1、BRITISH STANDARD BS ISO/IEC 7816-5:2004 Identification cards Integrated circuit cards Part 5: Registration of application providers ICS 35.240.15 BS ISO/IEC 7816-5:2004 This British Standard was published under the authority of the Standards Policy and Strategy Committee on 31 March 2008 BSI 2008 IS
2、BN 978 0 580 62215 1 National foreword This British Standard is the UK implementation of ISO/IEC 7816-5:2004. The UK participation in its preparation was entrusted to Technical Committee IST/17, Cards and personal identification. A list of organizations represented on this committee can be obtained
3、on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. Compliance with a British Standard cannot confer immunity from legal obligations. Amendments/corrigenda issued since publication Da
4、te Comments Reference number ISO/IEC 7816-5:2004(E)INTERNATIONAL STANDARD ISO/IEC 7816-5 Second edition 2004-12-01 Identification cards Integrated circuit cards Part 5: Registration of application providers Cartes didentification Cartes circuit intgr Partie 5: Enregistrement des fournisseurs dapplic
5、ation BS ISO/IEC 7816-5:2004ii iiiContents Page Foreword iv 1 Scope 1 2 Normative references . 1 3 Terms, definitions and abbreviated terms 1 3.1 Terms and definitions. 1 3.2 Abbreviated terms. 1 4 Registration of international identifiers 2 4.1 Request and registration procedures. 2 4.2 Appeal proc
6、ess . 2 4.3 Responsibilities of applicants . 3 5 Sponsoring Authorities 3 5.1 Eligibility to become a Sponsoring Authority3 5.2 Responsibilities. 3 6 Registration Management Group (RMG) 4 6.1 Constitution . 4 6.2 Responsibilities. 4 6.3 Voting procedures 5 7 Registration Authority 5 7.1 Appointment
7、5 7.2 Resignation 5 7.3 General reponsibilities . 5 7.4 Responsibilities to applicants requesting a RID . 6 8 The register of RIDs 6 8.1 Publication and availability 6 8.2 Contents. 6 Annex A (normative) Registration form for a registered application provider identifier of category A . 7 A.1 To be c
8、ompleted by the requesting organization 7 A.2 To be completed by national standards body 7 A.3 To be completed by ISO/IEC 7816-5 registration authority 7 Annex B (informative) National registration 8 B.1 Introduction . 8 B.2 Operation of national numbering systems.8 B.3 Contact with the registration
9、 authority. 8 B.4 Role of registration management group. 8 BS ISO/IEC 7816-5:2004iv Foreword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of
10、 ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizat
11、ions, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Dir
12、ectives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of t
13、he national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 7816-5 was prepared by Joint Technical Committee I
14、SO/IEC JTC 1, Information technology, Subcommittee SC 17, Cards and personal identification. This second edition cancels and replaces the first edition (ISO/IEC 7816-5:1994) and incorporates the Amendment ISO/IEC 7816-5:1994/Amd.1:1996). The technical content of Clauses 5 and 6 of the first edition
15、is now to be found in the second edition of ISO/IEC 7816-4, and Annex A has been technically revised. ISO/IEC 7816 consists of the following parts, under the general title Identification cards Integrated circuit cards: Part 1: Cards with contacts: Physical characteristics Part 2: Cards with contacts
16、: Dimensions and location of the contacts Part 3: Cards with contacts: Electrical interface and transmission protocols Part 4: Organization, security and commands for interchange Part 5: Registration of application providers Part 6: Interindustry data elements for interchange Part 7: Interindustry c
17、ommands for Structured Card Query Language (SCQL) Part 8: Commands for security operations Part 9: Commands for card management Part 10: Cards with contacts: Electrical interface for synchronous cards Part 11: Personal verification through biometric methods Part 12: Cards with contacts: USB electric
18、al interface and operating procedures Part 15: Cryptographic information application BS ISO/IEC 7816-5:20041Identification cards Integrated circuit cards Part 5: Registration of application providers 1 Scope This part of ISO/IEC 7816 specifies a registration procedure for application providers, and
19、establishes the authorities and procedures to ensure and optimize the reliability of this registration. NOTE 1 ISO/IEC 7816-4 defines the structures of registered application provider identifiers (RIDs), and how to use them. A registered application provider identifier (RID) consists of five bytes.
20、NOTE 2 In international RIDs (assigned by the international registration authority), the first quartet is set to A. NOTE 3 In national RIDs (assigned by a national Registration Authority), the first quartet is set to D and a relevant country code follows (see Annex B). 2 Normative references The fol
21、lowing referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 7816-4, Identification cards Integrated circuit
22、cards Part 4: Organization, security and commands for interchange 3 Terms, definitions and abbreviated terms 3.1 Terms and definitions For the purposes of this document, the following terms and definitions, given in ISO/IEC 7816-4, apply. 3.1.1 application provider entity providing the components th
23、at make up an application in the card 3.1.2 registered application provider identifier data element (five bytes) that uniquely identifies an application provider 3.2 Abbreviated terms RID Registered application provider identifier RMG Registration management group BS ISO/IEC 7816-5:20042 4 Registrat
24、ion of international identifiers 4.1 Request and registration procedures 4.1.1 Procedure for requesting a RID An application provider (including international organisations) shall apply to the standards body of its related country (i.e. national standards body), or in the absence of a national stand
25、ards body, to the secretariat of the ISO technical body responsible for this part of ISO/IEC 7816 for the assignment of a RID. The applicant shall use the form shown in Annex A. Registration forms are also available, on request, from the Registration Authority, the secretariat of the Registration Ma
26、nagement Group (RMG) and the secretariat of the ISO technical body responsible for this part of ISO/IEC 7816. The national standards body or the secretariat of the ISO technical body responsible for this part of ISO/IEC 7816 then acts as the “Sponsoring Authority“ (see Clause 5) with respect to the
27、request. 4.1.2 Criteria for approval of a request for a RID Requests for a RID shall meet all the following criteria: a) the applicant shall be a corporate entity or its subsidiaries operating under a specific legislative regulation; b) the applicant requesting a RID shall not already have an intern
28、ational RID (registration category A). Exceptionally an applicant may apply for more than one RID, subject to decision by the RMG. 4.1.3 Criteria for rejection of a request for a RID A request for a RID shall be rejected if any of the following conditions exist: a) the applicant is not an applicatio
29、n provider as defined by 3.1.1; b) the applicant has requested a specific number or the reservation in the register of a specific number or has made a request which is outside the scope of this part of ISO/IEC 7816. NOTE Where special circumstances exist, the Sponsoring Authority may approve a reque
30、st and forward the request to the Registration Authority for assignment of a number. All such assignments must be reported by the Sponsoring Authority to the RMG. 4.2 Appeal process 4.2.1 Appeal bodies Where a request has been rejected by a Sponsoring Authority, the applicant may appeal to the secre
31、tariat of the RMG (see Clause 6). Where a request has been rejected by the RMG, the applicant may appeal to the ISO technical body responsible for this part of ISO/IEC 7816 through the secretariat of that ISO technical body. Applicants may submit for appeal requests that have been rejected by the IS
32、O technical body responsible for this part of ISO/IEC 7816 to the ISO Central Secretariat. Appeal against rejection of a request shall be submitted to the appropriate body within 90 days of the date of the letter of rejection. BS ISO/IEC 7816-5:200434.2.2 Information to be provided Where the Sponsor
33、ing Authority has rejected a request, the applicant shall provide the following information to the relevant appeal body in support of the appeal: a) Statement of which rejection clause (see 4.1.3) is disputed and why the applicant believes that the rejected request fulfills the criteria for acceptan
34、ce (see 4.1.2). b) Statement of special circumstances whereby a specific requirement of the rejected request can be met, but such requirement is outside the current procedures and criteria for acceptance outlined in this this part of ISO/IEC 7816. 4.3 Responsibilities of applicants The responsibilit
35、ies of applicants shall be: a) to comply fully with the numbering system defined in ISO/IEC 7816-4 and with the procedures for requesting RIDs as contained in this part of ISO/IEC 7816; b) to forward to its national standards body, or in the absence of a national standards body, to the secretariat o
36、f the ISO technical body responsible for this part of ISO/IEC 7816, a completed registration form, (see Annex A) together with the requisite fee; NOTE The registration fee is not refundable. c) to retain the completed registration form containing the RID assigned to the applicant by the Registration
37、 Authority; d) to inform the Sponsoring Authority of any modification to the data related to the assigned RID. 5 Sponsoring Authorities 5.1 Eligibility to become a Sponsoring Authority The following bodies may act as Sponsoring Authorities in processing requests for RIDs: a) any national member body
38、 of ISO (or agent appointed to act for its national member body); and b) the ISO technical body responsible for this part of ISO/IEC 7816 (or agent appointed to act for the ISO technical body). 5.2 Responsibilities The responsibilities of a Sponsoring Authority shall be: a) to comply fully with the
39、numbering system defined in ISO/IEC 7816-4 and with the procedures for requesting RIDs as contained in this part of ISO/IEC 7816; b) to process within 30 days of receipt of requests, requests for RIDs from within their countries or areas of responsibility; c) to notify the applicant in writing, with
40、in 30 days of receipt of the request, as to the disposition of their request. If rejected, to advise applicant of the reason(s); d) to ensure that section A1 of the registration form has been filled in correctly; BS ISO/IEC 7816-5:20044 e) to confirm whether or not the applicant already has an inter
41、national RID; f) to forward to the Registration Authority (see Clause 7) requests for RIDs that meet the approval criteria, together with the requisite fee in a form determined by the Registration Authority; g) on receipt of the number assignment from the Registration Authority, to inform the applic
42、ant of the number assignment, returning the completed registration form containing the number assignment to the applicant, informing it of the requirement to retain the completed registration form as a permanent record; h) to reject requests for a specific number and for reservation of a specific nu
43、mber or any request outside the scope of this part of ISO/IEC 7816; or, where special circumstances exist, to approve such a request and to put forward a copy of the relevant papers to the RMG for review; i) to respond to general enquiries covering this part of ISO/IEC 7816; j) to establish and main
44、tain a national numbering system where necessary according to Annex B; k) to forward to the Registration Authority any modification to the data related to an assigned RID. 6 Registration Management Group (RMG) 6.1 Constitution In order to effectively manage the Registration system for applications i
45、n IC cards, the ISO technical body responsible for this part of ISO/IEC 7816 has established a RMG, ISO/IEC JTC1/SC17/WG5, which is delegated to act on its behalf. The RMG shall be made up as follows: a) a representative of the Registration Authority who shall be a non-voting member of the RMG and s
46、hall be expected to attend all meetings; b) each P and L member of the ISO technical body responsible for this part of ISO/IEC 7816 is entitled to nominate one delegate and one alternate to the RMG. The alternate may attend all meetings but is entitled to vote only in the absence of the principal de
47、legate; c) the convenor of the RMG and the secretariat of the RMG, nominated from the membership of the RMG. 6.2 Responsibilities The responsibilities of the RMG shall be: a) to ensure that applicants whose requests do not fulfill the conditions in 4.1.2 are rejected and informed of the cause of the
48、 rejection and furthermore informed of their right to appeal (see 4.2); b) to provide, on request, guidance and counsel to any national standards body on the establishment of a national numbering system; c) to provide guidance to Sponsoring Authorities on requests which demonstrate special circumsta
49、nces and requests for specific numbers. This guidance shall be decided by resolution at a meeting or in writing following a letter ballot; d) to review at each meeting of the RMG the Registration Management Report and the Summary of the Register of Issued Numbers Report received from the Registration Authority; e) to provide guidance to Sponsoring Authorities to ensure that they comply with the criteria laid down within this
