ISO/IEC 18013-3:2017

Overview

ISO/IEC 18013-3:2017 defines access control, authentication and integrity validation mechanisms for an ISO‑compliant driving licence (IDL). Building on the machine‑readable data model in ISO/IEC 18013‑2, this part gives issuing authorities (IAs) interoperable technical options to: limit access to on‑card data, verify that a driving licence was issued by the claimed authority, and confirm that on‑card data have not been altered since issuance. The standard supports international use and mutual recognition of IDLs while allowing jurisdictions to apply their own privacy and policy rules. Note: ISO/IEC 18013‑3:2017 does not address downstream privacy or data‑use policy.

Key topics and requirements

• Access control - Mechanisms to prevent unauthorized/remote reading of machine‑readable data (e.g., Basic Access Protection (BAP), PACE).
• Document authentication - Techniques to confirm the document origin (e.g., Passive Authentication, Active Authentication, EACv1).
• Data integrity validation - Methods to ensure recorded data have not been changed since issuance (e.g., digital signatures and the Document Security Object EF.SOD).
• Mechanisms covered (from normative clauses and annexes): Passive Authentication; Active Authentication; Basic Access Protection; PACE (Password Authenticated Key Exchange based on Diffie‑Hellman, restricted to ECDH generic mapping for IDL); Extended Access Control v1 (EACv1); scanning area identifiers; non‑match alerts.
• Security file structure - Logical data files and tags such as EF.SOD, EF.DG13 (Active Authentication), EF.DG14 (EACv1) and EF.CardAccess (PACE) are specified for interoperable implementations.
• PKI and conformance - Public Key Infrastructure considerations (Annex A) and conformance rules guide issuer trust models and verification workflows.
• Standard updates - The 2017 edition simplified authentication protocols for better interoperability: harmonized Active Authentication, removal of certain BAP/EAP configurations, and optional EACv1 and PACE support.

Applications and who uses it

ISO/IEC 18013‑3:2017 is aimed at:

• Issuing authorities (motor vehicle agencies) designing secure IDLs.
• Smartcard/secure element manufacturers implementing IDL integrated circuits and file systems.
• Border control, law enforcement and inspection terminals that read and authenticate driving licences.
• System integrators and software developers building verification apps and PKI solutions.
• Standards bodies and policymakers aligning national IDL programs for mutual recognition.

Practical benefits include improved cross‑border interoperability, standardized anti‑skimming/access controls, and robust document and data integrity checks.

Related standards

• ISO/IEC 18013‑1 (human‑readable features)
• ISO/IEC 18013‑2 (machine‑readable data content) - ISO/IEC 18013‑3 is explicitly based on this part.

Keywords: ISO/IEC 18013-3:2017, ISO-compliant driving licence, IDL, access control, authentication, data integrity, PACE, EACv1, Basic Access Protection, Passive Authentication, Active Authentication.