标准号：ISO 9564-1-2002
实施状态：作废
中文名称：银行业务.个人身份识别号(PIN)管理和保密.第1部分:ATM 和POS 系统联机处理的基本原则和要求
英文名称：Banking - Personal Identification Number (PIN) management and security - Part 1: Basic principles and requirements for online handling in ATM and POS systems
发布日期：2002-04
被替代标准：ISO 9564-1-2011
代替标准：ISO 9564-1-1991;ISO/FDIS 9564-1-2001
采用标准：GB/T 21078.1-2007,MOD;PN-ISO 9564-1-2004,IDT
起草单位：ISO/TC 68
标准简介：This part of ISO 9564 specifies the basic principles and techniques which provide the minimum security measures required for effective international PIN management. These measures are applicable to those institutions responsible for implementing techniques for the management and protection of PINs.
This part of ISO 9564 also specifies PIN protection techniques applicable to financial transaetion-card-originated transactions in an online environment and a standard means of interchanging PIN data. These techniques are applicable to those institutions responsible for implementing techniques for the management and protection of the PIN at Automated Teller Machines (ATM) and acquirer sponsored Point-of-Sale (POS) terminals.
The provisions of this part of ISO 9564 are not intended to cover:
a) PIN management and security in the offline PIN environment, which is covered in ISO 9564-3;
b) PIN management and security in the electronic commerce environments, which is to be covered in a subsequent part of ISO 9564;
c) the protection of the PIN against loss or intentional misuse by the customer or authorized employees of the issuer;
d) privacy of non-PfN transaction data;
e) protection of transaction messages against alteration or substitution, e.g. an authorization response to a PIN verification;
f) protection against replay of the PIN or transaction;
g) specific key management techniques.
文件格式：PDF
文件大小：267.65KB
文件页数：38
（以上信息更新时间为：2019-11-23）
ISO 9564-1-2002 银行业务.个人身份识别号(PIN)管理和保密.第1部分_ATM 和POS 系统联机处理的基本原则和要求.pdf
(267.65 KB)
|
|
