BS ISO 11568-4:2007

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Uses of asymmetric cryptosystems in retail financial
  services systems
  4.1 General
  4.2 Establishment and storage of symmetric keys
  4.3 Storage and distribution of asymmetric public keys
  4.4 Storage and transfer of asymmetric private keys
5 Techniques for the provision of key management services
  5.1 Introduction
  5.2 Key encipherment
  5.3 Public key certification
  5.4 Key separation techniques
  5.5 Key verification
  5.6 Key integrity techniques
6 Asymmetric key life cycle
  6.1 Key life cycle phases
  6.2 Key life cycle stages - Generation
  6.3 Key storage
  6.4 Public key distribution
  6.5 Asymmetric key pair transfer
  6.6 Authenticity prior to use
  6.7 Use
  6.8 Public key revocation
  6.9 Replacement
  6.10 Public key expiration
  6.11 Private key destruction
  6.12 Private key deletion
  6.13 Public key archive
  6.14 Private key termination
  6.15 Erasure summary
  6.16 Optional life cycle processes
Annex A (normative) Approved algorithms
Bibliography

Describes techniques for the protection of symmetric and asymmetric cryptographic keys in a retail financial services environment using asymmetric cryptosystems and the life cycle management of the associated asymmetric keys.

This part of ISO11568 specifies techniques for the protection of symmetric and asymmetric cryptographic keys in a retail financial services environment using asymmetric cryptosystems and the life cycle management of the associated asymmetric keys. The techniques described in this part of ISO11568 enable compliance with the principles described in ISO11568-1. For the purposes of this document, the retail financial services environment is restricted to the interface between:

• a card-accepting device and an acquirer;

• an acquirer and a card issuer;

• an ICC and a card-accepting device.