Смарт-карталар стандарты ISO/IEC 7816

Standard for smart cards

ISO/IEC 7816 is an international standard related to electronic identification cards with contacts, especially smart cards, and more recently, contactless mobile devices, managed jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It is developed by ISO/IEC JTC 1 (Joint Technical Committee 1) / SC 17 (Subcommittee 17). The following describes the different parts of this standard. Note: abstracts and dates, when present, are mere quotations from the ISO website, and are neither guaranteed at the time of edition nor in the future.

Created in 1987, updated in 1998, amended in 2003, updated in 2011. This part describes the physical characteristics of the card, primarily by reference to ISO/IEC 7810 Identification cards — Physical characteristics, but also with other characteristics such as mechanical strength.

Created in 1988, updated in 1999, amended in 2004, updated in 2007. The standard defines an eight (or six) pin interface; the first pin is located at the bottom right corner for the image given. Pins 4 and 8 are occasionally omitted. + ISO/IEC 7816 2 pinout Pin # Name Description1VCC +5V or 3.3V DC2ResetCard Reset (Optional)3CLOCKCard Clock4ASApplication Specific5GNDGround6VPP +21V DC [Programming], or NC7I/OIn/out [Data]8ASApplication Specific

Created in 1989, amended in 1992 (addition of the T=1 protocol), amended in 1994 (revision of Protocol Type Selection), updated in 1997 (including addition of 3 Volt operation), amended in 2002 (including addition of 1.8 Volt operation), last updated in 2006 (including removal of Vpp).

Created in 1996, updated in 2004, amended in 2006, updated in 2016 and 2023. This part is maintained by Deutsches Institut für Normung (DIN).

Created in 1995, updated in 2004, 2016, 2019, and 2021. According to its abstract, it specifies interindustry commands for integrated circuit cards (either with contacts or without contacts) that may be used for cryptographic operations. These commands are complementary to and based on the commands listed in ISO/IEC 7816 4. Annexes are provided that give examples of operations related to digital signatures, certificates and the import and export of asymmetric keys. The choice and conditions of use of cryptographic mechanisms may affect card exportability. The evaluation of the suitability of algorithms and protocols is outside the scope of ISO/IEC 7816 8.

Created in 1995, updated in 2004, updated in 2017. According to its abstract, it specifies interindustry commands for integrated circuit cards (both with contacts and without contacts) for card and file management, e. g. file creation and deletion. These commands cover the entire life cycle of the card and therefore some commands may be used before the card has been issued to the cardholder or after the card has expired. An annex is provided that shows how to control the loading of data (secure download) into the card, by means of verifying the access rights of the loading entity and protection of the transmitted data with secure messaging. The loaded data may contain, for example, code, keys and applets.

Created in 1999. This part specifies the power, signal structures, and the structure for the answer to reset between an integrated circuit card(s) with synchronous transmission and an interface device such as a terminal.

Created in 2004, updated in 2017. This part of ISO/IEC 7816 specifies security related interindustry commands to be used for personal verification through biometric methods in integrated circuit cards. It also defines the data structure and data access methods for use of the card as a carrier of the biometric reference and/or as the device to perform the verification of the cardholder’s biometric probe (on card biometric comparison). Identification of persons using biometric methods is outside the scope of this standard.

This part specifies commands for application management in a multi application environment.