Knowledge Gateway
Unlock your learning potential with industry insights and standards that matter. Share your email to begin.
Unlock your learning potential with industry insights and standards that matter. Share your email to begin.
Status : Active
Standard Type : Main
Document No : ISO/IEC 19286:2018
Document Year : 2018
Pages : 76
Edition : 1
Section Volume : Cards and personal identification (ISO/IEC JTC 1/SC 17.)
- using the mechanisms from parts of ISO/IEC 7816 and parts of ISO/IEC 18328 that contribute to security and privacy,
- providing discoverability means of privacy-enabling attributes,
- defining requirements for attribute-based credential handling, and
- identifying data objects and commands for ICCs.
Existing privacy-enhancing protocols available in a generic context are adopted for distributed systems including ICCs. Additionally, existing authentication protocols between an ICC and an external device used for establishing a secure channel are enhanced with privacy protection. Secure communication between an ICC and an on-card device is also considered.
All the protocols and services described in this document contribute to privacy. Annex B describes an example of privacy impact assessments of respective systems.