ISO/IEC INTERNATIONAL STANDARD 7816-4 Fourth edition 2020-05 Identification cards Integrated circuit cards - Part 4: Organization, security and commands for interchange Cartes d'identification - Cartes a circuit intégré - Partie 4: Organisation, sécurité et commandes pour les échanges Reference number IS0/IEC 7816-4:2020(E) oS1 E @IS0/IEC2020 IS0/IEC 7816-4:2020(E) COPYRIGHTPROTECTEDDOCUMENT @IS0/IEC 2020 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may below or Iso's member body in the country of the requester. ISO copyright office CP401·Ch.deBlandonnet8 CH-1214 Vernier, Geneva Phone: +4122 749 0111 Fax: +41 22 749 09 47 Email: [email protected] Website: www.iso.org Published in Switzerland ii @ IS0/IEC 2020 - All rights reserved IS0/IEC 7816-4:2020(E) Contents Page Foreword ..vii Introduction .vili 1 Scope. 2 Normative references 3 Terms and definitions ..1 4 Symbols and abbreviated terms .7 5 Command-response pairs. ..8 5.1 Conditions of operation .8 5.2 Syntax. .9 5.3 Chaining procedures. .10 5.3.1 General. .10 5.3.2 Payload fragmentation. .10 5.3.3 Command chaining .10 5.3.4 Response chaining. .11 5.4 Class byte .12 5.4.1 Coding .12 5.4.2 Logical channels ..13 5.5 Instruction byte .14 5.6 Status bytes. .17 6 Data objects 19 6.1 GENERAL 19 6.2 SIMPLE-TLV data objects. .19 6.3 BER-TLV data objects. 20 6.4 Constructed DOs versus primitive DOs. .20 7 Structures for applications and data .20 7.1 Available structures. 20 7.2 Validity area 22 7.2.1 Definitions and attributes 22 7.2.2 Basic rules for VA handling and use 22 7.3 Structure selection.. .23 7.3.1 Structure selection methods. 23 7.3.2 File reference data element and DO .24 7.3.3 General reference data element and DO .25 7.3.4 Data referencing methods in elementary files 25 7.4 File and data control information. .26 7.4.1 File control information retrieval .26 7.4.2 Data control information retrieval 26 7.4.3 Control parameters. 27 7.4.4 Short EF identifier .28 7.4.5 File descriptor byte. .28 7.4.6 Profile indicator. .29 7.4.7 Data descriptor byte .30 7.4.8 DFand EFlist data elements .30 7.4.9 Instance number data element. .30 7.4.10 Life cycle status .30 7.4.11 Indirect referencing by short EF identifier using DO'A2' .31 7.4.12 Interface and life cycle status dependent security attribute template. .31 8 Specific use of DOs and related concepts .33 8.1 BER-TLV payloads and padding. .33 8.1.1 General.. .33 8.1.2 Padding conditions .33 @ IS0/IEC 2020 - All rights reserved iii IS0/IEC 7816-4:2020(E) 8.1.3 Padding procedure 33 8.2 Template referenced by curConstructedDO and data object generations 34 8.2.1 Template referenced by curConstructedDO and DO referenced by curDO .34 8.2.2 Template extension .34 8.2.3 Data object pruned-tree .35 8.2.4 Data object life cycle. 35 8.3 Identification of data elements and data objects 35 8.3.1 Principles 35 8.3.2 Tag interpretation in command and response data fields or payloads 35 8.3.3 Tag allocation. 36 8.3.4 Standardtagallocationscheme .36 8.3.5 Compatible tag allocation scheme. .36 8.3.6 Coexistenttagallocationscheme 37 8.3.7 Avoidance of independent tag allocation schemes 37 8.4 Referencing and retrieval of DOs and data elements. 37 8.4.1 General 37 8.4.2 Element list 38 8.4.3 Tag list. 38 8.4.4 Headerlist 38 8.4.5 Extended header and extended header list .38 8.4.6 Resolving an extended header 39 8.4.7 Resolving an extended header list. 40 8.4.8 Wrapper. 40 8.4.9 Tagged wrapper. 41 9 Security architecture .41 9.1 General. 41 9.2 Cryptographic mechanism identifier template 43 9.3 Security attributes 43 9.3.1 General. 43 9.3.2 Security attributes targets 43 9.3.3 Compact format. 44 9.3.4 Expanded format. 48 9.3.5 Access rule references. 52 9.3.6 Security attributes for data objects 53 9.3.7 Security parameters template. .54 9.3.8 Security attributes for logical channels .59 9.4 Security support data elements 60 10 Secure messaging. 61 10.1 General 6