1、(EN ENx72b-3 94 m 3404589 OLL7293 T4T m BRITISH STANDARD BS EN Identification card systems - Telecornmunicat ions integrated circuit(s) cards and terminals Part 3. Application independent card requirements The European Standard EN 726-3 : 1994 has the status of a British Standard Product CO 005420.5
2、5 726-3 : 1996 (EN ENr72b-3 94 W 3404589 0117294 986 m BS EN 726-3 : 1996 This British Standard, having been prepared under the direction of the Information Systems Technology Assembly, was published under the authority of the Standards Board and comes into effect on 16 January 1996 O BSI 1996 Commi
3、ttees responsible for this British Standard The preparation of this British Standard was entrusted to Technical Committee IST/17, Identification cards and related devices, upon which the following bodies were represented: Ailec Associates APACS (Barclaycard) APACS (Barclays Bank) APACS (Girobank) AP
4、ACS (Lloyds Bank) APACS (Midland Bank) APACS (National Westminster Bank) Association for Payment Clearing Services (APACS) BT Laboratories Cellnet Consumer Policy Committee of BSI Electricity Association GEC Card Technology HMSO Rochford Thompson Equipment Shell UK Thom lhnsit Systems International
5、Vodafone Ltd. Westinghouse Cubic Ltd. News Datacom Ltd. Amendments issued since publication Amde No* I Date I * affected The following BSI references relate to the work on this standard: Committee reference IST/17 Draft for comment 9262271 DC ISBN O 580 24273 O CEN ENa72b-3 94 3404589 OLL7295 812 M
6、BS EN 726-3 : 1996 Contents Page Committees responsible Inside front cover National foreword 11 Foreword 2 Rxt of EN 726-3 3 0 BSI 1996 i CEN EN*72b-3 94 m 3404589 OLL729b 759 m BS EN 726-3 : 1996 National foreword This Part of BS EN 726 has been prepared by Echnical Committee IST/17 and is the Engl
7、ish language version of EN 726-3 : 1994 Identification card systems - Td,ecmmunications integrated cirmit(s) cards and tminals Part 3 : Application independent card requirements published by the European Committee for Standardization (CEN). This British Standard is the English language version of EN
8、 726-3 : 1994 and implements it as the UK national standard. This British Standard is published under the direction of the Information Systems Technology Assembly whose %chnical Committee ISTI17 has the responsibility to: - aid enquirers to understand the text; - present to the responsible European
9、committee any enquiries on interpretation, or proposals for change, and keep UK interests informed; - monitor related international and European developments and promulgate them in the UK. Nm. International and European Standards, as well as overseas standards, are available from Customer Services,
10、BSI, 389 Chiswick High Road, London W4 4AL. Cross references international standard EN 27810 : 1989 EN 27811-1 : 1989 EN 27811-2 : 1989 EN 27812 : 1989 EN 27816-1 1989 EN 27816-2 1 1989 EN 27816-3 : 1989 IS0 639 : 1988 IS0 3166 : 1993 IS0 8859-1 : 1987 EN 29564-1 : 1991 (IS0 9564-1 : 1991) EN 29564-
11、2 1991 (IS0 9564-2 : 1991) IS0 9807 : 1991 British Standard BS EN 27810 : 1991 Guide to design, construction and use of identification cards BS EN 27811 Identvication cards. Recording techniquel) Part 1 : 1989 Embossing Part 2 : 1989 Magnetic stripe BS EN 27812 : 1989 Procedure for allocating intern
12、ational issuer identification numbers (IINs) for use on identaYication cards BS EN 27816 Guide to design and use of identaYication cards having integrated circuits with contucts Part 1 : 1991 Physical characteristics Part 2 : 1991 Contact locations and minimum size Part 3 : 1992 Electronic signals a
13、nd transmission protocols BS 3862 : 1989 Specification for the representation of nam of languages BS 23166 : 1994 SpecaYication for codes for the representation of names of countries BS 7203 8-bit single-byte coded graphic character sets. Part 1 : 1989 Latin alphabet No. 1 BS EN 29564 Banking. Perso
14、nal identqication number management and security) Part 1 : 1994 PINprotection principles and techniques Part 2 : 1994 Approved algorithm(s) for PIN BS IS0 9807 : 1991 Banking and related financial services. Requirements for message authentication (retail) t?TlEiphemzent “Other parts of these standar
15、ds are in preparation ii O BSI 1996 CEN ENs726-3 94 m 3404589 0117297 b95 m BS EN 726-3 : 1996 BS EN 29992 Financial transaction cards. Messages between the integrated circuit card and the card accepting device Part 1 : 1993 Concepts and structures BS EN 30202 Financial transaction cards. Security a
16、rchitecture of financial transaction systems using integrated circuit cards Part 1 : 1993 Card lifeeyclel) EN 29992-1 : 1993 (IS0 9992-1 : 1991) EN 30202-1 : 1993 (IS0 10202-1 : 1991) Compliance with a British Standard does not of itself confer immunity from legal obligations. )Other parts of these
17、standards are in preparation. O BSI 1996 iii EUROPEAN STANDARD NORME EUROPENNE EUROPISCHE NORM EN 726-3 December 1994 ICs 33.120.00; 35.240.60 Descriptors: Telecommunications, IC cards, telecommunication terminals, specifications, characteristics English version Identification card systems - Rlecomm
18、unications integrated circuit(s) cards and terminals - Part 3: Application independent card requirements Systmes de cartes didentification - Cartes circuit intgr et terminaux pour les tlcommunications - fr Elekommunikationszwecke - Partie 3: Spcifications de la carte indpendantes des applications Id
19、entifikationskartensysteme - Anforderungen an Chipkarten und Endgerte %il 3: Applikationsunabhngige Anforderungen an die Karte This European Standard was approved by CEN on 1994-12-05. CEN members are bound to comply with the CENKENELEC Internal Regulations which stipulate the conditions for giving
20、this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographica references concerning such natrional standards may be obtained on application to the Central Secretariat or to any CEN member. This European Standard exists in three official versions
21、 (English, French, German). A version in any other language made by translation under the responsibility of a CEN member into its own language and notified to the Central Secretariat has the same status as the official versions. CEN members are the national standards bodies of Austria, Belgium, Denm
22、ark, Finland, France, Germany, Greece, Iceland, Ireland, Italy, Luxembourg, Netherlands, Norway, Portugal, Spain, Sweden, Switzerland and United Kingdom. CEN European Committee for Standardization Comit Europen de Normalisation Europisches Komitee fr Normung Central Secretariat: rue de Stassart 36,
23、B-1050 Brussels O 1994 Copyright reserved to CEN members Ref. No. EN 726-3 : 1994 E CEN EN*726-3 94 m 3404589 OLL7299 qb8 m Page 2 EN 726-3 : 1994 Foreword This European Standard was prepared by ETSI SE TE9 and adopted by CEN/TC 224, Machine readable cards, related device interfaces and operations,
24、the secretariat of which is held by AFNOR. This document was submitted to the formal vote and the result of the formal vote was positive. This European Standard shall be given the status of a national standard, either by publication of an identical text or by endorsement, at the latest by June 1995,
25、 and conflicting national standards shall be withdrawn at the latest by June 1995. According to CENICENELEC Internal Regulations, the following countries are bound to implement this European Standard: Austria, Belgium, Denmark, Finland, France, Germany, Greece, Iceland, Ireland, Italy, Luxembourg, N
26、etherlands, Norway, Portugal, Spain, Sweden, Switzerland and United Kingdom. This European Standard consists of the following parts, under the general title Identification card systems - Elecmmunications integrated circuit(s) cards and terminals: - Azrt 1: systems ovemuiew; - part 2: Security framew
27、ork; - Rzrt 3: Application independent card requirements; - Rzrt 4: Application independent card related terminal requirements; - cyment methods; - - hrt 7: Security module. Contents Foreword 1 Scope 2 Normative references 3 Definitions, abbreviations and symbols 4 Physical characteristics of the ca
28、rd 5 Electronic signals and transmission protocols 6 Logical model for IC cards 7 Security facilities for the cards 8 Description of the functions 9 Description of the commands 10 Contents of special EFs 11 Interoperability of IC cards 12 Security aspects for card manufacturers, application provider
29、s and card issuers Annexes A (informative) Example of creating an application in the card B (informative) Examples of certification mechanisms C (informative) Administrative actions 3 3 5 7 8 11 13 18 32 64 72 81 74 74 75 O BSI 1996 CEN ENx72b-3 34 3404589 0117300 TOT Page 3 EN 726-3 : 1994 1 Scope
30、This part of EN 726 specifies the application-independent characteristics of multi-application IC-cards and plug-in modules for telecommunication applications in order to ensure interoperability for telecommunication cards with the various systems and terminals. Mono-application cards are considered
31、 to be a subset of multi-application cards. All common characteristics, necessary for the interactions between the card and the external world are defined. This part of EN 726 does not preclude cards from other sectors from containing telecommunication application(s) based on this part of EN 726. Th
32、e application-specific characteristics are not defined in this part of EN 726. They are defined and described in the relevant application requirements. This part of EN 726 does not specify any internal technical implementation. It describes: - the requirements for the physical characteristics of the
33、 card, the electronic signals and the transmission protocols; - the application-independent logical model which should be used as a basis for the design of the logical structure of, optionally, several applications in the card; - the security facilities concerning the access to the different parts w
34、ithin the card and the possible interactions between these parts. Also the description of security functions which should be needed generally by the various applications. They should be available as a common set; - the description of the application-independent functions between card and external wo
35、rld, should be used as a standardized common set for all basic functions used in international applications; - the mapping of these application messages (commands and responses) under standardized protocols; - the contents of the master File; - the interoperability of IC cards; - the overall securit
36、y aspects for card-manufacturers, application providers and card-issuers. 2 Normative references This part of EN 726 incorporates by dated or undated reference, provisions from other publications. These normative references are cited at the appropriate places in the text and the publications listed
37、hereafter. For dated references, subsequent amendments to, or revisions of any of these publications apply to this part of EN 726 only when incorporated in it by amendment or revision. For undated references the latest edition of the publication referred to applies. EN 726-1 EN 726-2 EN 726-4 ENV 13
38、75-1 ENV 1375-2 EN 27810 : 1989 EN 27811-1 : 1989 EN 27811-2 1989 EN 27812 : 1989 Identification card systems - Blecommunications integrated circuiqs) cards and terminals - Part 1: System ovmew Identification card systems - Telecommunications integrated circuit(s) cards and terminals - Part 2: Secur
39、ity.frameworkl) Ihntvication card systems - Telecommunications intergrated circuit(s) cards and terminals - Part 4: Application independmat card related tminal requirementsl) . Identvication card systems - Intersector integrated circuit(s) card additional formats - Part 1: 10-000 card sixe and physi
40、cal characteristics) Identification card systems - Intersector integrated circuit(s) card additional formats - Part 2: ID-00 card sixe and physical characteristics1) Identification cards - Physical characteristics Identification cards - Recording technique - Part 1: Embossing Identification cards -
41、Recording technique - Part 2: Magnetic stripe Identification cards - Numbering system and registration procedure for issuer ientifiers ) At present at the stage of draft 0 BSI 1996 CEN ENx726-3 94 m 3409589 Oll7301 94b m Page 4 EN 7263 : 1994 EN27816-1 : 1989 EN 27816-2 : 1989 EN 27816-3 : 1992 EN 2
42、7816-3 : 1992/A1 : 1993 I-ET3 300045-1 1992 IS0 639 : 1988 ISO/IEC 646 : 1991 IS0 3166 : 1988 ISO/IEC 7816-4 ISOAEC 7816-5 IS0 8859-1 : 1987 IS0 9564-1 : 1991 IS0 9564-2 : 1991 IS0 9807 : 1991 IS0 9992-1 : 1991 IS0 9992-2 IS0 10202-0 Is0 10202-1 : 1991 IS0 10202-2 IS0 10202-3 IS0 10202-4 IS0 10202-5
43、 IS0 10202-6 Identification cards - Integrated circuit(s) with cards contacts - Part 1: Physical character - if embossing, contacts on same side; - if magnetic stripe, contacts on other side; - if embossing - the general set of commands is not sufficient and there is a need to associate an ASC-set w
44、ith this DF. This ASC-set shall be defined and agreed upon. Programs contained in an EF are more related to the application with regard to some specific user-characteristics. Example 1. In some applications, this could be in an IC card calculation of the limit based on some specific user-characteris
45、tics saved in the card. Example 2. A specific cryptographic algorithm used to authenticate the application. Programs controlled by the specific ASC-set are more related to the application only. O l3SI 1996 CEN EN*726-3 94 m 3404589 OLL7307 364 m Page 10 EN 726-3 : 1994 6.2.3 EF with linear fued stru
46、cture An EF of this structure consists of a sequence of records with fixed length. The first record in this EF is defined as record #1. The following are indicated in the header of this structure: - the total data length; - number of records created; - length of record. There are three methods to ac
47、cess records within an EF of this type: - using the record number; - when positioned on the current record (known by the operating system), it shall be possible to perform an action on the current, the next (except for last record), the previous (except for the first record), the first or the last r
48、ecord existing in the EF; - by pattern seek starting from the beginning forward, from the end backward, from the next record forward and from the previous record backward. It is not possible to create more than 255 records in one file. 6.2.4 EF with linear variable structure An EF of this structure
49、consists of a sequence of records with variable length. The first record in this EF is defined as record #1. The following items are indicated in the header of this structure: - the total data length; - the number of records created; Each record has it is own length indication, which cannot be changed after creation of the record. The access to this type of EF is the same as for EFs with a linear fixed structure. It is not possible to create more than 255 records in one file. 6.2.5 Cgclic EF An EF of this structure consists of a sequence of records with identical
