ISO 13492:2007 金融服务 密钥管理相关数据元 ISO 8353数据元53与96的应用和用法

标准编号:ISO 13492:2007

中文名称:金融服务 密钥管理相关数据元 ISO 8353数据元53与96的应用和用法

英文名称:Financial services — Key management related data element — Application and usage of ISO 8583 data elements 53 and 96

发布日期:2007-12

标准范围

ISO 13492:2007描述了一种密钥管理相关数据元素,其可以在交易消息中传输以传送关于用于保护当前交易的加密密钥的信息,或者在加密服务消息中传输以传送关于将用于保护未来交易的加密密钥的信息。ISO 13492:2007使用以下两个ISO 8583数据元素解决了ISO 8583中关键管理相关数据元素的使用要求:安全相关控制信息(数据元素53),或密钥管理数据(数据元素96)。然而,假设密钥管理相关数据的传输不限于ISO 8583,这些数据元素可以有效地用于其他消息传送格式。ISO 13492:2007适用于对称或非对称密码系统。在ISO 11568中描述了用于在金融服务环境中安全管理加密密钥的密钥管理过程。ISO 9564和ISO 16609分别描述了安全相关数据,例如PIN数据和MAC。

ISO 13492:2007 describes a key management related data element that can be transmitted either in transaction messages to convey information about cryptographic keys used to secure the current transaction, or in cryptographic service messages to convey information about cryptographic keys to be used to secure future transactions.ISO 13492:2007 addresses the requirements for the use of the key management related data element within ISO 8583, using the following two ISO 8583 data elements:

  • security related control information (data element 53), or
  • key management data (data element 96).
However, these data elements can be usefully employed in other messaging formats, given that the transportation of key management related data is not limited to ISO 8583.ISO 13492:2007 is applicable to either symmetric or asymmetric cipher systems. Key management procedures for the secure management of the cryptographic keys within the financial services environment are described in ISO 11568. Security related data, such as PIN data and MACs, are described in ISO 9564 and ISO 16609, respectively.

标准预览图


立即下载标准文件