ISO/TS TECHNICAL SPECIFICATION 17574 Third edition 2017-03 Electronic fee collection Guidelines for security protection profiles Perception de telepeage-Lignesdirectrices concernant les profils de protection de la sécurité Referencenumber IS0/TS17574:2017(E) Intemational Organization for Standardization @IS02017 e=ZHEJIANG INSTOFSTANDARDIZATION C15956617 itted without license from IHS IS0/TS17574:2017(E) COPYRIGHTPROTECTEDDOCUMENT IS02017,Published inSwitzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of therequester. ISO copyright office Ch. de Blandonnet 8. CP 401 CH-1214 Vernier, Geneva, Switzerland Tel. +41 22 749 01 11 Fax +41 22 749 09 47 [email protected] www.iso.org Intematinaibr PrganizationfoStandardization Licensee-ZHEJIANG INST OF STANDARDIZoISQ0a7 -All rights reserved networking permited without license from IHS Notfor Resale, 2017/5/11 01:59:20 IS0/TS17574:2017(E) Contents Page Foreword ..iv Introduction. 1 Scope. .1 2 Normative references 3 Termsand definitions ..2 4 Abbreviatedterms ..4 5 EFCsecurityarchitectureandprotectionprofileprocesses .5 5.1 General .5 5.2 EFC securityarchitecture ..5 5.3 Protection profilepreparatorysteps .6 5.4 Relationshipbetweenactors. 7 6 Outlines of Protection Profile ..9 6.1 Structure. .9 6.2 Context .10 AnnexA (informative)Proceduresforpreparingdocuments .11 Annex B (informative) Example of threat analysis evaluation method .45 Annex C (informative)Relevant security standards in the context of the EFC .50 Annex D (informative) Common Criteria Recognition Arrangement (CCRA) .51 Bibliography .52 iii =ZHEJIANG INSTOFSTANDARDIZATIONC15956617 lout license from IHS