BS ISO/IEC 20248:2018

1   Scope This document is an ISO/IEC 9594‑8 ( Public Key Infrastructure: digital signatures and certificates ) application specification for automated identification services. It specifies a method whereby data stored within a barcode and/or RFID tag are structured, encoded and digitally signed. ISO/IEC 9594‑8 is used to provide a standard method for key and data description management and distribution. It is worth noting that the data capacity and/or data transfer capacity of Automated Identification Data Carriers are restricted. This restricts the normal use of a Digital Signature as specified in ISO/IEC 9594‑8 within automated identification services. The purpose of this document is to provide an open and interoperable method, between automated identification services and data carriers , to read data, verify data originality and data integrity in an offline use case. This document specifies

— the meta data structure, the DigSig , which contains the Digital Signature and encoded structured data,

— the public key certificate parameter and extension use, the DigSig Certificate , which contains the certified associated public key , the structured data description, the read methods and private containers,