ISO 9564-2:2014 金融サービス—暗証番号（PIN）の管理とセキュリティ—パート2：PIN暗号化用に承認されたアルゴリズム | ページ 2

Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the different types of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives ).

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents ).

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation on the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the WTO principles in the Technical Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information

The committee responsible for this document is ISO/TC 68, Financial services, Subcommittee SC 2, Financial services, security.

This third edition cancels and replaces the second edition (ISO 9564-2:2005), which has been technically revised.

ISO 9564 consists of the following parts, under the general title Financial services — Personal Identification Number (PIN) management and security:

• Part 1: Basic principles and requirements for PINs in card-based systems
• Part 2: Approved algorithms for PIN encipherment
• Part 4: Requirements for PIN handling in eCommerce for payment transactions

Introduction

This part of ISO 9564 specifies algorithms approved for the encipherment of Personal Identification Numbers (PINs). The following algorithms, based on the approval processes established in ISO 9564-1, are:

• Triple Data Encryption Algorithm (TDEA);
• RSA;
• Advanced Encryption Standard (AES).

1 Scope

This part of ISO 9564 specifies approved algorithms for the encipherment of Personal Identification Numbers (PINs).

2 Normative references

The following documents, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.