ISO 24534-5-2011 Intelligent transport systems - Automatic vehicle and equipment identification - Electronic Registration Identification (ERI) for vehicles - Pa.pdf

《ISO 24534-5-2011 Intelligent transport systems - Automatic vehicle and equipment identification - Electronic Registration Identification (ERI) for vehicles - Pa.pdf》由会员分享，可在线阅读，更多相关《ISO 24534-5-2011 Intelligent transport systems - Automatic vehicle and equipment identification - Electronic Registration Identification (ERI) for vehicles - Pa.pdf（46页珍藏版）》请在麦多课文档分享上搜索。

1、 Reference number ISO 24534-5:2011(E) ISO 2011INTERNATIONAL STANDARD ISO 24534-5 First edition 2011-12-15 Intelligent transport systems Automatic vehicle and equipment identification Electronic Registration Identification (ERI) for vehicles Part 5: Secure communications using symmetrical techniques

2、Systmes de transport intelligents Identification automatique des vhicules et des quipements Identification denregistrement lectronique (ERI) pour les vhicules Partie 5: Communications scurises utilisant des techniques symtriques ISO 24534-5:2011(E) COPYRIGHT PROTECTED DOCUMENT ISO 2011 All rights re

3、served. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requ

4、ester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO 2011 All rights reservedISO 24534-5:2011(E) ISO 2011 All rights reserved iiiContents Page Foreword iv Introduction . v 1

5、Scope 1 2 Normative references 2 3 Terms and definitions . 2 4 Symbols and abbreviations 8 5 System communications concept . 9 5.1 General . 9 5.2 Overview . 9 5.3 Security services . 13 5.4 Communication architecture description . 14 5.5 Interfaces 16 6 Interface requirements 17 6.1 Overview . 17 6

6、.2 Abstract transaction definitions 17 6.3 The onboard interface to the ERT 27 6.4 The short-range air interface 27 6.5 Remote access interface 29 Annex A (normative) ASN.1 module definitions 31 Annex B (informative) Operational scenarios 34 Annex C (normative) PICS pro forma . 37 Bibliography 39 IS

7、O 24534-5:2011(E) iv ISO 2011 All rights reservedForeword ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each

8、member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International

9、 Electrotechnical Commission (IEC) on all matters of electrotechnical standardization. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of technical committees is to prepare International Standards. Draft International Standards

10、adopted by the technical committees are circulated to the member bodies for voting. Publication as an International Standard requires approval by at least 75 % of the member bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of

11、patent rights. ISO shall not be held responsible for identifying any or all such patent rights. ISO 24534-5 was prepared by Technical Committee ISO/TC 204, Intelligent transport systems. This first edition of ISO 24534-5 cancels and replaces the first edition of ISO/TS 24534-5:2008. ISO 24534 consis

12、ts of the following parts, under the general title Intelligent transport systems Automatic vehicle and equipment identification Electronic Registration Identification (ERI) for vehicles: Part 1: Architecture Part 2: Operational requirements Part 3: Vehicle data Part 4: Secure communications using as

13、ymmetrical techniques Part 5: Secure communications using symmetrical techniques ISO 24534-5:2011(E) ISO 2011 All rights reserved vIntroduction A quickly emerging need has been identified within administrations to improve the unique identification of vehicles for a variety of services. Situations ar

14、e already occurring where manufacturers intend to fit lifetime tags to vehicles. Various governments are considering the needs and benefits of electronic registration identification (ERI), such as legal proof of vehicle identity with potential mandatory usages. There is a commercial and economic jus

15、tification both in respect of tags and infrastructure that a standard enable an interoperable solution. ERI is a means of uniquely identifying road vehicles. The application of ERI will offer significant benefits over existing techniques for vehicle identification. It will be an enabling technology

16、for the future management and administration of traffic and transport, including applications in free flow, multi-lane, traffic conditions with the capability of supporting mobile transactions. ERI addresses the need of authorities and other users for a trusted electronic identification, including r

17、oaming vehicles. This part of ISO 24534 specifies the interfaces for the exchange of data between an onboard component containing the ERI data and an ERI reader or writer inside or outside the vehicle using symmetric cryptographic techniques. The exchanged identification data consists of a unique ve

18、hicle identifier and can also include data typically found in the vehicles registration certificate (see ISO 24534-3 for details). The authenticity of the exchanged vehicle data can be further enhanced by using symmetric encryption techniques, i.e. techniques based on secret keys shared by a particu

19、lar community of users. The ERI interface defined in this part of ISO 24534 supports confidentiality measures to adhere to international and national privacy regulations and to prevent other misuse of electronic identification of vehicles. Following the events of September 11th, 2001, and the subseq

20、uent reviews of anti-terrorism measures, the need for ERI has been identified as a possible anti-terrorism measure. The need for international harmonization of such ERI is therefore important. It is also important to ensure that any ERI measures contain protection against misuse by terrorists. This

21、part of ISO 24534 makes use of the basic automatic vehicle identification (AVI) provisions already defined in ISO 14814 and ISO 14816. In addition, it includes provisions for security and the use of additional registration data of a vehicle. INTERNATIONAL STANDARD ISO 24534-5:2011(E) ISO 2011 All ri

22、ghts reserved 1Intelligent transport systems Automatic vehicle and equipment identification Electronic Registration Identification (ERI) for vehicles Part 5: Secure communications using symmetrical techniques 1 Scope This International Standard provides the requirements for an electronic registratio

23、n identification (ERI) using symmetric encryption techniques that are based on an identifier assigned to a vehicle (e.g. for recognition by national authorities), suitable to be used for electronic identification of local and foreign vehicles by national authorities, vehicle manufacturing, in-life m

24、aintenance and end-of-life identification (vehicle life-cycle management), adaptation of vehicle data, e.g. in case of international re-sales, safety related purposes, crime reduction, commercial services, and adhering to privacy and data protection regulations. This part of ISO 24534 specifies the

25、interfaces for a secure exchange of data between the electronic registration tag (ERT), which is the onboard device containing the ERI data, and the ERI reader or ERI writer in or outside the vehicle using symmetric encryption techniques. Symmetric encryption techniques are based on secret keys shar

26、ed by a particular community of users, i.e. in closed user groups in which it is trusted that keys are not revealed to outsiders. It includes the interface between an ERT and an onboard ERI reader or writer, the interface between the onboard ERI equipment and (roadside) reading and writing equipment

27、, and security issues related to the communication with the ERT. NOTE The vehicle identifiers and possible related vehicle information (as typically contained in a vehicle registration certificate) are defined in ISO 24534-3. ISO 24534-5:2011(E) 2 ISO 2011 All rights reserved2 Normative references T

28、he following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 8825-2, Information technology ASN.1 encod

29、ing rules: Specification of Packed Encoding Rules (PER) Part 2 ISO 14816, Road transport and traffic telematics Automatic vehicle and equipment identification Numbering and data structure ISO 15628, Road transport and traffic telematics Dedicated short range communication (DSRC) DSRC application lay

30、er EN 12834, Road transport and traffic telematics Dedicated Short Range Communication (DSRC) DSRC application layer 3 Terms and definitions For the purposes of this document, the following terms and definitions apply. 3.1 access control prevention of unauthorized use of a resource, including the pr

31、evention of use of a resource in an unauthorized manner ISO 7498-2, definition 3.3.1 3.2 access control list list of entities, together with their access rights, which are authorized to have access to a resource ISO 7498-2, definition 3.3.2 3.3 active threat threat of a deliberate unauthorized chang

32、e to the state of the system ISO 7498-2, definition 3.3.4 EXAMPLE Modification of messages, replay of messages, insertion of spurious messages, masquerading as an authorized entity and denial of service. 3.4 additional vehicle data electronic registration identification (ERI) data in addition to the

33、 vehicle identifier ISO 24534-3, definition 3.1 3.5 air interface conductor-free medium between onboard equipment (OBE) and the reader/interrogator through which the linking of the onboard equipment (OBE) to the reader/interrogator is achieved by means of electro-magnetic signals ISO 14814, definiti

34、on 3.2 ISO 24534-5:2011(E) ISO 2011 All rights reserved 33.6 authorization granting of rights, which includes the granting of access based on access rights ISO 7498-2, definition 3.3.10 3.7 challenge data item chosen at random and sent by the verifier to the claimant, which is used by the claimant,

35、in conjunction with secret information held by the claimant, to generate a response which is sent to the verifier ISO 9798-1, definition 3.3.5 NOTE In this part of ISO 24534, the term challenge is also used in case an ERT does not have enabled encryption capabilities and the challenge is merely copi

36、ed without any secret information applied. 3.8 ciphertext data produced, through the use of encipherment, the semantic content of which is not available ISO 7498-2, definition 3.3.14 3.9 claimant entity which is or represents a principal for the purposes of authentication, including the functions ne

37、cessary for engaging in authentication exchanges on behalf of a principal ISO/IEC 10181-2, definition 3.10 3.10 cleartext intelligible data, the semantic content of which is available ISO 7498-2, definition 3.3.15 3.11 confidentiality property that information is not made available or disclosed to u

38、nauthorized individuals, entities, or processes ISO 7498-2, definition 3.3.16 3.12 data integrity integrity property that data has not been altered or destroyed in an unauthorized manner ISO 7498-2, definition 3.3.21 3.13 decipherment decryption reversal of a corresponding reversible encipherment IS

39、O 7498-2, definition 3.23 ISO 24534-5:2011(E) 4 ISO 2011 All rights reserved3.14 distinguishing identifier information which unambiguously distinguishes an entity ISO 9798-1, definition 3.3.9 3.15 electronic registration identification ERI action or act of identifying a vehicle with electronic means

40、 for purposes as mentioned in the scope of this part of ISO 24534 3.16 electronic registration reader ERR device used to read or read/write data from or to an electronic registration tag (ERT) NOTE 1 An ERR communicates directly, i.e. via an OSI data-link, with an ERT. NOTE 2 An ERR can also be an E

41、RI reader and/or an ERI writer or can act as a relay in the exchange of ERI data protocol units between an ERT and an ERI reader/writer. 3.17 electronic registration tag ERT onboard ERI device that contains the ERI data, including the relevant implemented security provisions and one or more interfac

42、es to access that data NOTE 1 In case of high security, the ERT is a type of secure application module (SAM). NOTE 2 The ERT can be a separate device or can be integrated into an onboard device that also provides other capabilities (e.g. DSRC communications). 3.18 encipherment encryption cryptograph

43、ic transformation of data to produce ciphertext NOTE 1 Encipherment can be irreversible, in which case the corresponding decipherment process cannot feasibly be performed. NOTE 2 Adapted from ISO 7498-2, definition 3.3.27. 3.19 end-to-end encipherment encipherment of data within or at the source end

44、 system, with the corresponding decipherment occurring only within or at the destination end system ISO 7498-2, definition 3.3.29 3.20 entity authentication corroboration that an entity is the one claimed ISO 9798-1, definition 3.3.11 3.21 ERI data vehicle identifying data which can be obtained from

45、 the ERT that consists of the vehicle identifier and possible additional vehicle data NOTE Adapted from ISO 24534-3, definition 3.4. ISO 24534-5:2011(E) ISO 2011 All rights reserved 53.22 ERI reader device used to read ERI data directly or indirectly from an ERT by invoking ERI transactions NOTE 1 I

46、n case an ERI reader exchanges the ERI protocol data units directly via a data link with an ERT, it is also called an ERR. In case it communicates via one or more nodes, only the last node in this sequence is called an ERR. As a consequence, an external ERI reader can, depending on the onboard confi

47、guration, act for some vehicles as an ERR and for others not. NOTE 2 See also onboard ERI reader and external ERI reader. 3.23 ERI system operator organization responsible for the operation of the ERI system and acting as the security authority for the ERI security domain 3.24 ERI writer device used

48、 to write ERI data directly or indirectly into an ERT by invoking ERI transactions NOTE 1 In case an ERI writer exchanges the ERI protocol data units directly via a data link with an ERT, it is also called an ERR. In case it communicates via one or more nodes, only the last node in this sequence is

49、called an ERR. As a consequence, an external ERI writer can, depending on the onboard configuration, act for some vehicles as an ERR and for others not. NOTE 2 See also onboard ERI writer and external ERI writer. 3.25 external ERI reader ERI reader that is not part of the onboard ERI equipment NOTE 1 An external ERI reader is not fitted within or on the outside of the vehicle. NOTE 2 A distinction is made between proximity, short-range (DSRC),