标准编号：ISO 9564-1:2011
中文名称：金融服务 个人识别码（PIN）的管理与安全 第1部分：以卡为基础的系统中个人识别码的基本原则和要求
英文名称：Financial services — Personal Identification Number (PIN) management and security — Part 1: Basic principles and requirements for PINs in card-based systems
发布日期：2011-02
标准范围
This part of ISO 9564 specifies the basic principles and techniques which provide the minimum securitymeasures required for effective international PIN management. These measures are applicable to thoseinstitutions responsible for implementing techniques for the management and protection of PINs during theircreation, issuance, usage and deactivation.This part of ISO 9564 is applicable to the management of cardholder PINs for use as a means of cardholderverification in retail banking systems in, notably, automated teller machine (ATM) systems, point-of-sale (POS)terminals, automated fuel dispensers, vending machines, banking kiosks and PIN selection/change systems.It is applicable to issuer and interchange environments.The provisions of this part of ISO 9564 are not intended to cover:a) PIN management and security in environments where no persistent cryptographic relationship existsbetween the transaction-origination device and the acquirer, e.g. use of a browser for online shopping (forthese environments, see ISO/TR 9564-4);b) protection of the PIN against loss or intentional misuse by the customer;c) privacy of non-PIN transaction data;d) protection of transaction messages against alteration or substitution;e) protection against replay of the PIN or transaction;f) specific key management techniques;g) offline PIN verification used in contactless devices;h) requirements specifically associated with PIN management as it relates to multi-application functionality inIC cards.
立即下载标准文件