egif logoe-Government Interoperability Framework 5.1 Part 2
govtalk homepage
 
e-GIF Home | Contents | Introduction | Interconnection | Data Integration | Content Management | Access | Specifications | Appendicies
 
go to content management go to contents page go to specifications
7. Access
 
7.1 Access: technical policies
 
The technical policies for providing access to public sector e-enabled services for use by citizens, businesses or public officials are:
 
7.1.1 Government information systems providing e-government services will:
 
  • be designed so that they are accessible through browser based technology; other interfaces are permitted in addition to browser based ones

  • aim to provide such services to the user (citizen and business) via a range of delivery channels and devices

  • be designed so that information content of e-government services can be defined independently of any specific delivery channel

  • be designed so that the essential information of a service is accessible to the citizen via delivery channels with limited capability where appropriate, using personalisation technologies like transcoders.
7.1.2 Government information systems will be designed to meet UK legislation, and to support channels that provide accessibility for disabled people, ethnic minorities and those at risk of social/digital exclusion.
 
7.1.3 For e-government services aimed at the citizen, government information systems will be designed to be accessible to the citizen via multiple channels to suit the specific needs of the citizen.
 
7.1.4 When government information systems claim to support a particular delivery channel, then conformance to the listed specifications for that channel is mandatory.
 
7.1.5 All government information systems providing e-government services will be capable of supporting the Internet as a delivery channel, either directly, or via third party services.
 
7.1.6 When using the Internet as a delivery channel, government information systems will be designed so that as much information as possible can be accessed and manipulated from minimal functionality browsers as specified in Table 5.
 
7.1.7 Where it is not technically possible to deliver a full service using the limited feature set of Table 5, government information systems can be designed to make use of the full functionality provided by modern computer workstations, see Table 4. In such cases reasonable alternative ways of delivering a more limited service to Table 5 devices should also be provided.
 
7.1.8 When using the Internet as a delivery channel, additional middleware or plug-ins can be used, when necessary, to enhance browser functionality supported by PC and workstations, provided these can be easily downloaded without incurring a licensing fee.
 
7.1.9 Government information systems will be designed to provide protection against security risks of connection to the Internet, including the ability to protect against the vulnerability of downloading executable content code that is not authenticated.
 
7.2 Access: delivery channels
 
7.2.1 The full range of services to be delivered to the citizen will dictate the specifications required. Content management techniques and personalisation technologies can be used to support various delivery channels e.g. low function Web browsers, public kiosks, Digital TV, WAP phones, etc., as defined in Table 5.
 
7.2.2 Transcoding services, as an example of personalisation technologies, can deliver Web content to a variety of destination environments within greatly reduced timescales and at significantly reduced cost. The principle is that transcoding can be used to dynamically filter, convert and reformat Web content to match the requirements and display capabilities of the destination device. Transcoding technology is server-side software that modifies Web page content based on data protocols, markup languages, device and network parameters and user preferences.
 
7.2.3 Personalisation technologies may also be used to support groups such as ethnic minorities, or visually impaired or blind people (e.g. by using text translation, larger fonts and graphics, audio, etc via a transcoder). Such aspects are covered by the Guidelines for UK government websites.
 
7.2.4 A government Channels Policy Framework was published in September 2002. Content management techniques, personalisation technologies and transcoding should be used to support the various delivery channels defined in the framework.
 
7.3 Access: specifications
 
Table 4: Specifications for information access – computer workstations
 
7.3.1 When the service requires the facilities of a modern computer workstation, then the standards defined below are to be supported. For alternative devices, see Table 5.
 
Basic Component Specification Status
  A = Accepted
R = Recommended
U = Under review
F = For future consideration
 
Hypertext interchange formats HTML v4.01 and XHTML v1.0 A
Document file types Rich Text Format as (.rtf) files Plain/Formatted Text as (.txt) files

Plain/Formatted Text as (.txt) files

Hypertext documents
as (.htm) files 01

Adobe Acrobat
as (.pdf) minimum viewer version 4

Microsoft Word viewer/reader (.doc), minimum support Word97 format

Lotus Notes Web Access (.nsf)

Multimedia Message formats (.mht). See IETF RFC 2557 for further information
A
Spreadsheet file types Hypertext documents as (.htm) files 01

Delimited files as (.csv) files
A
Presentation file types Hypertext documents as (.htm) files 01 A
Character sets and alphabets UNICODE

ISO/IEC 10646-1:2000

Transformation Format for 16 planes of group 00 (UTF-16)
A
Graphical/still image information exchange Joint Photographic Experts Group /ISO 10918 (.jpg)

Graphics Interchange Format
(.gif)

Portable Network Graphics
(.png)

For images that will not tolerate information loss use Tag Image File format (.tif)

When highly compressed imaging is required use Enhanced Compressed Wavelet (.ecw)
A
Scripting ECMA 262 Script A
Vector graphics Scalable Vector Graphics (.svg)

Vector Markup Language (.vml)
A
Moving image and audio/visual information exchange specifications
Moving Picture Experts Group (.mpg)

MPEG-1/ISO 11172

Conversion is provided by most mainstream packages
A
Audio/video streaming data

RealAudio/RealVideo (.ra, .ram, .rm, .rmm)

Macromedia Shockwave
(.swf)

Windows media formats
(.asf, .wma, .wmv )

Apple Quicktime
(.avi, .mov, .qt)

Waveform Audio File Format (.wav)

8µ Law

H263

A
Animation Macromedia Flash (.swf)

Apple Quicktime (.avi, .mov, .qt)

Macromedia Shockwave (.swf)
A
Extended programming When extended programming facilities at the browser are absolutely essential, alternative suitable programming languages or technology may be used, but they must comply with the other provisions and policy requirements of the e-GIF, e.g. free downloads of plug-ins A
General purpose files and compression File types (.zip), (.gz), (.tgz) and (.tar) A
 
Table 5: Specifications for information access – other channels
 
7.3.2 These specifications are for access channels with restricted facilities, such as kiosks, PDAs, Smart Phones (PDA/mobiles) and iDTV. If a service requires the facilities of a more sophisticated access device, reasonable alternative ways of delivering a more limited service should also be provided following the standards defined below.
 
Basic Component Specification Status
  A = Accepted
R = Recommended
U = Under review
F = For future consideration
 
Hypertext interchange formats HTML v3.2 A
Document file types Plain/Formatted Text as (.txt) files

Hypertext documents as (.htm) files
A
Spreadsheet file types Hypertext documents as (.htm) files A
Presentation file types Hypertext documents as (.htm) files A
Character sets and alphabets UNICODE

ISO/IEC 10646-1:2000

Transformation Format for 16 planes of group 00 (UTF-16)
A
Graphical/still image information exchange Joint Photographic Experts Group /ISO 10918 (.jpg)

Graphics Interchange Format (.gif)

Portable Network Graphics (.png)
A
Scripting ECMA 262 Script A
 
Table 6: Specifications for information access - mobile phones
 
7.3.3 These specifications are for access channels with restricted facilities, such as kiosks, mobile phones, PDAs and iDTV. If a service requires the facilities of a more sophisticated access device, reasonable alternative ways of delivering a more limited service should also be provided following the standards defined below.
 
Basic Component Specification Status
  A = Accepted
R = Recommended
U = Under review
F = For future consideration
 
WAP specifications The specifications to be used are defined by the WAP Forum A
GPRS The General Packet Radio Service specifications as defined by European Telecommunications Standard Institute (ETSI) for Mobile Stations including: EN No: 301 113, 301 344, 301 347 and TS 101 297, 101 351 A
SMS The Short Message Service specifications as defined by European Telecommunications Standards Institute (ETSI) for Mobile Stations including: ETS 300 536, 537, ETS 300 559, ETS 300 560 A
MMS The Multimedia Messaging Service specifications as defined by European Telecommunications Standards Institute (ETSI) for Mobile Stations including: TS 122 140, TS 123 140, TS 126 140 A
Format MHEG-5 R
Content movement MHP Multimedia Home Platform ETSI TS 102 812 R
 
7.3.4 The OeE is undertaking a wider mobile communications study and the outcome of this will be reflected in future versions of this framework.
 
7.3.5 The issues of security relating to transactions undertaken through mobile phones are complex and depend on emerging industry specifications. Work in this area will be undertaken in due course. In the meantime the lack of specifications does not imply that security issues can be ignored. Decisions will need to be made on a case by case basis depending on the nature of the transaction in question.
 
Table 7: Specifications for information access – Smart Cards
 
7.3.6 Many government projects are either piloting or intending to use smart cards in the future. Multiple standards exist for both smart cards and terminal devices such as card readers. Projects should select smart cards that support the standards listed below. Future version of e-GIF will refine this table in line with market developments.
 
7.3.7 Best practice guidance for smart cards is to be produced by the ODPM. Such guideance will be reflected in future version of e-GIF.
 
Component
Ref
Status
Applicable

Component subject
sort ascending sort descending
Specification
sort ascending sort descending
e-GIF status
sort ascending sort descending
Applicability
sort ascending sort descending
Explanatory Notes
sort ascending sort descending
Data definition Definitions - Government Data Standards Catalogue, provides data definitions and XML Schema fragments
http://www.govtalk.gov.uk/schemasstandards/eservices.asp
A All card types
Data definition ISO/IEC 7816-6: 1996 Identification cards Integrated circuit(s) cards with contacts Part 6: Inter industry data elements for interchange
R All card types Cor 1: 1998 - Amd 1:2000 - IC manufacturer registration This version of ISO/IEC 7816-6 and Amd1: 2000 are due to be superseded by a reduced scope version, a draft version of which has been submitted to ISO for FDIS ballot This standard has security implications
Data definition ISO/IEC 7812-1 Identification cards Identification of issuers Part 1: Numbering system
R All card types
Data definition ISO 9992-2 Financial transaction cards Messages between the integrated circuit card and the card accepting device Part 2: Functions, messages (commands and responses), data elements and structures
U All card types
Data definition EN 1546-3 Identification Card Systems - Inter-sector Electronic Purse - Part 3: Data elements and interchanges
U All card types The current edition was published in July 1999
Data definition EN 1546-4 Identification Card Systems - Inter-sector Electronic Purse - Part 4: Data objects
U All card types The current edition was published in August 1999
Data definition CWA 13987 eEurope: secure networks and smart cards: Smart Card Systems - Interoperable Citizen Services - User Related Information (based on DISTINCT) Part 1: Definition of User Related Information.
U All card types Currently under review
Data definition CEN ENV1545-1 which defines the codification of data elements used for public transport (such as the date, time, validation event, transport contract, etc.).
U Transport applications Need to assess overlap with Government Data Standards Catalogue, and existing transport schemas
Data definition CEN ENV1545-2 Identification card systems: Surface transport applications: Payment related data elements
U Transport applications Need to assess overlap with Government Data Standards Catalogue, and existing transport schemas
Data definition CEN ENV1545-3 Tachograph related data elements
U Transport applications Need to assess overlap with Government Data Standards Catalogue, and existing transport schemas
Data definition CEN ENV1545-4 Driving licence related data elements
U Transport applications Need to assess overlap with Government Data Standards Catalogue, and existing transport schemas
Data definition CEN ENV1545-5 Freight identification related data elements
U Transport applications Need to assess overlap with Government Data Standards Catalogue, and existing transport schemas
Data definition CEN ENV1545-6 Vehicle related data elements
U Transport applications Need to assess overlap with Government Data Standards Catalogue, and existing transport schemas
Applications including multi-applications ISO/IEC 7816-4: 1995 Identification cards. Integrated circuit(s) cards with contacts - Part 4: Inter-industry commands for interchange
R Integrated circuit(s) cards with contacts This sets out the file structures, secure messaging for file access, card application startup, and logical channels for use where the card can have more than one virtual communications channel active. Application specific commands are not described, and therefore the standard treats command codes as application specific where they are not defined in this part. Amd 1: 1997 Secure messaging on the structure of APDU messages This version of ISO/IEC 7816-4 and Amd 1: 1997 are due to be superseded by a revised, substantially larger and renamed version, a draft copy of which has been submitted to ISO for FDIS ballot This standard has security implications
Applications including multi-applications ISO/IEC 7816-5: 1994 Identification cards. Integrated circuit(s) cards with contacts - Part 5: Numbering system and registration procedure for application identifiers
R Integrated circuit(s) cards with contacts A register of application providers is kept by KTAS in Denmark and used for application selection through the use of unique issuer/application identifier numbers. The current edition was published in June 1994. There is also an amendment ISO/IEC 7816-5/AM1 Registered application provider identifiers (RIDs) which was published in December 1996. KTAS (aka TeleDanmark) is the ISO/IEC 7816-5 Registration Authority. Its address is: Teglholmsgade 1, DK-1790, Copenhagen, V, Denmark. This standard has security implications
Applications including multi-applications ISO/IEC 7816-7: 1999 Identification cards Integrated circuit(s) cards with contacts Part 7: Inter-industry commands for Structured Card Query Language (SCQL)
R Integrated circuit(s) cards with contacts Draft Amd 1: Extended Card Data Base (ECDB) This standard has security implications
Applications including multi-applications ISO/IEC 7813 Identification cards, Financial transaction cards
R Financial cards
Applications including multi-applications ISO/IEC 7812-2 Identification cards Identification of issuers. Part 2: Application and registration procedures
R All card types
Applications including multi-applications ISO/IEC 15693-4 Identification cards Contactless integrated circuit(s) cards Vicinity cards {Vicinity integrated circuit(s) cards (VICC)}. Part 4: Registration of applications/issuers.
U Vicinity intgrated circuit(s) cards
Applications including multi-applications EN 1332-1:1999 Identification card systems - Man-machine interface - Part 1: Design principles for the user interface
R All card types
Applications including multi-applications EN 1332-4:1999 Identification card systems - Man-machine interface - Part 4: Coding of user requirements for people with special needs
R All card types
Applications including multi-applications ITSO /1000-1 Overview and Business Model
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-2 ITSO Card Data Structure
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-3b ITSO Terminal Specification
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-4b Back Office Systems
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-5 Card Format and Data Records - Sub Part 1 - Data Definitions and Card Entities
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-5 Card Format and Data Records - Sub Part 2 - Message Data
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-6 ITSO Security Application Module Overview
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-7 ITSO Security Application Module, requirements and usage
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-9 ITSO Security Application Module, detailed operation
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-9 ITSO Communications
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Applications including multi-applications ITSO /1000-10 ITSO Card Format Definition
http://www.itso.org.uk/documentation.asp
R Public transport smart cards These standards are Crown copyright and have been developed for use in the public transport sector. Applications developed using these standards can reside on multi-application cards. Some elements of these standards could be used in areas other than transport.
Electrical ISO/IEC 7816-10: 1999 Identification cards -- Integrated circuit(s) cards with contacts – Part 10: Electronic signals and answer to reset for synchronous cards.
R Integrated circuit(s) cards with contacts This standard has security implications
Electrical ISO/IEC 7816--12 Identification cards Integrated circuit(s) cards with contacts - Part 12: USB electrical interface and operating procedures
F Integrated circuit(s) cards with contacts This standard has security implications
Electrical ISO/IEC 14443-2 Identification cards - Contactless integrated circuit(s) cards - Proximity cards - Part 2: Radio frequency power and signal interface
R Proximity integrated circuit cards This part defines the radio frequency interface, and contains two quite different modulation techniques (Types A and B) for data communication between card and terminal. Type A is based on the Philips Mifare technology (widely licensed to other manufacturers). Type B is a new concept. These two types run in parallel through this part of the standard and through Part 3. In addition, some Type A specific items appear in Part 4.
Electrical ISO/IEC 10536-3 Identification cards Contactless integrated circuit(s) cards{Close coupling integrated circuit(s) cards (CICC)} Part 3: Electronic signals and reset procedures
U Close coupling integrated circuit(s) cards This standard has security implications
Electrical ISO/IEC 15693-2: 2000 Identification cards Contactless integrated circuit(s) cards Vicinity cards {Vicinity integrated circuit(s) cards (VICC)}Part 2: Air interface and initialisation
U Vicinity contactless integrated circuit(s) cards
Communications Protocols ISO/IEC 7816-3: 1997 Identification cards Integrated circuit(s) cards with contacts - Part 3: Electronic signals and transmission protocols
R Integrated circuit(s) cards with contacts Amd 1/2:2002 Electrical characteristics and class indication for integrated circuit(s) cards operating at 5 V, 3 V and 1,8 V Draft Amd 3: USB electrical interface and operating procedures withdrawn and ISO/IEC 7816-12 created in its place. This version of ISO/IEC 7816-3 and Amd 1/2:2002 are due to be superseded by a revised version, a draft copy is due to be submitted to ISO for FDIS ballot This standard has security implications
Communications Protocols ISO/IEC 14443-3: 1997 Identification cards - Contactless integrated circuit(s) cards - Proximity cards - Part 3: Initialisation and anti-collision
R Proximity integrated circuit cards This part continues the Type A and Type B duopoly, defining card initialisation, anti-collision procedures and basic communications protocols. Anti-collision procedures are the methods used to identify and select one card when several cards are active within the RF field of the terminal.
Communications Protocols ISO/IEC 14443-4 Identification cards - Contactless integrated circuit(s) cards - Proximity cards - Part 4: Transmission protocols
R Proximity integrated circuit cards This contains higher level (message level) data transmission protocol information, equivalent to ISO/IEC 7816's T=1 protocol, and is a bridge across to ISO 7816-4. For Type A cards only, ISO/IEC 14443-4 includes a protocol initialisation procedure.
Communications Protocols ISO/IEC 15693-3: 2001 Identification cards - Contactless integrated circuit(s) cards - Vicinity cards - Part 3: Anti-collision and transmission protocol
U Vicinity contactless integrated circuit cards
Communications Protocols ISO 8583 Financial transaction card originated message - interchange message specification
U All card types
Communications Protocols ISO 9992-1 Financial transaction cards Messages between the integrated circuit card and the card accepting device Part 1: Concepts and structures
U All card types
Communications Protocols ISO 9992-2 Financial transaction cards Messages between the integrated circuit card and the card accepting device Part 2: Functions, messages (commands and responses), data elements and structures.
U All card types
Communications Protocols ISO 10202-2 Financial transaction cards Security architecture of financial transaction systems using integrated circuit cards Part 2: Transaction process
R All card types This standard has security implications
Communications Protocols ISO 10202-6 Financial transaction cards Security architecture of financial transaction systems using integrated circuit cards
U All card types This standard has security implications
Communications Protocols ISO/IEC 10536-4 Identification cards Contactless integrated circuit(s) cards {Close coupling integrated circuit(s) cards (CICC)} Part 4: Answer to reset and transmission protocols.
U Close coupling integrated circuit(s) cards
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 7810 Physical characteristics. Identification cards
R All contact and combination cards To ensure that they can be read in a standard reader, all cards should be in ID-1 format as defined in this standard.
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 7811-1 Embossing. Identification cards Recording technique – Part 1: Embossing.
R Any card where embossing is required. Embossing should be in the standard location as defined for the benefit of the visually impaired and for interoperability reasons and should conform to the standard in other respects such as height and depth of embossing. It should be noted, however, that not all smart card readers can accept embossed cards; the decision to emboss should be taken with care.
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 7811-3 Embossing. Identification cards Recording technique - Part 3: Location of embossed characters on standard ID-1 cards.
R Any card where embossing is required. Note: ISO/IEC 7811-3 will be incorporated into ISO/IEC 7811-1 from the next edition.
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 7816-1: 1998 Identification cards Integrated circuit(s) cards with contacts Part 1: Physical characteristics
R Integrated circuit(s) cards with contacts This part supplements ISO/IEC 7810, setting out the particular physical characteristics of IC cards with contacts. Draft Amd 1: Maximum height of IC contact surface This standard has security implications
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 7816-2: 1999 Identification cards - Integrated circuit(s) cards with contacts - Part 2: Dimensions and location of the contacts
R Integrated circuit(s) cards with contacts This part has been revised recently to reduce some of its options, especially in the area of embossing (which has been shown to be detrimental to embedded silicon) and phasing out of the original contact positions.Draft Amd 1: Assignment of contacts C4 and C8 This standard has security implications
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 14443-1 Identification cards - Contactless integrated circuit(s) cards - Proximity cards - Part 1: Physical characteristics
R Proximity integrated circuit cards This part supplements the physical characteristics defined in ISO/IEC 7810
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 15693-1: 2000 Identification cards - Contactless integrated circuit(s) cards - Vicinity cards - Part 1: Physical characteristics
U Vicinity contactless integrated circuit cards
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 10536-1 Identification cards Contactless integrated circuit(s) cards Part 1: Physical characteristics
U Close coupling integrated circuit(s) cards
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. ISO/IEC 10536-2 Part 2: Dimensions and locations of coupling areas
U Close coupling integrated circuit(s) cards
Physical - Physical and interface standards cover the card dimensions; location and layout of contacts. BS EN 1332-2 Tactile Identifiers. Identification card systems - Man-machine interface - Part 2: Dimensions and location - a tactile identifier for ID-1 cards
U Where embossing is not used and there is a requirement for the user to present the card in a particular orientation, a tactile identifier should be provided as an aid to those with impaired vision. Certain card personalization equipment, unless modified, may have difficulty processing cards with tactile identifiers of the 'notch' type. Agreement must therefore be reached with the personalization service provider to use such cards.
Security ISO/IEC 7816-8: 1999 Identification cards - Integrated circuit(s) cards with contacts Part 8: Security inter industry commands
R Integrated circuit(s) cards with contacts Some of the elements of this version of ISO/IEC 7816-8 are due to be superseded by a revised version of ISO/IEC 7816-4. Draft copies of both parts have been submitted to ISO for FDIS ballot
Security ISO/IEC 7816-9: 2000 Identification cards Integrated circuit(s) cards with contacts Part 9: Additional inter industry commands and security attributes
R Integrated circuit(s) cards with contacts Some of the elements of this version of ISO/IEC 7816-9 are due to be superseded by a revised version of ISO/IEC 7816-4. Draft copies of both parts have been submitted to ISO for FDIS ballot
Security ISO/IEC 7816-11 Identification cards -- Integrated circuit(s) cards with contacts -- Part 11: Personal verfication through biometric methods.
R Integrated circuit(s) cards with contacts
Security ISO/IEC 7816-15 Identification cards - Integrated circuit(s) cards with contacts - Part 15: Cryptographic information application.
F
Security ISO 10202 Financial transaction cards Security architecture of financial transaction systems using integrated circuit cards Part 1: Card life cycle; Part 2: General principles and overview; Part 3: Cryptographic key relationships; Part 4: Secure application modules; Part 5: Use of algorithms; Part 6: Cardholder verification; Part 7: Key management Part 8: General principles and overview
U All card types
Security CWA 14355 eEurope: secure networks and smart cards. Guidelines for the implementation of Secure Signature-Creation Devices
http://www.cenorm.be/cenorm/businessdomains/businessdomains/informationsocietystandardizationsystem/published+cwas/
U All card types
Security CWA 14170 eEurope: secure networks and smart cards. Security Requirements for Signature Creation Systems
http://www.cenorm.be/cenorm/businessdomains/businessdomains/informationsocietystandardizationsystem/published+cwas/
U All card types
Security CWA 14169 eEurope: secure networks and smart cards. Secure Signature-Creation Devices, version 'EAL 4+'
http://www.cenorm.be/cenorm/businessdomains/businessdomains/informationsocietystandardizationsystem/published+cwas/
U All card types
Security CWA 14168 eEurope: secure networks and smart cards. Secure Signature-Creation Devices, version 'EAL 4'
http://www.cenorm.be/cenorm/businessdomains/businessdomains/informationsocietystandardizationsystem/published+cwas/
U All card types
Security CWA 14167 eEurope: secure networks and smart cards. Security Requirements for Trustworthy Systems Managing Certificates for Electronic Signatures Part 1: System Security Requirements Part 2 Cryptographic Module for CSP Signing Operations - Protection Profile (MCSO-PP)
http://www.cenorm.be/cenorm/businessdomains/businessdomains/informationsocietystandardizationsystem/published+cwas/
U All card types
Terminal Infrastructure EN 1332-3:1999 Identification card systems - Man-machine interface - Part 3: Key pads
R All card types
Terminal Infrastructure PC/SC Standards Consortium standards PC/SC Workgroup Interoperability Specification for ICCs and Personal Computer Systems • Part 1. Introduction and Architecture Overview • Part 2. Interface Requirements for Compatible IC Cards and Interface Devices • Part 3. Requirements for PC-Connected Interface Devices • Part 4. IFD Design Considerations and Reference Design Information • Part 5. ICC Resource Manager Definition • Part 6. ICC Service Provider Interface Definition • Part 7. Application Domain/Developer Design Considerations • Part 8. Recommendation for Implementation of Security and Privacy ICC Devices
U All card types For terminal equipment via personal computer systems.
 
e-GIF Status:
A = Adopted; see notes for applicability
R = Recommended for consideration
U = Under review by an ad hoc group
F = For future consideration
 
7.3.8 This list of smart card security standards is not exhaustive and is dynamic in nature. Additional standards with a security implication for smart cards can be found in Security Standards for Smart Cards, dated Oct 2003, namely CC, ETSI, FIPS and EMVCo.
 
Furthermore, NIST IT 6887 2003 Edition, GSC-ISS, Version 2.1 is an architectural model for interchangeable smart card service provider modules. A lifecycle security (Oct 2003) guidelines paper for project managers can also be found on GovTalk.
 
7.3.9 Security requirements implemented according to the above standards may not meet the security policy of particular government projects. It is recommended that central government departments refer to the Manual of Protective Security. Other parts of the public sector should refer to the e-Government Strategy Framework and guidelines on security before invoking compliance to the above standards in any contract.
 
go to content management go to contents page go to specifications
Back to top
Office of the e-Envoy © Crown copyright 2003 Published: 31/10/2003