ISO 13491-1:2024 金融サービス — 安全な暗号化デバイス (小売) — Part 1:概念と要件 | ページ 6

3.1

audit

evaluates compliance with an evaluation on behalf of an evaluation agency

3.2

auditor

person who conducts an audit (3.1)

3.3

attack

attempt by an adversary on the device to obtain or modify sensitive data (3.20) or a service they are not authorized to obtain or modify

3.4

controller

entity responsible for the secure management of a secure cryptographic device (SCD) (3.18)

3.5

derived unique key per transaction

DUKPT

key management method that uses a unique key for each transaction and prevents the disclosure of any past key used by the transaction originating secure cryptographic device (SCD) (3.18)

[SOURCE:ISO 11568:2023, 3.35]

3.6

device compromise

successful defeat of the physical or logical protections provided by the secure cryptographic device (SCD) (3.18) , resulting in the potential disclosure of sensitive data (3.20) or unauthorized use of the SCD

3.7

device security

security of the secure cryptographic device (SCD) (3.18) related to its characteristics only, without reference to a specific operational environment (3.15)

3.8

device management

processes, including procedures, controlling the access to and use of the device

Note 1 to entry: These processes can vary depending on the deployed environment.

3.9

dual control

process of utilizing two or more separate individuals operating in concert to protect sensitive functions (3.21) or sensitive information (3.20) whereby no single individual is able to use the function or access all the information alone

Note 1 to entry: A cryptographic key is an example of the type of material protected by dual control.

[SOURCE:ISO 11568:2023, 3.39, modified — Note 2 to entry deleted.]

3.10

financial key

cryptographic key used to protect financial transaction data

3.11

hardware management device

HMD

non- secure cryptographic device (SCD) (3.18) , typically a dedicated integrated circuit card (ICC), with security features similar to an SCD but lacking tamper-response characteristics (3.25) , which provides a set of cryptographic services in support of the management of SCDs

Note 1 to entry: HMDs are subject to additional environment controls (see 5.2) due to their limited security features.

Note 2 to entry: Cryptographic services can include key generation, secure storage of key shares and key components, cryptogram creation and signature generation.

3.12

hardware security module

HSM

secure cryptographic device (SCD) (3.18) that provides a set of secure cryptographic services

Note 1 to entry: Secure cryptographic services can include key generation, cryptogram creation, personal identification number (PIN) translation and certificate signing.

3.13

key loading device

KLD

secure cryptographic device (SCD) (3.18) that loads keys into other SCDs

3.14

logical security

ability of a device to withstand attacks (3.3) through its functional interface

3.15

operational environment

environment in which the secure cryptographic device (SCD) (3.18) is operated, i.e. the system of which it is part, the location where it is placed, the persons operating and using it and the entities communicating with it

3.16

physical security

ability of a device to withstand attacks (3.3) against its physical construction, including exploitation of physical characteristics such as electromagnetic emissions and power fluctuations, the analysis of which can lead to side-channel attacks

3.17

public key infrastructure

PKI

structure of hardware, software, people, processes and policies that employs digital signature technology to facilitate a verifiable association between the public component of an asymmetric public key pair with a specific subscriber that possesses the corresponding private key

Note 1 to entry: The public key may be provided for digital signature verification, authentication of the subject in communication dialogues, and/or for message encryption key exchange or negotiation

[SOURCE:ISO 21188:2018, 3.48]

3.18

secure cryptographic device

SCD

device that provides physically and logically protected cryptographic services and storage, and which can be integrated into a larger system, such as an automated teller machine (ATM) or point-of-sale terminal

3.19

security scheme

configuration that supports the secure status of the device

3.20

sensitive data

sensitive information

data which need to be protected against unauthorized disclosure, alteration or destruction

3.21

sensitive function

function which is accessible when the device is in a sensitive state (3.22)

3.22

sensitive state

device condition that provides access to the secure operator interface, such that it can only be entered when the device is under dual control (3.9)

3.23

tamper-evident characteristic

characteristic that provides evidence that an attack (3.3) has been attempted

3.24

tamper-resistant characteristic

characteristic that provides passive physical protection against an attack (3.3)

3.25

tamper-response characteristic

characteristic that provides an active response to the detection of an attack (3.3)