1.0 15 2 10

Similar documents
ICカード利用システムにおいて新たに顕現化したPre-play attackとその対策

リテール・バンキング・システムのICカード対応に関する現状とその課題

ICカード利用システムにおいて新たに顕現化した中間者攻撃とその対策

Macintosh HD:Users:ks91:Documents:lect:nm2002s:nm2002s03.dvi


[ISO/TC 68 国内委員会資料 ] ISO/IEC JTC 1/SC 17 リエゾン報告 SC 17 国内委員長廣川勝久

PDFŠp…f†[…^


Vol.53 No (July 2012) EV ITS 1,a) , EV 1 EV ITS EV ITS EV EV EV Development and Evaluation of ITS Information Commu

TM-T88VI 詳細取扱説明書

untitled

サイドチャネル攻撃に対する安全性評価の研究動向とEMVカード固有の留意点

12 NEC 2003/3/6 Copy ight (C) NEC Corporation 1

5005-toku3.indd

モバイルプリペイド決済の実現モデルの調査研究

実装規約第1.1版R2.PDF

TM-m30 詳細取扱説明書

TM-m30 詳細取扱説明書

JIIAセミナー

BLOCK TYPE.indd

Cisco Aironet 1130AG アクセス ポイント クイック スタート ガイド

GET Vol.8

電子マネーと通信産業の戦略

RFID RFID + ) (RFID IC transponder) RFID Tag Antenna wired-line Reader Ethernet/ RS232c Antenna RFID Tag Reader id command id interrogation id radio s

電子マネー・システムにおけるセキュリティ対策:リスク管理に焦点を当てて

XML RFID, RFID, RFID IP,, RFID EPC Global, RFID IP, RFID, RFID, IP, RFID, IP, RFID, RFID XML(Extensible Markup Language), RFID XML, RFID XML, RFID,, R

まえがきIntroduction

PowerPoint プレゼンテーション

Si-R180 ご利用にあたって

/02/ /09/ /05/ /02/ CA /11/09 OCSP SubjectAltName /12/02 SECOM Passport for Web SR

Flow Control Information Network 1 /

中田真佐男 323‐352/323‐352

橡セキュリティポリシー雛形策定に関する調査報告書

untitled

/07/ /10/12 I

untitled

untitled

ICカード利用ガイドライン(接触/非接触) 1.0版

A book

DICOM Conformance Statement Carino

I. Opal SSC 1. Opal SSC 2. Opal Storage 3. Opal Storage MBR Shadowing 6. SP II. TCG Opal SSC HDD 9. Opal SSC HDD *1. TCG: Trusted Computin

¥Í¥Ã¥È¥ï¡¼¥¯¥×¥í¥°¥é¥ß¥ó¥°ÆÃÏÀ

by CASIO W61CA For Those Requiring an English/Chinese Instruction

CLUSTERPRO ファイルサーバ監視オプション編

untitled

2006/6/ /9/1 2007/11/9 () 2011/4/ ( ()) ii

XMLを基盤とするビジネスプロトコルの動向


2/ PPPoE AC(Access Concentrator) PPPoE PPPoE Ping FTP PP

"CAS を利用した Single Sign On 環境の構築"

SerialATA ATA Embedded Clocking 8B10B coding 2 pair Hot Plug ATA ATA (150MB/s ) 10 roadmap 2004/2/17 SATA Overview Page 2

IEC :2014 (ed. 4) の概要 (ed. 2)

PS PS Digital Imaging and Communications in Medicine (DICOM) Part 7: Message Exchange Published by National Electrical Manufacturers

untitled

JC オンライン投稿の操作方法について(mac) 2011_9 FINAL

untitled

Information Security Management System ISO/IEC 27001:2005 ISMS A Copyright JIPDEC ISMS,

JJ-90

GM-F520S/GM-F470S/GM-F420S

ID 3) 9 4) 5) ID 2 ID 2 ID 2 Bluetooth ID 2 SRCid1 DSTid2 2 id1 id2 ID SRC DST SRC 2 2 ID 2 2 QR 6) 8) 6) QR QR QR QR

TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

untitled

JIS Z 9001:1998JIS Z 9002:1998 ISO/IEC 17025ISO/IEC Guide 25

2

2 1: OSI OSI,,,,,,,,, 4 TCP/IP TCP/IP, TCP, IP 2,, IP, IP. IP, ICMP, TCP, UDP, TELNET, FTP, HTTP TCP IP

DocuCentre-III C3300 / C2200

Transcription:

1.0 15 2 10

1... 3 2... 4 3 DSRC... 5 3.1... 5 3.2... 6 3.2.1 EMV 2 EMV 1... 6 3.2.2... 6 3.2.3 PIN... 6 3.2.4... 6 3.2.5 I/F... 6 3.2.6 ICCR/W... 6 3.2.7 HMI... 6 3.3 DSRC... 7 3.4... 8 3.4.1... 8 3.4.2... 8 3.4.3 EMV... 8 4... 9 4.1... 9 4.2... 10 4.3... 10 4.4... 10 4.4.1... 10 4.4.2...11 4.5... 13 4.6... 13 4.7... 13 4.8... 13 5... 14 5.1... 14 5.2... 15 6... 16 6.1 IP... 16 6.1.1... 16 6.1.2... 16 6.1.3 DSRC... 16 6.1.4... 16 6.1.5... 17 6.2 IP... 23 6.2.1... 23 6.2.2... 23 6.2.3 DSRC... 25 7... 29 7.1... 29 7.2... 30 1

8... 31 8.1 EMV... 31 8.2 EMV... 32 8.3... 32 8.3.1... 32 8.3.2... 32 8.4 EMV... 32 8.5 IC... 33 9... 34 9.1 IP... 34 9.1.1... 34 9.1.2... 35 9.1.3... 35 9.1.4... 35 9.1.5 EMV... 35 9.2 IP... 36 9.2.1... 36 9.2.2... 37 9.2.3... 37 9.2.4... 37 9.2.5 EMV... 37 10... 38 2

1 DSRC Dedicated Short Range Communications IC EMV IC IC DSRC IC DSRC 3

2 IC IC DSRC IC 10 <> IC DSRC 4

3 DSRC 3.1 DSRC POS DSRC EMV 2 2 I/F DSRC I/F EMV 1 ICCR/W PIN HMI ICC EMV 2 ICC R/WPIN ISO9564-1 3.1-1 5

3.2 3.2.1EMV 2 EMV 1 EMV EMVCo. EMV 1IC EMV EMV 2 EMV 3.2.2 DSRC Dedicated Short Range Communications ARIB STD-T75DSRC 3.2.3PIN PINPersonal Identification Number PIN DSRC EMV 2 3.2.4 DSRC PIN 3.2.5 I/F DSRC DSRC 3.2.6ICCR/W ICC EMV 1 3.2.7HMI PIN 6

3.3 DSRC OSI DSRC ICCR/W PIN EMV 2 HMI I/F I/F L3L6 L1L2L7 L1L2L7 DSRC 3.3-1DSRC 7

3.4 DSRC 3.4.1 ICC DSRC DSRC EMV 2 ICC EMV (V.3.1.1 ) EMV 1 PIN EMV 2 3.4.2 ICC DSRC EMV 2 (DSRC EMV ) EMV 3.4.3EMV ICC DSRC EMV 2 EMV 2 (SAM ) 8

4 4.1 EMV DSRC DSRC ISO International Organization for Standardization 7816EMV IC 10 IC DSRC IC DSRC EMV EMV DSRC <>IP DSRC IP IP DSRC DSRC DSRC DSRC IP IP EMV IP EMV IP 9

4.2 EMV3.1.1 IC 4.3 1 DSRC IC 4.4 4.4.1 DSRC IC EMV IC IC 3 6 10

4.4.2 EMV EMV IC XXX 1 XXXX PIN 11

(1) DSRC EMV (2) IC (3)APL IC (4)IC IC IC IC (5) IC (6) IC (7) IC (8) (9)PIN PIN (10) PIN (11) IC (12) TVR Terminal Action Code IC Issuer Action Code IC 12

(13) IC IC (14) IC IC DSRC 4.5 DSRC IC DSRC 4.6 DSRC IC 4.7 DSRC IC 4.8 DSRC IC 13

5 5.1 AP DSRC AP DSRC 14

5.2 DSRC DSRC IC 1 PIN 15

6 6.1IP 6.1.1 IP TCP/IP 6.1.2 IP DSRC DSRC ASL IP over DSRC 6.1.5 IP 6.1.2-1 6.1.2-1 IP 6.1.3DSRC DSRC ASL 6.1.4 IP (1)TLS/IPsec TLSTransport Layer Security IPsec 16

(2) 6.1.5 6.1.5.1 IP SOCKETTCP/IP 6.1.5.2 4 A-DATA.req A-DATA..ind A-DATA.res A-DATA.cnf A-DATA.req A-DATA.ind A-DATA.res A-DATA.cnf 6.1.5-1 A-DATA.req A-DATA.ind A-DATA.res A-DATA.cnf A-DATA.req A-DATA.ind A-DATA.res A-DATA.cnf 6.1.5-1 17

6.1.5.3 A-DATA.req A-DATA.res ASN.1 PER(Packed Encoding Rules) (1)DSRCCreditCommand DSRCCreditCommand DSRCCreditCommand::= SEQUENCE { versionindex Version, creditcommand CreditCommand } Version::= SEQUENCE { majorversion INTEGER(0..15), -- minorversion INTEGER(0..15) -- } CreditCommand::=CHOICE{ authenticatecommand [0] AuthenticateCommand, -- operationcommand [1] OperationCommand, dummy [2-254 ] NULL, -- obedenialresponse [255] ObeDenialResponse -- } (2)OperationCommand OperationCommand IC OperationCommand OperationCommand::=SEQUENCE{ opcommandtype OpCommandType, opsecurityprofile OpSecurityProfile, opcommandbody OCTET STRING(SIZE(0..261)) -- } OpCommandType::=ENUMERATED{ icccommand (0), -- pinentryrequest (1), --PIN endrequest (2), -- initrequest (3), -- reservedforfutureuse (4-127), -- iccresponse (128), --IC pinentryresponse (129), --PIN endresponse (130), -- initresponse (131), -- reservedforfutureuse (132-255) -- } 18

OpSecurityProfile::=SEQUENCE{ encryptionalgorithmid INTEGER(0..255), keynumber INTEGER(0..255) } (3) ObeDenialResponse ObeDenialResponse ObeDenialResponse ObeDenialResponse::=SEQUENCE{ status INTEGER(0..255), -- supplementinfo OCTET STRING(SIZE(0..127)) -- } status 00 0131 01:PIN 02:ICC 03:ICC 04: 3263 IP 6495IP 96127 128255 (4)opCommandBody (A)iCCCommand IC (B)iCCResponse IC (C)pinEntryRequest PIN 19

(D) pinentryresponse PIN (E)endRequest DRSC (F)endResponse DSRC (G)initRequest DSRC (H)initResponse DSRC 20

6.1.5.4 6.1.5-2 6.1.5-3 (initrequest) ATR (initrespons) SELECT (iccresponse) READRECORD(iCCCommand) READRECORD(iCCResponse) GET PROCESSING OPTION (iccommand) DATA (iccresponse) READ RECORD (iccommand) DATA (iccresponse) INTERNAL AUTHENTICATE (icccommand) AP (iccresponse ) DATA GET DATA (icccommand) DATA (iccresponse) PIN VERIFY (icccommand) (1) (1) DATA (iccresponse) (1) 6.1.5-2 21

GET DATA (icccommand) DATA (iccresponse) 1. GENERATE AC (icccommand) TC or ARQC or AAC (iccresponse) EXTERNAL UTHENTICATE (icccommand) EXTERNAL UTHENTICATE (iccresponse) 2. GENERATE AC (icccommand) TC or AAC (iccresponse) ISSURE SCRIPT ((icccommand) ISSURE SCRIPT (iccresponse) (endrequest) (endresponse) 6.1.5-3 22

6.2 IP 6.2.1 IP DSRC Application Sub-Layer IP 6.2.1-1 POS EMV (DSRC Application SubLayer) (DSRC Application SubLayer) DSRC 6.2.1-1 IP (1)DSRC ASL IP DSRC ASL (A) IC PIN (B) IC PIN (2)DSRC ASL IP DSRC ASL DSRC ASL 1 DSRC 0x1000 6.2.2 DSRC DSRC 23

DSRC (1) ARIB STD T-75 DSRC 4.4.5 BST VST DSRC ASL DSRC ASL parameter IP LocalPort (2) (A) I/F DSRC ASL Notify ApplicationRSU ID VST VehicleProfile EID ID EID 6.2.2-1 I/F 6.2.2-1 I/F (B)DSRC DSRC 6.2.3 DSRC DSRC DSRC DSRC DSRC 2 Invoke 6.2.3 Invoke PDU 24

6.2.3 DSRC DSRC ASN.1 PER(Packed Encoding Rules) length Contents (1)DSRCCreditCommand DSRCCreditCommand DSRCCreditCommand::= SEQUENCE { versionindex Version, creditcommand CreditCommand } Version::= SEQUENCE { majorversion INTEGER(0..15), -- minorversion INTEGER(0..15) -- } CreditCommand::=CHOICE{ authenticatecommand [0] AuthenticateCommand, operationcommand [1] OperationCommand, dummy [2-254 ] NULL, -- obedenialresponse [255] ObeDenialResponse -- } (2)AuthenticateCommand AuthenticateCommand AuthenticateCommand AuthenticateCommand::=CHOICE{ authpath1 [0] OCTET STRING, authpath2 [1] OCTET STRING, authpath3 [2] OCTET STRING, authpath4 [3] OCTET STRING, dummy [4-255] NULL } 6.2.3-1 25

authpath1 authpath2 authpath3 authpath4 6.2.3-1 (3)OperationCommand OperationCommand IC OperationCommand OperationCommand::=SEQUENCE{ opcommandtype OpCommandType, opsecurityprofile OpSecurityProfile, opcommandbody OCTET STRING(SIZE(0..261)) -- } OpCommandType::=ENUMERATED{ icccommand (0), -- pinentryrequest (1), --PIN endrequest (2), -- initrequest (3), -- reservedforfutureuse (4-127), -- iccresponse (128), --IC pinentryresponse (129), --PIN endresponse (130), -- initresponse (131), -- reservedforfutureuse (132-255) -- } 26

OpCommandType 0,128,129 opcommandbody OpSecurityProfile::=SEQUENCE{ encryptionalgorithmid INTEGER(0..255), keynumber INTEGER(0..255) } (4)ObeDenialResponse ObeDenialResponse ObeDenialResponse ObeDenialResponse::=SEQUENCE{ status INTEGER(0..255), -- supplementinfo OCTET STRING(SIZE(0..127)) -- } status 00 0131 01:PIN 02:ICC 03:ICC 04: 3263 IP 6495IP 96127 128255 (5)opCommandBody (A)iCCCommand IC (B)iCCResponse IC (C)pinEntryRequest PIN 27

(D) pinentryresponse PIN (E)endRequest DRSC (F)endResponse DSRC (G)initRequest DSRC (H)initResponse DSRC 28

7 7.1 EMV IC EMV POS IC APL APL PIN 7.1-1 29

7.2 (1) DSRC IC IC Reset POS (2)EMV IC ATR EMV (3)IC (4)APL EMV (5) (6) (7) (8)PIN IC PIN IC EMV (9) (10) (11) EMV (12) (13) (14) 30

8 8.1 EMV ISO EMV CLA INS '8x' '1E' APPLICATION BLOCK '8x' '18' APPLICATION UNBLOCK '8x' '16' CARD BLOCK '0x' '82' EXTERNAL AUTHENTICATE '8x' 'AE' GENERATE APPLICATION CRYPTOGRAM '0x' '84' GET CHALLENGE '8x' 'CA' GET DATA '8x' 'A8' GET PROCESSING OPTIONS '08' '88' INTERNAL AUTHENTICATE '8x' '24' PERSONAL IDENTIFICATION NUMBER (PIN) CHANGE/UNBLOCK '0x' 'B2' READ RECORD '0x' 'A4' SELECT '0x' '20' VERIFY '8x' 'Dx' RFU '8x' 'Ex' RFU '9x' 'xx' INS RFU 'Ex' 'xx' INS RFU 8.1-1 31

8.2 EMV EMV 8.3 8.3.1 POS PIN POS POS PIN POS PIN POS POS 8.3.2 1 2 8.4EMV 32

8.5 IC User Interface Terminal Prompts Online Interfaces Message Formats Acquirer Settings Payment Scheme Functions Product Settings Communication Protocol Other Application(s) Purse Non-Financial Settings EMV Level 2 EMV Debit and Credit Application Application Selection Security Command Set EMV Level 1 Interface 8.5-1 33

9 IP IP 9.1IP IP TLS IPsec6.1.2 9.1-1 IP- EMV EMV EMVco EMV DSRC I/F TLS- DSRC TCP/IP(IPsec) ARIB ASL AID=18 DSRC DSRC L7 ARIB L2 T75TR-T16 L1 ICC R/W EMV EMVco 9.1-1 IP- 9.1.1 (1)ICC R/W EMV EMV 34

(2) (3) 3 (1) 9.1.2 ETC ARIB STD-T75DSRC ARIB TR-T16 DSRC L1STD-T75 L2L7 STD-T75 DSRC 9.1.3 ASL DSRC ARIB TCP/IP 9.1.4 I/F TLS/IPsec 9.1.5EMV EMV IC 35

9.2 IP IP 9.2-1 IP- 9.2-2 IP- EMV EMV EMVco EMV DSRC I/F DSRC ASL ARIB DSRC AID=XX DSRC L7 ARIB L2 T75TR-T16 L1 ICC R/W EMV EMVco 9.2-1 IP- EMV EMV EMVco EMV DSRC I/F DSRC ASL ARIB DSRC AID=XX DSRC L7 ARIB L2 T75TR-T16 L1 ICC R/W EMV EMVco 9.2-2 IP- 9.2.1 (1)ICC R/W EMV EMV 36

(2) () () (3) 3 (1) 9.2.2 ETC ARIB STD-T75DSRC ARIB TR-T16 DSRC L1STD-T75 L2L7 STD-T75 DSRC 9.2.3 ASL DSRC ARIB 9.2.4 I/F () () 9.2.5EMV EMV IC 37

10 ISO/IEC 7816-11998 Identification cards - Integrated circuit(s) cards with contacts - Part 1Physical characteristics ISO/IEC 7816-21999 Information technology - Identification cards Integrated circuit(s) cards with contacts - Part 2Dimensions and location of the contacts ISO/IEC 7816-31997 Information technology - Identification cards Integrated circuit(s) cards with contacts Part 3Electronic signals and transmission protocols ISO/IEC 7816-41995 Information technology - Identification cards Integrated circuit(s) cards with contacts - Part 4Interindustry commands for interchange ISO/IEC 7816-41995/Amd 11997 secure messaging on the structures of APDU messages ISO/IEC 7816-51994 Identification cards - Integrated circuit(s) cards with contacts - Part 5Numbering system and registration procedure for application identifiers ISO/IEC 7816-51994/Amd 11996 ISO/IEC 7816-6 1996 Identification cards - Integrated circuit(s) cards with contacts - Part 6 Interindustry data elements ISO/IEC 7816-61996/Amd 12000 IC manufacturer registration ISO/IEC 7816-81999 Identification cards - Integrated circuit(s) cards with contacts - Part 8Security related interindustry commands ISO/IEC 7816-92000 Identification cards -Integrated circuit(s) cards with contacts - Part 9Additional interindustry commands and security attributes ISO/IEC 7816-101999 Identification cards - Integrated circuit(s) cards with contacts - Part 10 Electronic signals and answer to reset for synchronous cards EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 1 - Application Independent ICC to Terminal Interface Requirements Ver4.0 EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 2 - Security and Key Management Ver4.0 EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 3 - Application Specification Ver4.0 EMV2000 EMV2000 Integrated Circuit Card Specification for Payment Systems Book 4 - Cardholder, Attendant, and Acquirer Interface Requirements Ver4.0 EMV2000 EMVCo Type Approval Terminal Level 1 Administrative Process EMV2000 EMVCo Type Approval Terminal Level 1 Requirements Process EMV2000 EMVCo Type Approval Terminal Level 1 Test Cases Process EMV2000 EMVCo Type Approval Terminal Level 2 Requirements EMV2000 EMVCo Type Approval Terminal Level 2 Test Cases IC 1.2 1.2 1.2 EMV2000 EMV2000 IC JPO 1.2 JPO 1.2 JPO 1.2 38

MasterCard International MasterCard Chip-Recommended Specifications for Debit and Credit Version4 MasterCard InternationalMasterCard Chip-Minimum Card Requirements for Debit and Credit Version4 MasterCard InternationalMasterCard Chip-Terminal Requirements for Debit and Credit Version4 Visa International2001 Visa Integrated Circuit Card Application Overview Version 1.4.0 Visa International2001 Visa Integrated Circuit Card Card Specification Version 1.4.0 Visa International2001 Visa Integrated Circuit Card Terminal Specification Version 1.4.0 2001IC 1.1 ARIB 2001 ARIB STD-T75 DSRC 1.0 ARIB 2001 ARIB TR-T16 DSRC 1.0 HIDO 2002 DSRC 0.00.5 JIS X 56031990 ASN.1 JIS X 5606-21998 PER 39