INTERNATIONAL ISO/IEC STANDARD 24727-4 First edition 2008-11-01 Identification cards Integrated circuit card programming interfaces - Part 4: Application programming interface (APl) administration Cartes d'identification - Interfaces programmables de cartes a puce - Partie 4: Administration d'interface de programmation (APl) Reference number ISO/IEC 24727-4:2008(E) Iso IEC @ISO/IEC2008 HS under ted without license from IHS Not for Resale ISO/IEC 24727-4:2008(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by IsO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below COPYRIGHTPROTECTEDDOCUMENT @ ISO/IEC2008 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, IsO's member body in the country of the requester. ISO copyright office Case postale 56. CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail [email protected] Web www.iso.org Published in Switzerland @ ISO/IEc 2008 - All rights reserved ed without license from IHS Not for Resale ISO/IEC 24727-4:2008(E) Contents Page Foreword. Introduction .. vi 1 Scope 2 Normative references . 3 Terms and definitions.. 4 Abbreviated terms ..... 3 5 Architecture specialization. 5.1 Full-network-stack 5.2 Loyalstack.......... 5.3 OpaqueIcc-stack.. 5.4 Remote-loyal-stack. 10 5.5 ICC-resident-stack 11 5.6 Remote-ICC-stack.. 12 6 Security architecture..... 12 6.1 Path-protection-policy.... 12 6.2 ACL - ACR mapping... 14 6.3 Secure messaging 14 6.4 Trusted-channel key administration, 15 7 Connection components..... 15 7.1 Actionrequestandresponsesemantics 15 7.2 Proxy - Agent Architecture 15 7.3 Trusted-channel Interface.. 16 7.3.1 TC_API_Open request... 17 7.3.2 TC_API_Close request . 18 7.3.3 TC_API_Read request , 19 7.3.4 TC_API_Write request ... 20 7.3.5 TC_API_Reset request 21 7.3.6 TC_API_GetStatus request. 22 7.4 Interface Device API 23 7.4.1 Establish Context..... 7.4.2 ReleaseContext. 25 7.4.3 ListIFDs 26 7.4.4 GetIFDCapabilities 27 7.4.5 GetStatus 7.4.6 Wait.. 32 7.4.7 Cancel 33 7.4.8 ControiiFD 7.4.9 Connect 35 7.4.10 Disconnect 36 7.4.11 BeginTransaction. 37 7.4.12 EndTransaction.... 7.4.13 Transmit.. 39 7.4.14 VerifyUser. 40 7.4.15 ModifyVerificationData.. 43 7.4.16 Output ... 7.4.17 SignalEvent 47 Copyrght International Organizaion for standardization All rights reserved ili ted without license from IHS Not for Resale ISO/IEC 24727-4:2008(E) Annex A (normative) Path-protection Mechanisms... Annex B (normative) IFD - API: Web Service Binding Annex C (normative) IFD-Callback-API - Web Service Binding Bibliography..... ISO/IEC 2008-All rights reserved vided by IHS under lic Not for Resale ISO/IEC 24727-4:2008(E) Foreword IsO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission)formthespecializedsystemforworldwidestandardization.Nationalbodiesthataremembersof ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technology,ISOandTEChaveestablishedajointtechnicalcommittee,ISO/lECJTC1. Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at