Use of ISO/IEC 24727: ISO/IEC 24727 Identification Cards-Integrated Circuit Cards Programming Interfaces. Service Access Layer Interface for Identity (SAL II): Support for Development and Use of Interoperable Identity Credentials

摘要

Major Federal Identity Management Systems (IDMS) have chosen to use Integrated Circuit Card (ICC) technology, also referred to as smart cards, for their identity credentials. Smart cards are portable and their inherent security capabilities make them well suited for identity credentials. The information and security requirements of an application on a smart card (referred to as card-application) are determined by an issuing agency in support of their IT enterprise infrastructure. Information, requirements, and card-applications can vary from agency to agency, with numerous methods available to use and store information on smart cards. The legitimate variability results from differing requirements and can result in duplication of similar services and interoperability limitations. For instance, a Personal Identity Verification (PIV) Card and Transportation Worker Identity Credential (TWIC) Card may not be easily and interoperably authenticated by the same application (referred to as client-application). These two cards support similar but not identical requirements and use different authentication mechanisms and security protocols. Normalized access to information can reduce the potential for duplication of common IDMS services. Without methods that provide standardized access and interfaces, portability and interoperability of identity credentials across different client-applications is a programmatic and technical challenge. The ability to interoperate is important to Federal government-wide initiatives. The US has led the development of an international standard for a framework that provides interoperable and secure services for identification, authentication, and digital signatures for identity credentials. The multi-part international standard, International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 24727 Identification cards Integrated circuit cards programming interfaces (hereafter referred to as ISO/IEC 24727), consists of six parts, ISO/IEC 24727-1 through ISO/IEC 24727-6. The ISO/IEC 24727 framework allows any client-application to communicate with any card-application. This multi-part standard enables client-applications to authenticate cardholders and use card services from many different identity cards and across many client-applications.