欢迎来到麦多课文档分享! | 帮助中心 海量文档,免费浏览,给你所需,享你所想!
麦多课文档分享
全部分类
  • 标准规范>
  • 教学课件>
  • 考试资料>
  • 办公文档>
  • 学术论文>
  • 行业资料>
  • 易语言源码>
  • ImageVerifierCode 换一换
    首页 麦多课文档分享 > 资源分类 > PDF文档下载
    分享到微信 分享到微博 分享到QQ空间

    BS ISO IEC 29167-1-2012 Information technology Automatic identification and data capture techniques Air interface for security services and file management for RFID architecture《信息.pdf

    • 资源ID:588475       资源大小:972.33KB        全文页数:16页
    • 资源格式: PDF        下载积分:10000积分
    快捷下载 游客一键下载
    账号登录下载
    微信登录下载
    二维码
    微信扫一扫登录
    下载资源需要10000积分(如需开发票,请勿充值!)
    邮箱/手机:
    温馨提示:
    如需开发票,请勿充值!快捷下载时,用户名和密码都是您填写的邮箱或者手机号,方便查询和重复下载(系统自动生成)。
    如需开发票,请勿充值!如填写123,账号就是123,密码也是123。
    支付方式: 支付宝扫码支付    微信扫码支付   
    验证码:   换一换

    加入VIP,交流精品资源
     
    账号:
    密码:
    验证码:   换一换
      忘记密码?
        
    友情提示
    2、PDF文件下载后,可能会被浏览器默认打开,此种情况可以点击浏览器菜单,保存网页到桌面,就可以正常下载了。
    3、本站不支持迅雷下载,请使用电脑自带的IE浏览器,或者360浏览器、谷歌浏览器下载即可。
    4、本站资源下载后的文档和图纸-无水印,预览文档经过压缩,下载后原文更清晰。
    5、试题试卷类文档,如果标题没有明确说明有答案则都视为没有答案,请知晓。

    BS ISO IEC 29167-1-2012 Information technology Automatic identification and data capture techniques Air interface for security services and file management for RFID architecture《信息.pdf

    1、raising standards worldwideNO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAWBSI Standards PublicationBS ISO/IEC 29167-1:2012Information technology Automatic identification anddata capture techniquesPart 1: Air interface for security services andfile management for RFID architect

    2、ureBS ISO/IEC 29167-1:2012 BRITISH STANDARDNational forewordThis British Standard is the UK implementation of ISO/IEC29167-1:2012.The UK participation in its preparation was entrusted to TechnicalCommittee IST/34, Automatic identification and data capturetechniques.A list of organizations represente

    3、d on this committee can beobtained on request to its secretary.This publication does not purport to include all the necessaryprovisions of a contract. Users are responsible for its correctapplication. The British Standards Institution 2012. Published by BSI StandardsLimited 2012ISBN 978 0 580 73943

    4、9ICS 35.040Compliance with a British Standard cannot confer immunity fromlegal obligations.This British Standard was published under the authority of theStandards Policy and Strategy Committee on 31 March 2012.Amendments issued since publicationDate Text affectedBS ISO/IEC 29167-1:2012Reference numb

    5、erISO/IEC 29167-1:2012(E)ISO/IEC 2012INTERNATIONAL STANDARD ISO/IEC29167-1First edition2012-03-01Information technology Automatic identification and data capture techniques Part 1: Air interface for security services and file management for RFID architecture Technologies de linformation Techniques a

    6、utomatiques didentification et de capture de donnes Partie 1: Interface dair pour services de scurit et gestion des fichiers pour architecture RFID BS ISO/IEC 29167-1:2012ISO/IEC 29167-1:2012(E) COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2012 All rights reserved. Unless otherwise specified, no part of thi

    7、s publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Case postale 56 CH-121

    8、1 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO/IEC 2012 All rights reservedBS ISO/IEC 29167-1:2012ISO/IEC 29167-1:2012(E) ISO/IEC 2012 All rights reserved iiiForeword ISO (the International Organization for Standardiza

    9、tion) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to

    10、 deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO an

    11、d IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standards adopted by

    12、the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent

    13、 rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 29167-1 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 31, Automatic identification and data capture techniques. ISO/IEC 29167 consists of the f

    14、ollowing parts, under the general title Information technology Automatic identification and data capture techniques: Part 1: Air interface for security services and file management for RFID architecture BS ISO/IEC 29167-1:2012ISO/IEC 29167-1:2012(E) iv ISO/IEC 2012 All rights reservedIntroduction IS

    15、O/IEC 29167 describes file management and security as applicable for ISO/IEC 18000. ISO/IEC 29167 is an optional extension to the ISO/IEC 18000 air interfaces. The ISO/IEC 18000 series of International Standards on radio frequency identification (RFID) for item management does not offer strong secur

    16、ity of the tag and interrogator data and identity. For example, the unique item identifiers (UII) of tags are typically transmitted to every other device in the RF field and can thus be easily tracked. Additionally, sensitive data such as passwords are typically transmitted over RF without encryptio

    17、n and can easily be intercepted. Moreover, utilized passwords may be short in length. ISO/IEC 29167 fulfils the need for applications requiring effective security in the handling of sensitive information including the unauthorized interception and tracking of data and devices. ISO/IEC 29167 covers t

    18、he air interface for interrogators and tags that have security mechanisms and/or file management on board. ISO/IEC 29167 only applies to tags that perform the computations that are required for the security and file management mechanisms. Tag to tag communication is not excluded. BS ISO/IEC 29167-1:

    19、2012INTERNATIONAL STANDARD ISO/IEC 29167-1:2012(E) ISO/IEC 2012 All rights reserved 1Information technology Automatic identification and data capture techniques Part 1: Air interface for security services and file management for RFID architecture 1 Scope This part of ISO/IEC 29167 defines the archit

    20、ecture for security and file management for the ISO/IEC 18000 air interface standards for radio frequency identification (RFID) devices. It provides a common technical specification for security and file management for RFID devices that can be used by ISO committees developing RFID application stand

    21、ards. This part of ISO/IEC 29167 specifies architecture for untraceability, security services, and file management as a further optional extension of the air interface. Both security and file management are defined in alignment with existing air interfaces and this part of ISO/IEC 29167 only covers

    22、extensions on security and file management beyond the scope of the ISO/IEC 18000 air interfaces. This part of ISO/IEC 29167 defines various security features called security mechanisms that can be implemented by a tag depending on the application. A tag can support one, a subset, or all of the speci

    23、fied security mechanisms. For an interrogator it is possible to get information about the security mechanisms that are actually implemented and supported by a tag. Moreover, it has been considered that adding new security mechanisms remains possible. Besides signaling the presence of certain securit

    24、y services, further details of the mechanisms such as utilized encryption algorithm and key length also need to be specified and accessible. 2 Conformance In general it is assumed that all requirements defined in this part of ISO/IEC 29167 shall be fulfilled. A tag is compliant to this part of ISO/I

    25、EC 29167 if it supports one or more of the security mechanisms or file management mechanisms as defined in this part of ISO/IEC 29167. The discovery services are mandatory for interoperability. BS ISO/IEC 29167-1:2012ISO/IEC 29167-1:2012(E) 2 ISO/IEC 2012 All rights reserved3 Normative references Th

    26、e following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 15962, Information technology Radio frequen

    27、cy identification (RFID) for item management Data protocol: data encoding rules and logical memory functions ISO/IEC 19762 (all parts), Information technology Automatic identification and data capture (AIDC) techniques Harmonized vocabulary 4 Terms and definitions For the purposes of this document,

    28、the terms and definitions given in ISO/IEC 19762 (all parts) apply. 5 Safeguarding personal privacy and data 5.1 Motivation RFID technology enables the processing of data without physical contact or visible interaction between the interrogator and the tag. The technology can deliver numerous economi

    29、c and societal benefits. RFID applications hold the potential to process data relating to an identified or identifiable person who is being identified directly or indirectly. Furthermore, the potential exists for this technology to be used to monitor an individual through his/her possession of one o

    30、r more items that contain a unique RFID item number. This interaction can happen without the individual concerned being aware of it. The functionality offered by ISO/IEC 29167 allows RFID applications to ensure privacy, integrity, authenticity and confidentiality of the data on the tag. This functio

    31、nality includes organization of data and access control. ISO/IEC 29167, in combination with ISO/IEC 18000, addresses issues of privacy and security related to the use of RFID for Item Management. This part of ISO/IEC 29167 provides an overview, while details will be described in the specific parts o

    32、f ISO/IEC 29167 in combination with the corresponding parts of ISO/IEC 18000. ISO/IEC 29167 extends ISO/IEC 18000 with the following features: untraceability; authenticity; secure access to data and functions. 5.2 Features of this International Standard The tag features and air interface commands in

    33、 ISO/IEC 29167 enable the implementation of the following features in an RFID system: Untraceability: by putting the tag in a special mode (called untraceability mode) where the RFID tag hides all or part of its identity. Certify authenticity: by using one or more air interface commands a tag can pr

    34、oduce a certificate of authenticity. Verification of this certificate may require additional features such as key management to be implemented in the RFID system. BS ISO/IEC 29167-1:2012ISO/IEC 29167-1:2012(E) ISO/IEC 2012 All rights reserved 3 Secure access to tag data and functions: data can be or

    35、ganized in files, access to these files and tag functions can be configured and transmission of the data can be secured. In addition to these features, the tag also provides the necessary information about the features and air interface commands it supports. 5.3 Safeguarding personal privacy and dat

    36、a on the tag Privacy and information security features should be built into the RFID applications before their widespread use1). ISO/IEC 29167 is intended to assist RFID application operators in taking reasonable measures to achieve security and privacy-by-design. The main properties that need to be

    37、 protected are: 1) Identity of the tag The identity of the tag can be protected by the untraceability feature. Untraceability prevents unauthorized tracking of a tag. Untraceability prevents associating the tag to an identified or identifiable person. 2) Data on the tag Access to the data (and other

    38、 features of the tag) may be protected by verifying the authenticity of the interrogator. The data on the tag may be organized in files. Access rights may be associated to each individual file. 3) Communication between the tag and the interrogator The data that needs to be exchanged between the tag

    39、and the interrogator can be overheard by somebody who intercepts this communication. The integrity and confidentiality of the data may be protected by cryptographic methods. 5.4 Implications of security 5.4.1 Key management Use of cryptography requires the management of secrets, sometimes including

    40、keys. Management of secrets increases system complexity. For example, the secrets should be communicated and stored securely. Complexity increases with multiple custodians of secrets in the system. Mechanisms to recover from compromised secrets increases complexity of the system. CAUTION Inadequate

    41、management of secrets can render an entire supply chain ineffective. 5.4.2 Increased resource requirements for RFID components Implementation of cryptography requires additional resources on the interrogator and/or on the tag. 5.4.3 Performance Application of cryptography impacts power and time cons

    42、umption for the RFID components and may degrade system performance. 1) For further information see related document of the European Commission: 9, 10, 11, 12, 13, 14, 15 and 16. BS ISO/IEC 29167-1:2012ISO/IEC 29167-1:2012(E) 4 ISO/IEC 2012 All rights reserved6 Security mechanisms 6.1 General This pa

    43、rt of ISO/IEC 29167 describes a framework to implement security mechanisms used in an RFID system. The other parts of ISO/IEC 29167 will specify detailed implementation requirements for the corresponding frequencies and define the command set. The tag shall allow access control by security mechanism

    44、s as will be specified in other parts of ISO/IEC 29167. The mechanisms specify how data and resources on the tag can be accessed and retrieved in a secure manner and how the data-communication channel between the interrogator and the tag can be protected against attacks (tracking, cloning, relaying

    45、etc.). 6.2 Untraceability Untraceability is the property that controls if and how the tag can be identified. Untraceability ranges from uniquely identifiable (no untraceability) to completely untraceable when a tag does not emit any (identifiable) information. For most practical applications the hig

    46、hest level of untraceability will correspond to that of a tag that is detectable and for which the physical communication properties can be determined: e.g. ISO/IEC 18000-6 type C physical layer. This untraceability level could be realized by, for instance, ensuring that all untraceable tags of the

    47、same family reply to identical queries with a response that is formatted identically and that all the fields of this reply are either: the same for all tags, or undistinguishable from random. Examples in which information is revealed include: no information (ultimate untraceability), presence and ta

    48、g family (highest practical untraceability) cryptographic suite parameters (e.g. information about authentication required to change the untraceability settings), partial identity (e.g. manufacturer info), and full identity (e.g. serial number). The other parts of ISO/IEC 29167 will define the detai

    49、led behavior of the untraceability mode for particular ISO/IEC 18000 compatible tags. Those parts will also specify how the untraceability mode is enabled and disabled. 6.3 Physical mechanisms Physical security mechanisms are security functions based on physical properties, such as communication distance reduction, or physical interaction such as a push button. The other parts of ISO/IEC 29167 will define the detailed behavior of the physical mechanisms for particular ISO/IEC


    注意事项

    本文(BS ISO IEC 29167-1-2012 Information technology Automatic identification and data capture techniques Air interface for security services and file management for RFID architecture《信息.pdf)为本站会员(eastlab115)主动上传,麦多课文档分享仅提供信息存储空间,仅对用户上传内容的表现方式做保护处理,对上载内容本身不做任何修改或编辑。 若此文所含内容侵犯了您的版权或隐私,请立即通知麦多课文档分享(点击联系客服),我们立即给予删除!




    关于我们 - 网站声明 - 网站地图 - 资源地图 - 友情链接 - 网站客服 - 联系我们

    copyright@ 2008-2019 麦多课文库(www.mydoc123.com)网站版权所有
    备案/许可证编号:苏ICP备17064731号-1 

    收起
    展开