Résumé
ISO 9564-1:2011 specifies the basic principles and techniques which provide the minimum security measures required for effective international personal identification number (PIN) management. These measures are applicable to those institutions responsible for implementing techniques for the management and protection of PINs during their creation, issuance, usage and deactivation.
ISO 9564-1:2011 is applicable to the management of cardholder PINs for use as a means of cardholder verification in retail banking systems in, notably, automated teller machine (ATM) systems, point-of-sale (POS) terminals, automated fuel dispensers, vending machines, banking kiosks and PIN selection/change systems. It is applicable to issuer and interchange environments.
The provisions of ISO 9564-1:2011 are not intended to cover:
a) PIN management and security in environments where no persistent cryptographic relationship exists between the transaction-origination device and the acquirer, e.g. use of a browser for online shopping;
b) protection of the PIN against loss or intentional misuse by the customer;
c) privacy of non-PIN transaction data;
d) protection of transaction messages against alteration or substitution;
e) protection against replay of the PIN or transaction;
f) specific key management techniques;
g) offline PIN verification used in contactless devices;
h) requirements specifically associated with PIN management as it relates to multi-application functionality in integrated circuit (IC) cards.
Informations générales
-
État actuel: AnnuléeDate de publication: 2011-02Stade: Annulation de la Norme internationale [95.99]
-
Edition: 3
-
Comité technique :ISO/TC 68/SC 2ICS :35.240.40
- RSS mises à jour
Cycle de vie
-
Précédemment
AnnuléeISO 9564-1:2002
AnnuléeISO 9564-3:2003
-
Actuellement
-
00
Préliminaire
-
10
Proposition
-
20
Préparation
-
30
Comité
-
40
Enquête
-
50
Approbation
-
60
Publication
-
90
Examen
-
95
Annulation
Amendements
Proposent un contenu additionnel; disponibles à l’achat; non inclus dans le texte de la norme en vigueur.AnnuléeISO 9564-1:2011/Amd 1:2015
-
00
-
Révisée par
PubliéeISO 9564-1:2017