JR/T 0025.7-2013: China financial integrated circuit card specifications. Part 7: Debit/credit application security specification

Delivery: 9 seconds. Download (and Email) true-PDF + Invoice.
Get Quotation: Click JR/T 0025.7-2013 (Self-service in 1-minute)
Newer / historical versions: JR/T 0025.7-2013

Preview True-PDF

Scope

This Part of JR/T 0025 describes the requirements for debit/credit application
security functions and the security mechanisms involved in implementing these
security functions and the encryption algorithms allowed for use, including IC
card offline data authentication method, communication security between IC
card and issuer, and related symmetric and asymmetric key managements, as
specified as follows.
- offline data authentication;
- application cryptogram and issuer authentication;
- security message;
- card security;
- terminal security;
- symmetric and asymmetric key management system.
In addition, it also includes the security mechanisms involved in implementing
these security features and the specifications for the encryption algorithms
approved for use.
This Part applies to the security related equipment, cards, terminal equipment
and management of financial debit/credit IC card application issued or accepted
by the bank. The users are mainly the research, development, integration,
maintenance and other relevant departments (organizations) of design,
manufacture, management, distribution and application systems of cards,
terminals and encryption devices related to the financial debit credit IC card
application.

Basic Data

Standard ID	JR/T 0025.7-2013 (JR/T0025.7-2013)
Description (Translated English)	China financial integrated circuit card specifications. Part 7: Debit/credit application security specification
Sector / Industry	Finance Industry Standard (Recommended)
Classification of Chinese Standard	A11
Classification of International Standard	35.240.40
Word Count Estimation	58,530
Older Standard (superseded by this standard)	JR/T 0025.7-2010
Quoted Standard	GB/T 16649.4; GB/T 16649.5; GB/T 20547.2; ISO 8731-1; ISO/IEC 9796-2; ISO/IEC 9797-1; ISO/IEC 10116; ISO 13491-1
Regulation (derived from)	Industry standard filing Notice No. 5 of 2013 (No. 161 overall)
Issuing agency(ies)	People's Bank of China
Summary	This standard specifies the debit/credit application security functional requirements and security mechanisms to achieve these security features involved and allowed the use of encryption algorithms, including: secure communications between the IC card an