected by cryptographic methods. 5.4 Implications of security 5.4.1 Key management Use of cryptography requires the ma
40、nagement of secrets, sometimes including keys. Management of secrets increases system complexity. For example, the secrets should be communicated and stored securely. Complexity increases with multiple custodians of secrets in the system. Mechanisms to recover from compromised secrets increases comp
41、lexity of the system. CAUTION Inadequate management of secrets can render an entire supply chain ineffective. 5.4.2 Increased resource requirements for RFID components Implementation of cryptography requires additional resources on the interrogator and/or on the tag. 5.4.3 Performance Application of
42、 cryptography impacts power and time consumption for the RFID components and may degrade system performance. 1) For further information see related document of the European Commission: 9, 10, 11, 12, 13, 14, 15 and 16. BS ISO/IEC 29167-1:2012 ISO/IEC 29167-1:2012(E) 4 ISO/IEC 2012 All rights reserve
43、d6 Security mechanisms 6.1 General This part of ISO/IEC 29167 describes a framework to implement security mechanisms used in an RFID system. The other parts of ISO/IEC 29167 will specify detailed implementation requirements for the corresponding frequencies and define the command set. The tag shall
44、allow access control by security mechanisms as will be specified in other parts of ISO/IEC 29167. The mechanisms specify how data and resources on the tag can be accessed and retrieved in a secure manner and how the data-communication channel between the interrogator and the tag can be protected aga
45、inst attacks (tracking, cloning, relaying etc.). 6.2 Untraceability Untraceability is the property that controls if and how the tag can be identified. Untraceability ranges from uniquely identifiable (no untraceability) to completely untraceable when a tag does not emit any (identifiable) informatio
46、n. For most practical applications the highest level of untraceability will correspond to that of a tag that is detectable and for which the physical communication properties can be determined: e.g. ISO/IEC 18000-6 type C physical layer. This untraceability level could be realized by, for instance,
47、ensuring that all untraceable tags of the same family reply to identical queries with a response that is formatted identically and that all the fields of this reply are either: the same for all tags, or undistinguishable from random. Examples in which information is revealed include: no information
48、(ultimate untraceability), presence and tag family (highest practical untraceability) cryptographic suite parameters (e.g. information about authentication required to change the untraceability settings), partial identity (e.g. manufacturer info), and full identity (e.g. serial number). The other pa
49、rts of ISO/IEC 29167 will define the detailed behavior of the untraceability mode for particular ISO/IEC 18000 compatible tags. Those parts will also specify how the untraceability mode is enabled and disabled. 6.3 Physical mechanisms Physical security mechanisms are security functions based on physical properties, such as communication distance reduction, or physical interaction such as a push button. The other parts of ISO/IEC 29167 will define the detailed behavior of the
