1、I 3404589 0303734 459 BRITISH STANDARD Identification card systems - Telecommunicat ions integrated circuit) cards and terminals Part 1. System overview The European Standard EN 726-1 : 1994 has the status of a British Standard BS EN 726-1 : 1995 II 3404589 0103735 375 BS EN 726-1 : 1995 Committees
2、responsible for this British Standard The preparation of this British Standard was entrusted to Technical Committee ISTl17, upon which the following bodies were represented: Ailec Associates APACS (Barclaycard) APACS (Barclays Bank) APACS (Girobank) APACS (Lloyds Bank) APACS (Midland Bank) APACS (Na
3、t West Bank) Association for Payment Clearing Services (APACS) BT Laboratories Celinet Consumer Policy Committee of BSI Electricity Association GEC Card Technology HMSO News Datacom Ltd. Rochford Thompson Equipment Shell UK Thorn Transit Systems International Vodafone Ltd. Westinghouse Cubic Ltd. Th
4、is British Standard, having been prepared under the direction of the Information Systems Technology Assembly, was published under the authority of the Standards Board and comes into effect on 15 August 1995 O BSI 1995 The following BSI references relate to the work on this standard: Committee refere
5、nce IST/17 Draft for comment 9262270 DC ISBN O 580 24242 O Amendments issued since publication md. No. 1 Date Text affected I 3404589 O303736 221 = BS EN 726-1 : 1995 Contents Page Committees responsible Inside front cover National foreword ii Foreword 2 Rxt of EN 726-1 3 i I 3404589 0103737 Lb8 BS
6、EN 726-1 : 1995 Nat ional foreword This Part of BS EN 726 has been prepared by Technical Committee IST/17 and is the English language version of EN 726-1 : 1994 Identification card systems - Telecommunications integrated circuit(s) cards and temzinals - Part 1 : System Overview published by the Euro
7、pean Committee for Standardization (CEN) This British Standard is the English language version of EN 726-1 : 1994 and implements it as the UK national standard. This British Standard is published under the direction of the Information Systems Ethnology Assembly whose Technical Committee IST/17 has t
8、he responsibility to: - aid enquirers to understand the text; - present to the responsible international committee any enquiries on interpretation, or proposals for change, and keep UK interests informed; - monitor related international and European developments and promulgate them in the UK. NOT. I
9、nternational and European Standards, as well as overseas standards, are available from Customer Services, BSI, 389 Chiswick High Road, London W4 4AL. Cross references EN 726-3 : 1994l) International standard Corresponding British Standard BS EN 726-3 : 1995 Identgication card systems - %lecommunicat
10、ions integrated circuit(s) cards and z2mninals - Part 3: Application independent card requirements BS EN 726-4 : 1995 Identgication card systems - %lecommunications integrated circuit(s) cards and terminals - Part -4: Application independent card related terminal requirements EN 726-4 : 1994l) Compl
11、iance with a British Standard does not of itself confer immunity from legal obligations. 1 1 Part 2, Part 5, Part 6 and Part 7 of BS EN 726 are in preparation ii I 3404589 0303738 UT4 W EUROPEAN STANDARD EN 726-1 NORME EUROPENNE EUROPISCHE NORM December 1994 ICs 33.120.00; 35.240.60 Descriptois: Tel
12、ecommunications, IC cards, telecommunication terminals, specifications English version Identification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 1: System overview Systemes de cartes didentification - Cartes circuit intgr et terminaux pour les tlcommunications
13、 - fr Telekommunikationszwecke - Partie 1: Gnralits Identifikationskartensysteme - Anforderungen an Chipkarten und Endgerte Teil 1: Systemberblick This European Standard was approved by CEN on 1994-12-05. GEN members are bound to comply with the CENKENELEC Internal Regulations which stipulate the co
14、nditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the Central Secretariat or to any CEN member. This European Standard exists in thr
15、ee official versions (English, French, German). A version in any other language made by translation under the responsibility of a CEN member into its own language and notified to the Central Secretariat has the same status as the official versions. GEN members are the national standards bodies of Au
16、stria, Belgium, Denmark, Finland, France, Germany, Greece, Iceland, Ireland, Italy, Luxembourg, Netherlands, Norway, Portugal, Spain, Sweden, Switzerland and United Kingdom. CEN European Committee for Standardization Comit Europen de Normalisation Europisches Komitee fr Normung Central Secretariat:
17、rue de Stassart 36, B-1050 Brussels 1 O 1994 Copyright reserved to CEN members Ref. No. EN 726-1 : 1994 E = 3404589 0303739 T30 Page 2 EN 726-1 : 1994 Foreword This European standard was prepared by ETSI STC TE9 and adopted by CEN/TC 224 Machine-readable cards, related device interfaces and operatio
18、ns, the secretariat of which is held by AFNOR. This document was submitted to the formal vote and the result was positive. This European standard shall be given the status of a national standard, either by publication of an identical text or by endorsement, at the latest by June 1995, and conflictin
19、g national standards shall be withdrawn at the latest by June 1995. According to CENCENELEC Internal Regulations, the following countries are bound to implement this European Standard: Austria, Belgium, Denmark, Finland, France, Germany, Greece, Iceland, Ireland, Italy, Luxembourg, Netherlands, Norw
20、ay, Portugal, Spain, Sweden, Switzerland and United Kingdom. This European standard consists of the following parts, under the general title Identifkation card systems - ?lecommunicutions integrated circuit(s) curds and temzinuk: Part 1: Part 2: Part 3: Part 4: Part 5: Part 6: Part 7: systems overvi
21、ew; Security frumork; Application indejoendent card requirements; Application independent curd related temzinul requirements; Payment methods; %kcommunicution features; Security module. Contents 1 3 3.1 3.2 4 4.1 4.2 4.3 4.4 4.5 4.6 4.7 5 5.1 5.2 5.2.1 5.2.2 5.2.3 5.2.4 5.2.5 Scope Definitions and a
22、bbreviations Definitions Abbreviations Organization Part 1: System Overview Part 2: Security framework Part 3: Application independent card requirements Part 4: Application independent card related terminal requirements Part 5: Payment methods Part 6: Telecommunication features Part 7: Security modu
23、le General concepts System overview Phases in the card life-cycle IC- and card- manufacturing phase Card preparation (issuing) phase Application preparation (phase 3) Usage phase (phase 4) Termination of use (phase 5) (phase 1) (phase 2) Page 3 3 3 4 4 4 4 4 5 5 5 5 6 6 6 6 8 8 8 8 I 3404589 0303740
24、 752 Page 3 EN 726-1 : 1994 1 Scope EN 726 defines the requirements for integrated circuit (IC) cards and card terminals for telecommunication use in Europe. These requirements are to be used as a European standard to cover multi-application cards to be used for services available on the public tele
25、communications networks via card operated terminals provided by the telecommunication industry. EN 726 specifies a security framework for cards and card terminals for telecommunication use. EN 726 also specifies the application independent characteristics of multi-service IC cards, and the applicati
26、on independent, card related characteristics of card terminals for telecommunication use. EN 726 also covers payment methods specifically for telecommunications use, namely auto-billing cards (i.e. cards which enable the personal or business telephone account of card users to be automatically billed
27、 for calls made anywhere in Europe) and pre-payment cards. The purpose of EN 726 is to provide the necessary requirements and facilities for the introduction of card systems by Administrations and Network Operators. This standard aims to permit the inter-operability of cards and card systems in Euro
28、pe. This Part of EN 726: - describes the general overview and the organization of the complete standard; - defines the general concepts including the system overview, the involved entities and the five different phases in the life-cycle of a card and a card system. 2 Normative references This Part o
29、f EN 726 incorporates by dated or undated reference, provisions from other publications. These normative references are cited at the appropriate places in the text and the publications are listed hereafter. For dated references, subsequent amendments to, or revisions of any of these publications app
30、ly to this Part of EN 726 only when incorporated in it by amendments or revision. For undated references the latest edition of the publication referred to applies. EN 726-2 EN 726-3 EN 726-4 EN 726-5 EN 726-6 EN 726-7 Identification card systems - lklecommunications integrated circuit(s) cards and t
31、erminals - Part 2: Security framework) Identification card systems - Telecmmunications integrated circuit($ cards and terminals - Part 3: Application independent card requirements Identification curd systems - lklecommunications integrated circuit(s) cards and terminals - Part 4: Application indepen
32、dent card related terminal requirments Identification card systems - Telecommunications integrated circuitls) cards and terminals - Part 5: Payment methods) Identqication card systems - Telecommunications integrated circuit(.$ cards and terminals - Part 6: Telecommunication features 1 Identqication
33、card systems - Tekcmmunications integrated circuit(s) cards and terminals - Part 7: Security module 3 Definitions and abbreviations 3.1 Definitions For the purpose of this Part of EN 726, the following definitions apply. 3.1.1 application An application consists of a set of security mechanisms, file
34、s, data, protocols (excluding transmission protocols), which are located and used in the IC card (card application) and outside of the IC card (external application). 3.1.2 application-provider The entity which is responsible for the application after its allocation. One application-provider may hav
35、e several applications in one card. I At present at the stage of draft. I 3404589 0103741 699 Page 4 EN 726-1 : 1994 3.1.3 card A multi-application card can be considered as a set of files, some of them shared by the different application-providers and/or the card issuer, other files owned exclusive
36、ly by the different application-providers or the card issuer. Files can, e.g, be read, written or executed. The files allocated in the card, corresponding to one application, are called a card application. There may be several applications on a given card from the same application provider. 3.1.4 ca
37、rd application The card related part of one application. 3.1.5 card issuer The card issuer is responsible for the common data of the card, the allocation of memory space for the applications and supplies the application provider with the necessary tools for loading the required application. 3.1.6 ca
38、rd manufacturer The card manufacturer is the entity which fabricates the card and which performs the IC embedding. 3.1.7 external application Entity, located in the external world, which communicates with the related card application during the session. 3.1.8 external world All application-related e
39、ntities outside the card (in the case of an off-line system: terminal, in the case of an on-line system: terminal, network, host, etc.). 3.1.9 operating system That which is required to manage the logical resources of a system, including process scheduling and file management. 3.1.10 kernel Part of
40、the card, or the external world, which contains application independent data/code. For the card, this includes both the master file (MF) and the operating system. 3.1.11 trusted authoritg Independent authority in charge of approving, imposing and monitoring the system from the security point of view
41、. 3.2 Abbreviations For the purpose of this Part of EN 726, the following abbreviations apply: IC Integrated circuit; IFD Interface device; SM Security module. 4 Organization 4.1 Part 1: System Overview This Part of EN 726. 4.2 Part 2: Security framework In Part 2 of EN 726, a security framework is
42、specified for telecommunications use of IC cards. This specification does not describe any implementation details. It describes: - a general security approach resulting in a methodology, different card phases for identifying security requirements and a description of security services which can be o
43、ffered by the IC card; - the implementation of the general security approach to the application independent IC card, resulting in a list of application independent security requirements, a selection of needed security services and a description of a common set of application independent security mec
44、hanisms; - implementation of the general security approach to applications using IC-cards, resulting in a methodology to come to the set of security mechanisms for specific applications. 4.3 Part 3: Application independent card requirements In Part 3 of EN 726, the application independent characteri
45、stics of multi-application IC-cards and plug-in modules for telecommunication applications are specified in order to ensure inter-operability for telecommunication cards with the various systems and terminals. Mono-application cards are considered to be a subset of multi-application cards. All commo
46、n characteristics, necessary for the interactions between card and the external world, are defined. This Part of the standard does not preclude cards from other sectors from containing telecommunication application(s) based on this Part of the standard. The application specific characteristics are n
47、ot defined in Part 3 of the standard. They are defined and described in the relevant application requirements. Part 3 of the standard does not specify any internal technical implementation. It describes: - the requirements for the physical characteristics of the card, the electronic signals and the
48、transmission protocols; - the application independent logical model which should be used as a basis for the design of the logical structure of, optionally, several applications in the card; H 3404589 0303742 525 H Page 5 EN 726-1 : 1994 - the security facilities concerning the access to the differen
49、t parts within the card and the possible interactions between these parts. Also the description of security functions which should be needed generally by the various applications. They should be available as a common set; - the description of the application independent functions between card and outside world, should be used as a standardized common set for all basic functions used in international applications; - the mapping of these application messages (commands and responses) under standardized protocols; - the overall security aspects for card ma
