智能卡规范ISO-IEC 7816-4：文件系统与命令详解

4星 · 超过85%的资源需积分: 10 3 浏览量更新于2024-07-24 收藏 693KB PDF 举报

"ISO-IEC 7816-4是智能卡标准的一部分，主要定义了智能卡（也称为集成电路卡或IC卡）的文件系统结构、安全机制以及用于交换的命令。该标准由国际标准化组织（ISO）和国际电工委员会（IEC）联合发布，旨在确保不同厂商的智能卡产品之间的互操作性。此标准的第二版发布于2005年1月15日，对智能卡的操作、安全性和通信协议提供了详细规定。" 正文： ISO-IEC 7816-4是智能卡技术领域的一个关键标准，它详细规定了智能卡上文件系统的组织方式，包括数据存储和访问的方式。文件系统在智能卡中扮演着至关重要的角色，因为它决定了如何存储和管理卡片上的各种应用和数据。标准中的文件类型通常包括基本文件（EF）、目录文件（DF）和执行文件（XF），这些文件按照特定层次结构组织，允许卡片用户或读卡器通过命令来导航和操作。在安全方面，ISO-IEC 7816-4描述了如何实现卡片的安全机制，以保护卡片内的敏感数据，如个人识别号（PIN）、密钥和其他私密信息。这些机制可能包括访问控制、加密算法、数字签名和数据完整性保护。标准还定义了一系列用于验证身份、授权交易和保护数据的命令。命令部分是ISO-IEC 7816-4的核心内容，它规定了读取、写入、擦除、管理文件、执行计算以及其他操作的命令集。例如，SELECT命令用于选择要操作的文件或应用，READ BINARY命令用于读取文件中的数据，UPDATE BINARY命令则用于修改现有数据。这些命令确保了卡片与读卡器之间的一致通信。此外，标准还涉及卡片与外部设备之间的通信协议，包括传输层的细节，如T=0和T=1协议，它们定义了数据交换的格式和流程。T=0协议适用于简单和低速的通信，而T=1协议则增加了错误检测和重传机制，提高了通信的可靠性。 ISO-IEC 7816-4不仅对智能卡行业至关重要，而且在许多应用领域都有所应用，如金融交易（如银行卡）、身份证件（如护照）、公共交通票务系统等。遵循这一标准，可以确保不同制造商的卡片和读卡设备能够无缝协作，促进了全球范围内的互操作性和标准化。

ISO/IEC 7816-4:2005(E)

5.1.1.1 Command chaining

This clause specifies a mechanism whereby in the interindustry class, consecutive command-response pairs

can be chained. The mechanism may be used when executing a multi-step process, e.g., transmitting a data

string too long for a single command.

If the card supports the mechanism, then it shall indicate it (see Table 88, third software function table) in the

historical bytes (see 8.1.1) or in EF.ATR (see 8.2.1.1).

This document specifies the card behaviour only in the case where, once initiated, a chain is terminated

before initiating a command-response pair not part of the chain. Otherwise the card behaviour is not specified.

For chaining in the interindustry class, bit 5 of CLA shall be used while the other seven bits are constant.

 If bit 5 is set to 0, then the command is the last or only command of a chain.

 If bit 5 is set to 1, then the command is not the last command of a chain.

In response to a command that is not the last command of a chain, SW1-SW2 set to '9000' means that the

process has been completed so far; warning indications are prohibited (see 5.1.3); moreover, the following

specific error conditions may occur.

 If SW1-SW2 is set to '6883', then the last command of the chain is expected.

 If SW1-SW2 is set to '6884', then command chaining is not supported.

5.1.1.2 Logical channels

This clause specifies a mechanism whereby in the interindustry class, command-response pairs can refer to

logical channels.

If the card supports the mechanism, then it shall indicate the maximum number of available channels (see

Table 88, third software function table) in the historical bytes (see 8.1.1) or in EF.ATR (see 8.2.1.1).

 If the indicated number is four or less, then only Table 2 applies.

 If the indicated number is five or more, then Table 3 also applies.

For referring to logical channels in the interindustry class, the following rules apply.

 CLA encodes the channel number of the command-response pair.

 The basic channel shall be permanently available, i.e., it cannot be closed. Its channel number is zero.

 Cards not supporting the mechanism (default value) shall use only the basic channel.

 Any other channel shall be opened by completion of either a

SELECT command (see 7.1.1) where CLA

encodes a channel number not yet in use, or a

MANAGE CHANNEL command with open function (see 7.1.2).

 Any other channel can be closed by the completion of a

MANAGE CHANNEL command with close function.

After closing, the channel shall be available for re-use.

 Only one channel shall be active at a time. The use of logical channels does not remove the prohibition of

interleaving command-response pairs across the interface, i.e., the response APDU shall be received

before initiating another command-response pair (see 5.1).

 If not explicitly excluded by the file descriptor byte (see Table 14), more than one channel may be opened

to the same structure (see 5.3), i.e., to a DF, possibly an application DF, and also possibly to an EF.

Each logical channel has its own security status (see 5.4). The way to share a security status is outside the

scope of this document.

Reproduced by IHS under license with ISO

Not for Resale

No reproduction or networking permitted without license from IHS

--`,,,`,`-`-`,,`,,`,`,,`---

ISO/IEC 7816-4:2005(E)

5.1.2 Instruction byte

INS indicates the command to process. Due to specifications in ISO/IEC 7816-3, the values '6X' and '9X' are

invalid.

Table 4 lists all the commands specified in ISO/IEC 7816 at the time of publication.

 Table 4.1, i.e., the left side, lists the command names in the alphabetic order.

 Table 4.2, i.e., the right side, lists the INS codes in the numeric order.

Table 4.1 — Commands in the alphabetic order Table 4.2 — Commands in the numeric order

Command name INS See INS Command name See

ACTIVATE FILE '44' Part 9 '04' DEACTIVATE FILE Part 9

APPEND RECORD 'E2' 7.3.7 '0C' ERASE RECORD (S) 7.3.8

CHANGE REFERENCE DATA '24' 7.5.7 '0E', '0F' ERASE BINARY 7.2.7

CREATE FILE 'E0' Part 9 '10' PERFORM SCQL OPERATION Part 7

DEACTIVATE FILE '04' Part 9 '12' PERFORM TRANSACTION OPERATION Part 7

DELETE FILE 'E4' Part 9 '14' PERFORM USER OPERATION Part 7

DISABLE VERIFICATION REQUIREMENT '26' 7.5.9 '20', '21' VERIFY 7.5.6

ENABLE VERIFICATION REQUIREMENT '28' 7.5.8 '22' MANAGE SECURITY ENVIRONMENT 7.5.11

ENVELOPE 'C2', 'C3' 7.6.2 '24' CHANGE REFERENCE DATA 7.5.7

ERASE BINARY '0E', '0F' 7.2.7 '26' DISABLE VERIFICATION REQUIREMENT 7.5.9

ERASE RECORD (S) '0C' 7.3.8 '28' ENABLE VERIFICATION REQUIREMENT 7.5.8

EXTERNAL (/ MUTUAL) AUTHENTICATE '82' 7.5.4 '2A' PERFORM SECURITY OPERATION Part 8

GENERAL AUTHENTICATE '86', '87' 7.5.5 '2C' RESET RETRY COUNTER 7.5.10

GENERATE ASYMMETRIC KEY PAIR '46' Part 8 '44' ACTIVATE FILE Part 9

GET CHALLENGE '84' 7.5.3 '46' GENERATE ASYMMETRIC KEY PAIR Part 8

GET DATA 'CA', 'CB' 7.4.2 '70' MANAGE CHANNEL 7.1.2

GET RESPONSE 'C0' 7.6.1 '82' EXTERNAL (/ MUTUAL) AUTHENTICATE 7.5.4

INTERNAL AUTHENTICATE '88' 7.5.2 '84' GET CHALLENGE 7.5.3

MANAGE CHANNEL '70' 7.1.2 '86', '87' GENERAL AUTHENTICATE 7.5.5

MANAGE SECURITY ENVIRONMENT '22' 7.5.11 '88' INTERNAL AUTHENTICATE 7.5.2

PERFORM SCQL OPERATION '10' Part 7 'A0', 'A1' SEARCH BINARY 7.2.6

PERFORM SECURITY OPERATION '2A' Part 8 'A2' SEARCH RECORD 7.3.7

PERFORM TRANSACTION OPERATION '12' Part 7 'A4' SELECT 7.1.1

PERFORM USER OPERATION '14' Part 7 'B0', 'B1' READ BINARY 7.2.3

PUT DATA 'DA', 'DB' 7.4.3 'B2', 'B3' READ RECORD (S) 7.3.3

READ BINARY 'B0', 'B1' 7.2.3 'C0' GET RESPONSE 7.6.1

READ RECORD (S) 'B2', 'B3' 7.3.3 'C2', 'C3' ENVELOPE 7.6.2

RESET RETRY COUNTER '2C' 7.5.10 'CA', 'CB' GET DATA 7.4.2

SEARCH BINARY 'A0', 'A1' 7.2.6 'D0', 'D1' WRITE BINARY 7.2.6

SEARCH RECORD 'A2' 7.3.7 'D2' WRITE RECORD 7.3.4

SELECT 'A4' 7.1.1 'D6', 'D7' UPDATE BINARY 7.2.5

TERMINATE CARD USAGE 'FE' Part 9 'DA', 'DB' PUT DATA 7.4.3

TERMINATE DF 'E6' Part 9 'DC', 'DD' UPDATE RECORD 7.3.5

TERMINATE EF 'E8' Part 9 'E0' CREATE FILE Part 9

UPDATE BINARY 'D6', 'D7' 7.2.5 'E2' APPEND RECORD 7.3.6

UPDATE RECORD 'DC', 'DD' 7.3.5 'E4' DELETE FILE Part 9

VERIFY '20', '21' 7.5.6 'E6' TERMINATE DF Part 9

WRITE BINARY 'D0', 'D1' 7.2.4 'E8' TERMINATE EF Part 9

WRITE RECORD 'D2' 7.3.4 'FE' TERMINATE CARD USAGE Part 9

 In the interindustry class, any valid INS code not defined in ISO/IEC 7816 is reserved for future use by ISO/IEC JTC 1/SC 17.

ISO/IEC 7816 specifies the use of those commands in the interindustry class.

 This document (see 7) specifies commands for interchange.

 ISO/IEC 7816-7

[4]

specifies commands for structured card query language (SCQL).

 ISO/IEC 7816-8

[4]

specifies commands for security operations.

 ISO/IEC 7816-9

[4]

specifies commands for card management.

Reproduced by IHS under license with ISO

Not for Resale

No reproduction or networking permitted without license from IHS

--`,,,`,`-`-`,,`,,`,`,,`---

ISO/IEC 7816-4:2005(E)

In the interindustry class, bit 1 of INS indicates a data field format as follows.

 If bit 1 is set to 0 (even INS code), then no indication is provided.

 If bit 1 is set to 1 (odd INS code), then

BER-TLV encoding (see 5.2.2) shall apply as follows.

• In unchained commands with SW1 not set to '61', data fields, if any, shall be encoded in

BER-TLV.

• Command chaining and / or the use of SW1 set to '61' allow the transmission of data strings too long

for a single command. Such a process may split data objects in data fields consecutively sent as a

sequence in one direction, i.e., while sending no data field in the opposite direction. When chaining

commands and / or using SW1 set to '61', the concatenation of all the consecutive data fields in the

same direction in the same sequence shall be encoded in

BER-TLV.

5.1.3 Status bytes

SW1-SW2 indicates the processing state. Due to specifications in ISO/IEC 7816-3, any value different from

'6XXX' and '9XXX' is invalid; any value '60XX' is also invalid.

The values '61XX', '62XX', '63XX', '64XX', '65XX', '66XX', '68XX', '69XX', '6AXX' and '6CXX' are interindustry.

Due to specifications in ISO/IEC 7816-3, the values '67XX', '6BXX', '6DXX', '6EXX', '6FXX' and '9XXX' are

proprietary, except the values '6700', '6B00', '6D00', '6E00', '6F00' and '9000' that are interindustry.

Figure 1 shows the structural scheme of the values '9000' and '61XX' to '6FXX' for SW1-SW2.

Figure 1 — Structural scheme of values of SW1-SW2

Table 5 lists all the interindustry values of SW1-SW2 and shows their general meaning. ISO/IEC JTC 1/SC 17

reserves for future use any interindustry value of SW1-SW2 not defined in ISO/IEC 7816.

Table 5 — General meaning of the interindustry values of SW1-SW2

SW1-SW2 Meaning

Normal

processing

'9000'

'61XX'

No further qualification

SW2 encodes the number of data bytes still available (see text below)

Warning

processing

'62XX'

'63XX'

State of non-volatile memory is unchanged (further qualification in SW2)

State of non-volatile memory has changed (further qualification in SW2)

Execution

error

'64XX'

'65XX'

'66XX'

State of non-volatile memory is unchanged (further qualification in SW2)

State of non-volatile memory has changed (further qualification in SW2)

Security-related issues

Checking

error

'6700'

'68XX'

'69XX'

'6AXX'

'6B00'

'6CXX'

'6D00'

'6E00'

'6F00'

Wrong length; no further indication

Functions in CLA not supported (further qualification in SW2)

Command not allowed (further qualification in SW2)

Wrong parameters P1-P2 (further qualification in SW2)

Wrong parameters P1-P2

Wrong L

field; SW2 encodes the exact number of available data bytes (see text below)

Instruction code not supported or invalid

Class not supported

No precise diagnosis

If the process is aborted with a value of SW1 from '64' to '6F', then the response data field shall be absent.

If SW1 is set to '63' or '65', then the state of the non-volatile memory has changed. If SW1 is set to '6X' except

for '63' and '65', then the state of the non-volatile memory is unchanged.

SW1-SW2

Process completed Process aborted

Normal processing

'9000' and '61XX'

Warning processing

'62XX' and '63XX'

Execution error

'64XX' to '66XX'

Checking error

'67XX' to '6FXX'

Reproduced by IHS under license with ISO

Not for Resale

No reproduction or networking permitted without license from IHS

--`,,,`,`-`-`,,`,,`,`,,`---

ISO/IEC 7816-4:2005(E)

In response to a command that is not the last command of a chain (see 5.1.1.1), interindustry warning

indications are prohibited (see also ISO/IEC 7816-3), i.e., SW1 shall be set to neither '62' nor '63'.

Two interindustry values of SW1 are independent from any transmission protocol.

 If SW1 is set to '61', then the process is completed and before issuing any other command, a

GET RE-

SPONSE command may be issued with the same CLA and using SW2 (number of data bytes still available)

as short L

field.

 If SW1 is set to '6C', then the process is aborted and before issuing any other command, the same

command may be re-issued using SW2 (exact number of available data bytes) as short L

field.

Table 6 lists all the specific interindustry warning and error conditions used in ISO/IEC 7816 at the time of

publication.

Table 6 — Specific interindustry warning and error conditions

SW1 SW2 Meaning

'62' '00' No information given

(warning)

'02' to '80' Triggering by the card (see 8.6.1)

'81' Part of returned data may be corrupted

'82' End of file or record reached before reading N

bytes

'83' Selected file deactivated

'84' File control information not formatted according to 5.3.3

'85' Selected file in termination state

'86' No input data available from a sensor on the card

'63' '00' No information given

(warning)

'81' File filled up by the last write

'CX' Counter from 0 to 15 encoded by 'X' (exact meaning depending on the command)

'64' '00' Execution error

(error)

'01' Immediate response required by the card

'02' to '80' Triggering by the card (see 8.6.1)

'65' '00' No information given

(error)

'81' Memory failure

'68' '00' No information given

(error)

'81' Logical channel not supported

'82' Secure messaging not supported

'83' Last command of the chain expected

'84' Command chaining not supported

'69' '00' No information given

(error)

'81' Command incompatible with file structure

'82' Security status not satisfied

'83' Authentication method blocked

'84' Reference data not usable

'85' Conditions of use not satisfied

'86' Command not allowed (no current EF)

'87' Expected secure messaging data objects missing

'88' Incorrect secure messaging data objects

'6A' '00' No information given

(error)

'80' Incorrect parameters in the command data field

'81' Function not supported

'82' File or application not found

'83' Record not found

'84' Not enough memory space in the file

'85' N

inconsistent with TLV structure

'86' Incorrect parameters P1-P2

'87' N

inconsistent with parameters P1-P2

'88' Referenced data or reference data not found (exact meaning depending on the command)

'89' File already exists

'8A' DF name already exists

 Any other value of SW2 is reserved for future use by ISO/IEC JTC 1/SC 17.

Reproduced by IHS under license with ISO

Not for Resale

No reproduction or networking permitted without license from IHS

--`,,,`,`-`-`,,`,,`,`,,`---

剩余89页未读，继续阅读

boy92517

粉丝: 0
资源: 2

智能卡规范ISO-IEC 7816-4：文件系统与命令详解

ISO IEC 7816-4.pdf

ISO7816-1234.pdf

ISO/IEC 7816-4

ISO-IEC 7816-4-2005

ISO-IEC 7816-4-2005标准文档深度解析

ISO-IEC-7816-4-2005.zip_7816-4_IEC_ISO IEC 7816-4_ISO7816-4_iso-

ISO-IEC-7816-4-2005.pdf.zip_7816_7816-4_ISO-IEC 7816 PDF_iso 781

ISO-IEC 7816-3-2006_ISO-IEC7816-3-2006_IEC_

ISO-IEC-7816.rar_7816 pdf_7816-1_IEC 7816_iso 7816_iso/iec 7816

ISO-IEC 7816-4：2002：接触式集成电路卡的国际标准：第4部分，跨行业信息交换命令

最新资源