1.0 15 2 10

Similar documents
ICカード利用システムにおいて新たに顕現化したPre-play attackとその対策

リテール・バンキング・システムのICカード対応に関する現状とその課題

ICカード利用システムにおいて新たに顕現化した中間者攻撃とその対策

No.7, (2006) 2 Electronic Funds Transfer as the Foundation of the Monetary Value of Electronic Money - A Study on the JBA 1 Integrated Circuit

(2) (1) 4 24 NTT Super Cash < 1 May.2001)

Macintosh HD:Users:ks91:Documents:lect:nm2002s:nm2002s03.dvi


DSRC普及促進検討会 総会 DSRCクレジット決済標準化の検討状況

[ISO/TC 68 国内委員会資料 ] ISO/IEC JTC 1/SC 17 リエゾン報告 SC 17 国内委員長廣川勝久

IC API

PDFŠp…f†[…^

PS


Vol.53 No (July 2012) EV ITS 1,a) , EV 1 EV ITS EV ITS EV EV EV Development and Evaluation of ITS Information Commu

TM-T88VI 詳細取扱説明書

untitled

サイドチャネル攻撃に対する安全性評価の研究動向とEMVカード固有の留意点

12 NEC 2003/3/6 Copy ight (C) NEC Corporation 1

5005-toku3.indd

モバイルプリペイド決済の実現モデルの調査研究

実装規約第1.1版R2.PDF


TM-m30 詳細取扱説明書

TM-m30 詳細取扱説明書

TM-m30 詳細取扱説明書

Microsoft Word - RC004V1_2文書.doc

ISMSクラウドセキュリティ認証の概要

JIIAセミナー

BLOCK TYPE.indd

Cisco Aironet 1130AG アクセス ポイント クイック スタート ガイド

untitled

はじめに

GET Vol.8

電子マネーと通信産業の戦略

RFID RFID + ) (RFID IC transponder) RFID Tag Antenna wired-line Reader Ethernet/ RS232c Antenna RFID Tag Reader id command id interrogation id radio s

スライド タイトルなし

電子マネー・システムにおけるセキュリティ対策:リスク管理に焦点を当てて

XML RFID, RFID, RFID IP,, RFID EPC Global, RFID IP, RFID, RFID, IP, RFID, IP, RFID, RFID XML(Extensible Markup Language), RFID XML, RFID XML, RFID,, R

まえがきIntroduction

PowerPoint プレゼンテーション

Information Security Management System ISMS Copyright JIPDEC ISMS,

T - Telecommunication and Internet Protocol Harmonization Over Networks (TIPHON); Service and Network Management Framework; Part 1: Overview and Intro

Si-R180 ご利用にあたって

INTERNATIONAL TELECOMMUNICATION UNION

/02/ /09/ /05/ /02/ CA /11/09 OCSP SubjectAltName /12/02 SECOM Passport for Web SR

Flow Control Information Network 1 /

中田真佐男 323‐352/323‐352

橡セキュリティポリシー雛形策定に関する調査報告書

untitled

/07/ /10/12 I

untitled

untitled

untitled

ICカード利用ガイドライン(接触/非接触) 1.0版

A book

DICOM Conformance Statement Carino

変更履歴 版日付改訂内容 /02/07 初版 1. 本書の著作権は EIZO 株式会社に帰属します 本書の一部あるいは全部を EIZO 株式会社からの事前の許諾を得ることなく転載することは固くお断りします 2. 本書の内容について 将来予告なしに変更することがあります 3. 本書の内

I. Opal SSC 1. Opal SSC 2. Opal Storage 3. Opal Storage MBR Shadowing 6. SP II. TCG Opal SSC HDD 9. Opal SSC HDD *1. TCG: Trusted Computin

¥Í¥Ã¥È¥ï¡¼¥¯¥×¥í¥°¥é¥ß¥ó¥°ÆÃÏÀ

untitled

by CASIO W61CA For Those Requiring an English/Chinese Instruction

PS PS Digital Imaging and Communications in Medicine (DICOM) Part 8: Network Communication Support for Message Exchange Published by

untitled

CLUSTERPRO ファイルサーバ監視オプション編

untitled

untitled

ICカードに利用される暗号アルゴリズムの安全性について:ENV仕様の実装上の問題点を中心に

2006/6/ /9/1 2007/11/9 () 2011/4/ ( ()) ii

XMLを基盤とするビジネスプロトコルの動向


CM1-GTX

Recommendation M


2/ PPPoE AC(Access Concentrator) PPPoE PPPoE Ping FTP PP

TS-1009

"CAS を利用した Single Sign On 環境の構築"

SerialATA ATA Embedded Clocking 8B10B coding 2 pair Hot Plug ATA ATA (150MB/s ) 10 roadmap 2004/2/17 SATA Overview Page 2

IEC :2014 (ed. 4) の概要 (ed. 2)

wide93.dvi

PS PS Digital Imaging and Communications in Medicine (DICOM) Part 7: Message Exchange Published by National Electrical Manufacturers

untitled

JC オンライン投稿の操作方法について(mac) 2011_9 FINAL

untitled

0-表紙

Information Security Management System ISO/IEC 27001:2005 ISMS A Copyright JIPDEC ISMS,

JJ-90

GM-F520S/GM-F470S/GM-F420S

ID 3) 9 4) 5) ID 2 ID 2 ID 2 Bluetooth ID 2 SRCid1 DSTid2 2 id1 id2 ID SRC DST SRC 2 2 ID 2 2 QR 6) 8) 6) QR QR QR QR

TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

122

本書は 一般社団法人情報通信技術委員会が著作権を保有しています 内容の一部又は全部を一般社団法人情報通信技術委員会の許諾を得ることなく複製 転載 改変 転用及びネットワーク上での送信 配布を行うことを禁止します JF-IEEE802.3


rzamhpdf.ps

untitled

JIS Z 9001:1998JIS Z 9002:1998 ISO/IEC 17025ISO/IEC Guide 25

2

2 1: OSI OSI,,,,,,,,, 4 TCP/IP TCP/IP, TCP, IP 2,, IP, IP. IP, ICMP, TCP, UDP, TELNET, FTP, HTTP TCP IP

DocuCentre-III C3300 / C2200

付録2-3

RBA RBA TSM 2) RBA Visa MC RBA RBA RBA

Transcription:

1.0 15 2 10

1... 3 2... 4 3 DSRC... 5 3.1... 5 3.2... 6 3.2.1 EMV 2 EMV 1... 6 3.2.2... 6 3.2.3 PIN... 6 3.2.4... 6 3.2.5 I/F... 6 3.2.6 ICCR/W... 6 3.2.7 HMI... 6 3.3 DSRC... 7 3.4... 8 3.4.1... 8 3.4.2... 8 3.4.3 EMV... 8 4... 9 4.1... 9 4.2... 10 4.3... 10 4.4... 10 4.4.1... 10 4.4.2...11 4.5... 13 4.6... 13 4.7... 13 4.8... 13 5... 14 5.1... 14 5.2... 15 6... 16 6.1 IP... 16 6.1.1... 16 6.1.2... 16 6.1.3 DSRC... 16 6.1.4... 16 6.1.5... 17 6.2 IP... 23 6.2.1... 23 6.2.2... 23 6.2.3 DSRC... 25 7... 29 7.1... 29 7.2... 30 1

8... 31 8.1 EMV... 31 8.2 EMV... 32 8.3... 32 8.3.1... 32 8.3.2... 32 8.4 EMV... 32 8.5 IC... 33 9... 34 9.1 IP... 34 9.1.1... 34 9.1.2... 35 9.1.3... 35 9.1.4... 35 9.1.5 EMV... 35 9.2 IP... 36 9.2.1... 36 9.2.2... 37 9.2.3... 37 9.2.4... 37 9.2.5 EMV... 37 10... 38 2

1 DSRC Dedicated Short Range Communications IC EMV IC IC DSRC IC DSRC 3

2 IC IC DSRC IC 10 <> IC DSRC 4

3 DSRC 3.1 DSRC POS DSRC EMV 2 2 I/F DSRC I/F EMV 1 ICCR/W PIN HMI ICC EMV 2 ICC R/WPIN ISO9564-1 3.1-1 5

3.2 3.2.1EMV 2 EMV 1 EMV EMVCo. EMV 1IC EMV EMV 2 EMV 3.2.2 DSRC Dedicated Short Range Communications ARIB STD-T75DSRC 3.2.3PIN PINPersonal Identification Number PIN DSRC EMV 2 3.2.4 DSRC PIN 3.2.5 I/F DSRC DSRC 3.2.6ICCR/W ICC EMV 1 3.2.7HMI PIN 6

3.3 DSRC OSI DSRC ICCR/W PIN EMV 2 HMI I/F I/F L3L6 L1L2L7 L1L2L7 DSRC 3.3-1DSRC 7

3.4 DSRC 3.4.1 ICC DSRC DSRC EMV 2 ICC EMV (V.3.1.1 ) EMV 1 PIN EMV 2 3.4.2 ICC DSRC EMV 2 (DSRC EMV ) EMV 3.4.3EMV ICC DSRC EMV 2 EMV 2 (SAM ) 8

4 4.1 EMV DSRC DSRC ISO International Organization for Standardization 7816EMV IC 10 IC DSRC IC DSRC EMV EMV DSRC <>IP DSRC IP IP DSRC DSRC DSRC DSRC IP IP EMV IP EMV IP 9

4.2 EMV3.1.1 IC 4.3 1 DSRC IC 4.4 4.4.1 DSRC IC EMV IC IC 3 6 10

4.4.2 EMV EMV IC XXX 1 XXXX PIN 11

(1) DSRC EMV (2) IC (3)APL IC (4)IC IC IC IC (5) IC (6) IC (7) IC (8) (9)PIN PIN (10) PIN (11) IC (12) TVR Terminal Action Code IC Issuer Action Code IC 12

(13) IC IC (14) IC IC DSRC 4.5 DSRC IC DSRC 4.6 DSRC IC 4.7 DSRC IC 4.8 DSRC IC 13

5 5.1 AP DSRC AP DSRC 14

5.2 DSRC DSRC IC 1 PIN 15

6 6.1IP 6.1.1 IP TCP/IP 6.1.2 IP DSRC DSRC ASL IP over DSRC 6.1.5 IP 6.1.2-1 6.1.2-1 IP 6.1.3DSRC DSRC ASL 6.1.4 IP (1)TLS/IPsec TLSTransport Layer Security IPsec 16

(2) 6.1.5 6.1.5.1 IP SOCKETTCP/IP 6.1.5.2 4 A-DATA.req A-DATA..ind A-DATA.res A-DATA.cnf A-DATA.req A-DATA.ind A-DATA.res A-DATA.cnf 6.1.5-1 A-DATA.req A-DATA.ind A-DATA.res A-DATA.cnf A-DATA.req A-DATA.ind A-DATA.res A-DATA.cnf 6.1.5-1 17

6.1.5.3 A-DATA.req A-DATA.res ASN.1 PER(Packed Encoding Rules) (1)DSRCCreditCommand DSRCCreditCommand DSRCCreditCommand::= SEQUENCE { versionindex Version, creditcommand CreditCommand } Version::= SEQUENCE { majorversion INTEGER(0..15), -- minorversion INTEGER(0..15) -- } CreditCommand::=CHOICE{ authenticatecommand [0] AuthenticateCommand, -- operationcommand [1] OperationCommand, dummy [2-254 ] NULL, -- obedenialresponse [255] ObeDenialResponse -- } (2)OperationCommand OperationCommand IC OperationCommand OperationCommand::=SEQUENCE{ opcommandtype OpCommandType, opsecurityprofile OpSecurityProfile, opcommandbody OCTET STRING(SIZE(0..261)) -- } OpCommandType::=ENUMERATED{ icccommand (0), -- pinentryrequest (1), --PIN endrequest (2), -- initrequest (3), -- reservedforfutureuse (4-127), -- iccresponse (128), --IC pinentryresponse (129), --PIN endresponse (130), -- initresponse (131), -- reservedforfutureuse (132-255) -- } 18

OpSecurityProfile::=SEQUENCE{ encryptionalgorithmid INTEGER(0..255), keynumber INTEGER(0..255) } (3) ObeDenialResponse ObeDenialResponse ObeDenialResponse ObeDenialResponse::=SEQUENCE{ status INTEGER(0..255), -- supplementinfo OCTET STRING(SIZE(0..127)) -- } status 00 0131 01:PIN 02:ICC 03:ICC 04: 3263 IP 6495IP 96127 128255 (4)opCommandBody (A)iCCCommand IC (B)iCCResponse IC (C)pinEntryRequest PIN 19

(D) pinentryresponse PIN (E)endRequest DRSC (F)endResponse DSRC (G)initRequest DSRC (H)initResponse DSRC 20

6.1.5.4 6.1.5-2 6.1.5-3 (initrequest) ATR (initrespons) SELECT (iccresponse) READRECORD(iCCCommand) READRECORD(iCCResponse) GET PROCESSING OPTION (iccommand) DATA (iccresponse) READ RECORD (iccommand) DATA (iccresponse) INTERNAL AUTHENTICATE (icccommand) AP (iccresponse ) DATA GET DATA (icccommand) DATA (iccresponse) PIN VERIFY (icccommand) (1) (1) DATA (iccresponse) (1) 6.1.5-2 21

GET DATA (icccommand) DATA (iccresponse) 1. GENERATE AC (icccommand) TC or ARQC or AAC (iccresponse) EXTERNAL UTHENTICATE (icccommand) EXTERNAL UTHENTICATE (iccresponse) 2. GENERATE AC (icccommand) TC or AAC (iccresponse) ISSURE SCRIPT ((icccommand) ISSURE SCRIPT (iccresponse) (endrequest) (endresponse) 6.1.5-3 22

6.2 IP 6.2.1 IP DSRC Application Sub-Layer IP 6.2.1-1 POS EMV (DSRC Application SubLayer) (DSRC Application SubLayer) DSRC 6.2.1-1 IP (1)DSRC ASL IP DSRC ASL (A) IC PIN (B) IC PIN (2)DSRC ASL IP DSRC ASL DSRC ASL 1 DSRC 0x1000 6.2.2 DSRC DSRC 23

DSRC (1) ARIB STD T-75 DSRC 4.4.5 BST VST DSRC ASL DSRC ASL parameter IP LocalPort (2) (A) I/F DSRC ASL Notify ApplicationRSU ID VST VehicleProfile EID ID EID 6.2.2-1 I/F 6.2.2-1 I/F (B)DSRC DSRC 6.2.3 DSRC DSRC DSRC DSRC DSRC 2 Invoke 6.2.3 Invoke PDU 24

6.2.3 DSRC DSRC ASN.1 PER(Packed Encoding Rules) length Contents (1)DSRCCreditCommand DSRCCreditCommand DSRCCreditCommand::= SEQUENCE { versionindex Version, creditcommand CreditCommand } Version::= SEQUENCE { majorversion INTEGER(0..15), -- minorversion INTEGER(0..15) -- } CreditCommand::=CHOICE{ authenticatecommand [0] AuthenticateCommand, operationcommand [1] OperationCommand, dummy [2-254 ] NULL, -- obedenialresponse [255] ObeDenialResponse -- } (2)AuthenticateCommand AuthenticateCommand AuthenticateCommand AuthenticateCommand::=CHOICE{ authpath1 [0] OCTET STRING, authpath2 [1] OCTET STRING, authpath3 [2] OCTET STRING, authpath4 [3] OCTET STRING, dummy [4-255] NULL } 6.2.3-1 25

authpath1 authpath2 authpath3 authpath4 6.2.3-1 (3)OperationCommand OperationCommand IC OperationCommand OperationCommand::=SEQUENCE{ opcommandtype OpCommandType, opsecurityprofile OpSecurityProfile, opcommandbody OCTET STRING(SIZE(0..261)) -- } OpCommandType::=ENUMERATED{ icccommand (0), -- pinentryrequest (1), --PIN endrequest (2), -- initrequest (3), -- reservedforfutureuse (4-127), -- iccresponse (128), --IC pinentryresponse (129), --PIN endresponse (130), -- initresponse (131), -- reservedforfutureuse (132-255) -- } 26

OpCommandType 0,128,129 opcommandbody OpSecurityProfile::=SEQUENCE{ encryptionalgorithmid INTEGER(0..255), keynumber INTEGER(0..255) } (4)ObeDenialResponse ObeDenialResponse ObeDenialResponse ObeDenialResponse::=SEQUENCE{ status INTEGER(0..255), -- supplementinfo OCTET STRING(SIZE(0..127)) -- } status 00 0131 01:PIN 02:ICC 03:ICC 04: 3263 IP 6495IP 96127 128255 (5)opCommandBody (A)iCCCommand IC (B)iCCResponse IC (C)pinEntryRequest PIN 27

(D) pinentryresponse PIN (E)endRequest DRSC (F)endResponse DSRC (G)initRequest DSRC (H)initResponse DSRC 28

7 7.1 EMV IC EMV POS IC APL APL PIN 7.1-1 29

7.2 (1) DSRC IC IC Reset POS (2)EMV IC ATR EMV (3)IC (4)APL EMV (5) (6) (7) (8)PIN IC PIN IC EMV (9) (10) (11) EMV (12) (13) (14) 30

8 8.1 EMV ISO EMV CLA INS '8x' '1E' APPLICATION BLOCK '8x' '18' APPLICATION UNBLOCK '8x' '16' CARD BLOCK '0x' '82' EXTERNAL AUTHENTICATE '8x' 'AE' GENERATE APPLICATION CRYPTOGRAM '0x' '84' GET CHALLENGE '8x' 'CA' GET DATA '8x' 'A8' GET PROCESSING OPTIONS '08' '88' INTERNAL AUTHENTICATE '8x' '24' PERSONAL IDENTIFICATION NUMBER (PIN) CHANGE/UNBLOCK '0x' 'B2' READ RECORD '0x' 'A4' SELECT '0x' '20' VERIFY '8x' 'Dx' RFU '8x' 'Ex' RFU '9x' 'xx' INS RFU 'Ex' 'xx' INS RFU 8.1-1 31

8.2 EMV EMV 8.3 8.3.1 POS PIN POS POS PIN POS PIN POS POS 8.3.2 1 2 8.4EMV 32

8.5 IC User Interface Terminal Prompts Online Interfaces Message Formats Acquirer Settings Payment Scheme Functions Product Settings Communication Protocol Other Application(s) Purse Non-Financial Settings EMV Level 2 EMV Debit and Credit Application Application Selection Security Command Set EMV Level 1 Interface 8.5-1 33

9 IP IP 9.1IP IP TLS IPsec6.1.2 9.1-1 IP- EMV EMV EMVco EMV DSRC I/F TLS- DSRC TCP/IP(IPsec) ARIB ASL AID=18 DSRC DSRC L7 ARIB L2 T75TR-T16 L1 ICC R/W EMV EMVco 9.1-1 IP- 9.1.1 (1)ICC R/W EMV EMV 34

(2) (3) 3 (1) 9.1.2 ETC ARIB STD-T75DSRC ARIB TR-T16 DSRC L1STD-T75 L2L7 STD-T75 DSRC 9.1.3 ASL DSRC ARIB TCP/IP 9.1.4 I/F TLS/IPsec 9.1.5EMV EMV IC 35

9.2 IP IP 9.2-1 IP- 9.2-2 IP- EMV EMV EMVco EMV DSRC I/F DSRC ASL ARIB DSRC AID=XX DSRC L7 ARIB L2 T75TR-T16 L1 ICC R/W EMV EMVco 9.2-1 IP- EMV EMV EMVco EMV DSRC I/F DSRC ASL ARIB DSRC AID=XX DSRC L7 ARIB L2 T75TR-T16 L1 ICC R/W EMV EMVco 9.2-2 IP- 9.2.1 (1)ICC R/W EMV EMV 36

(2) () () (3) 3 (1) 9.2.2 ETC ARIB STD-T75DSRC ARIB TR-T16 DSRC L1STD-T75 L2L7 STD-T75 DSRC 9.2.3 ASL DSRC ARIB 9.2.4 I/F () () 9.2.5EMV EMV IC 37

10 ISO/IEC 7816-11998 Identification cards - Integrated circuit(s) cards with contacts - Part 1Physical characteristics ISO/IEC 7816-21999 Information technology - Identification cards Integrated circuit(s) cards with contacts - Part 2Dimensions and location of the contacts ISO/IEC 7816-31997 Information technology - Identification cards Integrated circuit(s) cards with contacts Part 3Electronic signals and transmission protocols ISO/IEC 7816-41995 Information technology - Identification cards Integrated circuit(s) cards with contacts - Part 4Interindustry commands for interchange ISO/IEC 7816-41995/Amd 11997 secure messaging on the structures of APDU messages ISO/IEC 7816-51994 Identification cards - Integrated circuit(s) cards with contacts - Part 5Numbering system and registration procedure for application identifiers ISO/IEC 7816-51994/Amd 11996 ISO/IEC 7816-6 1996 Identification cards - Integrated circuit(s) cards with contacts - Part 6 Interindustry data elements ISO/IEC 7816-61996/Amd 12000 IC manufacturer registration ISO/IEC 7816-81999 Identification cards - Integrated circuit(s) cards with contacts - Part 8Security related interindustry commands ISO/IEC 7816-92000 Identification cards -Integrated circuit(s) cards with contacts - Part 9Additional interindustry commands and security attributes ISO/IEC 7816-101999 Identification cards - Integrated circuit(s) cards with contacts - Part 10 Electronic signals and answer to reset for synchronous cards EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 1 - Application Independent ICC to Terminal Interface Requirements Ver4.0 EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 2 - Security and Key Management Ver4.0 EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 3 - Application Specification Ver4.0 EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 4 - Cardholder, Attendant, and Acquirer Interface Requirements Ver4.0 EMV2000 EMVCo Type Approval Terminal Level 1 Administrative Process EMV2000 EMVCo Type Approval Terminal Level 1 Requirements Process EMV2000 EMVCo Type Approval Terminal Level 1 Test Cases Process EMV2000 EMVCo Type Approval Terminal Level 2 Requirements EMV2000 EMVCo Type Approval Terminal Level 2 Test Cases IC 1.2 1.2 1.2 EMV2000 EMV2000 IC JPO 1.2 JPO 1.2 JPO 1.2 38

MasterCard International MasterCard Chip-Recommended Specifications for Debit and Credit Version4 MasterCard InternationalMasterCard Chip-Minimum Card Requirements for Debit and Credit Version4 MasterCard InternationalMasterCard Chip-Terminal Requirements for Debit and Credit Version4 Visa International2001 Visa Integrated Circuit Card Application Overview Version 1.4.0 Visa International2001 Visa Integrated Circuit Card Card Specification Version 1.4.0 Visa International2001 Visa Integrated Circuit Card Terminal Specification Version 1.4.0 2001IC 1.1 ARIB 2001 ARIB STD-T75 DSRC 1.0 ARIB 2001 ARIB TR-T16 DSRC 1.0 HIDO 2002 DSRC 0.00.5 JIS X 56031990 ASN.1 JIS X 5606-21998 PER 39