《DD-CEN-ISO-TS-24534-4-2008.pdf》由会员分享，可在线阅读，更多相关《DD-CEN-ISO-TS-24534-4-2008.pdf（104页珍藏版）》请在三一文库上搜索。
1、DRAFT FOR DEVELOPMENT DD CEN ISO/TS 24534-4:2008 Automatic vehicle and equipment identification Electronic Registration Identification (ERI) for vehicles Part 4: Secure communications using asymmetrical techniques ICS 03.220.20; 35.240.60 ? Licensed CopyChinese University of Hong Kong, 20/10/2008 09
2、:34, Uncontrolled Copy, (c) BSI DD CEN ISO/TS 24534-4:2008 This Draft for Development was published under the authority of the Standards Policy and Strategy Committee on 31 March 2008 BSI 2008 ISBN 978 0 580 54816 1 National foreword This Draft for Development is the UK implementation of CEN ISO/TS
3、24534-4:2008. This publication is not to be regarded as a British Standard. It is being issued in the Draft for Development series of publications and is of a provisional nature. It should be applied on this provisional basis, so that information and experience of its practical application can be ob
4、tained. Comments arising from the use of this Draft for Development are requested so that UK experience can be reported to the European organization responsible for its conversion to a European standard. A review of this publication will be initiated not later than three years after its publication
5、by the European organization so that a decision can be taken on its status. Notification of the start of the review period will be made in an announcement in the appropriate issue of Update Standards. According to the replies received by the end of the review period, the responsible BSI Committee wi
6、ll decide whether to support the conversion into a European Standard, to extend the life of the Technical Specification or to withdraw it. Comments should be sent to the Secretary of the responsible BSI Technical Committee at British Standards House, 389 Chiswick High Road, London W4 4AL. The UK par
7、ticipation in its preparation was entrusted to Technical Committee EPL/278, Road transport informatics. A list of organizations represented on this committee can be obtained on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users ar
8、e responsible for its correct application. Amendments/corrigenda issued since publication DateComments Licensed CopyChinese University of Hong Kong, 20/10/2008 09:34, Uncontrolled Copy, (c) BSI TECHNICAL SPECIFICATION SPCIFICATION TECHNIQUE TECHNISCHE SPEZIFIKATION CEN ISO/TS 24534-4 February 2008 I
9、CS 35.240.60; 03.220.20 English Version Automatic vehicle and equipment identification - Electronic Registration Identification (ERI) for vehicles - Part 4: Secure communications using asymmetrical techniques (ISO/TS 24534- 4:2008) Identification automatique des vhicules et des quipements - Identifi
10、cation denregistrement lectronique (ERI) pour les vhicules - Partie 4: Communications sres utilisant des techniques asymtriques (ISO/TS 24534- 4:2008) Straenverkehrstelematik (RTTT) - Automatische Identifizierung von Fahrzeugen und Ausrstungen - Elektronische Identifizierung fr die Registrierung (ER
11、I) - Teil 4: Sichere Anwendungsebene mittels asymmetrischer Techniken (ISO/TS 24534-4:2008) This Technical Specification (CEN/TS) was approved by CEN on 17 July 2006 for provisional application. The period of validity of this CEN/TS is limited initially to three years. After two years the members of
12、 CEN will be requested to submit their comments, particularly on the question whether the CEN/TS can be converted into a European Standard. CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available promptly at national level in an
13、 appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS) until the final decision about the possible conversion of the CEN/TS into an EN is reached. CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Cyprus, Czech Repu
14、blic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland and United Kingdom. EUROPEAN COMMITTEE FOR STANDARDIZATION COMIT EUROPEN DE
15、 NORMALISATION EUROPISCHES KOMITEE FR NORMUNG Management Centre: rue de Stassart, 36 B-1050 Brussels 2008 CENAll rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No. CEN ISO/TS 24534-4:2008: E Licensed CopyChinese University of Hong Kong, 20/10/20
16、08 09:34, Uncontrolled Copy, (c) BSI Foreword This document (CEN ISO/TS 24534-4:2008) has been prepared by Technical Committee CEN/TC 278 “Road transport and traffic telematics“, the secretariat of which is held by NEN, in collaboration with Technical Committee ISO/TC 204 “Transport information and
17、control systems“. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CEN and/or CENELEC shall not be held responsible for identifying any or all such patent rights. According to the CEN/CENELEC Internal Regulations, the national stan
18、dards organizations of the following countries are bound to announce this CEN Technical Specification: Austria, Belgium, Bulgaria, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
19、Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland and the United Kingdom. CEN ISO/TS 24534-4:2008 Licensed CopyChinese University of Hong Kong, 20/10/2008 09:34, Uncontrolled Copy, (c) BSI iii Contents Page Foreword iv Introduction v 1 Scope . 1 2 Normative references. 2 3 Te
20、rms and definitions. 2 4 Abbreviations 11 5 System communications concept. 12 5.1 Introduction. 12 5.2 Overview 12 5.3 Security services 19 5.4 Communication architecture description. 24 5.5 Interfaces. 26 6 Interface requirements. 27 6.1 Overview 27 6.2 Abstract transaction definitions 28 6.3 The E
21、RT interfaces . 65 Annex A (normative) ASN.1 Modules. 69 Annex B (informative) Operational scenarios . 80 Annex C (normative) PICS pro forma. 91 Bibliography. 95 CEN ISO/TS 24534-4:2008 Licensed CopyChinese University of Hong Kong, 20/10/2008 09:34, Uncontrolled Copy, (c) BSI iv Foreword ISO (the In
22、ternational Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee h
23、as been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical
24、 standardization. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of technical committees is to prepare International Standards. Draft International Standards adopted by the technical committees are circulated to the member bodi
25、es for voting. Publication as an International Standard requires approval by at least 75 % of the member bodies casting a vote. In other circumstances, particularly when there is an urgent market requirement for such documents, a technical committee may decide to publish other types of normative doc
26、ument: an ISO Publicly Available Specification (ISO/PAS) represents an agreement between technical experts in an ISO working group and is accepted for publication if it is approved by more than 50 % of the members of the parent committee casting a vote; an ISO Technical Specification (ISO/TS) repres
27、ents an agreement between the members of a technical committee and is accepted for publication if it is approved by 2/3 of the members of the committee casting a vote. An ISO/PAS or ISO/TS is reviewed after three years in order to decide whether it will be confirmed for a further three years, revise
28、d to become an International Standard, or withdrawn. If the ISO/PAS or ISO/TS is confirmed, it is reviewed again after a further three years, at which time it must either be transformed into an International Standard or be withdrawn. Attention is drawn to the possibility that some of the elements of
29、 this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent rights. ISO/TS 24534-4 was prepared by Technical Committee ISO/TC 204, Intelligent transport systems, and by Technical Committee CEN/TC 278, Road transport and traffic telemat
30、ics in collaboration. ISO/TS 24534 consists of the following parts, under the general title Automatic vehicle and equipment identification Electronic Registration Identification (ERI) for vehicles: Part 1: Architecture Part 2: Operational requirements Part 3: Vehicle data Part 4: Secure communicatio
31、ns using asymmetrical techniques Part 5: Secure communications using symmetrical techniques CEN ISO/TS 24534-4:2008 Licensed CopyChinese University of Hong Kong, 20/10/2008 09:34, Uncontrolled Copy, (c) BSI v Introduction A quickly emerging need has been identified within administrations to improve
32、the unique identification of vehicles for a variety of services. Situations are already occurring where manufacturers intend to fit lifetime tags to vehicles. Various governments are considering the needs/benefits of ERI such as legal proof of vehicle identity with potential mandatory usages. There
33、is a commercial and economic justification both in respect of tags and infrastructure that a standard enables an interoperable solution. Electronic Registration Identification (ERI) is a means of uniquely identifying road vehicles. The application of ERI will offer significant benefits over existing
34、 techniques for vehicle identification. It will be an enabling technology for the future management and administration of traffic and transport, including applications in free-flow, multi-lane, traffic conditions with the capability to support mobile transactions. ERI addresses the need of authoriti
35、es and other users for a trusted electronic identification, including roaming vehicles. This part of ISO/TS 24534 specifies the application layer interfaces for the exchange of data between an onboard component containing the ERI data and a reader or writer inside or outside the vehicle. The exchang
36、ed identification data consists of a unique vehicle identifier and may also include data typically found in the vehicles registration certificate. The authenticity of the exchanged vehicle data can be further enhanced by ensuring data has been obtained by request from a commissioned device, with the
37、 data electronically signed by the registration authority. In order to facilitate (international) re-sales of vehicles, the ERI interface includes provisions for another accredited registration authority to take over the registration of a vehicle. The ERI interface supports confidentiality measures
38、to adhere to (inter)national privacy regulation and to prevent other misuse of electronic identification of vehicles. A registration authority may authorize other authorities to access the vehicles data. A holder of a registration certificate may authorize an additional service provider to identify
39、the vehicle when he/she wants commercial service. However, it is perceived that different users may have different requirements for authentication and confidentiality. This Technical Specification therefore supports different levels of security with maximum compatibility. Much attention is given to
40、the interoperability of the component containing the ERI data and readers of various levels of capability, e.g. the identification of a vehicle with a less capable ERI data component by a more sophisticated reader equipment and vice versa. The supported complexity of the device containing the ERI da
41、ta may range from a very simple read-only device that only contains the vehicles identifier, to a sophisticated device that includes both authentication and confidentiality measures and maintains a historic list of the vehicle data written by the manufacturer and by vehicle registration authorities.
42、 Following the events of 11 September 2001, and subsequent reviews of anti-terrorism measures, the need for ERI has been identified as a possible anti-terrorism measure. The need for International or pan-European harmonization of such ERI is therefore important. It is also important to ensure that a
43、ny ERI measures contain protection against misuse by terrorists. This part of ISO/TS 24534 makes use of the basic automatic vehicle identification (AVI) provisions already defined in ISO 14814 and 14816. CEN ISO/TS 24534-4:2008 Licensed CopyChinese University of Hong Kong, 20/10/2008 09:34, Uncontro
44、lled Copy, (c) BSI blank Licensed CopyChinese University of Hong Kong, 20/10/2008 09:34, Uncontrolled Copy, (c) BSI 1 Automatic vehicle and equipment identification Electronic Registration Identification (ERI) for vehicles Part 4: Secure communications using asymmetrical techniques 1 Scope This part
45、 of ISO/TS 24534 provides the requirements for an Electronic Registration Identification (ERI) that is based on an identifier assigned to a vehicle (e.g. for recognition by national authorities) suitable to be used for: electronic identification of local and foreign vehicles by national authorities,
46、 vehicle manufacturing, in-life-maintenance and end-of-life identification (vehicle life cycle management), adaptation of vehicle data, e.g. in case of international re-sales, safety-related purposes, crime reduction, and commercial services. It adheres to privacy and data protection regulations. Th
47、is part of ISO/TS 24534 specifies the interfaces for a secure exchange of data between an ERT and an ERI reader or ERI writer in or outside the vehicle using asymmetric encryption techniques. NOTE 1 The onboard device containing the ERI data is called the Electronic Registration Tag (ERT). This Tech
48、nical Specification includes: the application layer interface between an ERT and an onboard ERI reader or writer, the application layer interface between the onboard ERI equipment and external ERI readers and writers, and security issues related to the communication with the ERT. NOTE 2 The vehicle
49、identifiers and possible additional vehicle data (as typically contained in vehicle registration certificates) are defined in ISO/TS 24534-3. NOTE 3 The secure application layer interfaces for the exchange of ERI data with an ERI reader or writer are specified in ISO/TS 24534-4 and a future ISO/TS 24534-5. CEN ISO/TS 24534-4:2008 Licensed CopyChinese University of Hong Kong, 20/10/2008 09:34, Uncontrolled Copy, (c) BSI 2 2 Normative references The followin