ISO 20415:2019

Overview

ISO 20415:2019 - Trusted mobile e-document framework (TMEF) defines requirements, functionality and criteria to ensure reliable and safe mobile e-business and mobile electronic document exchange. The standard addresses end‑to‑end considerations for creating, transmitting and managing electronic documents over wireless networks (3G, 4G, Wi‑Fi, etc.) in B2B and B2C contexts - from simple document inquiry to contract and payment document exchange. ISO 20415 is intended as a practical framework for system developers, mobile network operators, service providers and organizations that implement or certify mobile electronic transaction systems.

Key topics and technical requirements

ISO 20415 covers both architectural models and operational criteria. Important topics include:

• General requirements: feasibility, neutrality of technology, minimum protocol set and linkage with wired environments.
• TMEF environment and model: physical and logical models for mobile e-document systems.
• Authentication: requirements, authentication processes, functionality and usage criteria to identify mobile devices (MDs) and users.
• Confidentiality: requirements and sub‑functionalities for protecting data against tapping and interception in mobile networks.
• Reliable messaging: requirements and mechanisms to detect disconnection, ensure delivery, acknowledgement (ACK/NACK) and fast recovery in unreliable wireless channels.
• Management: management considerations for users, mobile devices, electronic document applications, mobile networks and mobile servers (MS).
• Terminology and scopes: definitions for MD, MS, electronic document, integrity, digital/electronic signatures, DoS and other mobile‑specific risks.

Keywords: ISO 20415, TMEF, mobile e-document, mobile authentication, mobile confidentiality, reliable messaging, mobile network security.

Practical applications

ISO 20415 is applicable where secure, reliable mobile document exchange is required:

• Logistics and supply‑chain document transmission (delivery notes, bills of lading)
• Electronic trade and invoicing in B2B/B2C scenarios
• Mobile financing and payment authorization, contract signing and exchange
• Manufacturing and field service documentation accessed via smartphones/tablets
• Any mobile electronic transaction requiring integrity, authentication and confidentiality

Who should use this standard

• System developers building mobile e-document and transaction platforms
• Mobile network service providers and operators implementing secure services
• Third‑party service providers and integrators for mobile e-business solutions
• Certification bodies assessing mobile transaction security and reliability

Related standards

ISO 20415 complements broader ISO/IEC guidance on information security, electronic signatures and network protocols and is intended to be used alongside organizational and technical security standards when designing mobile e-business solutions.