ISO/IEC 7816-15:2016

Overview

ISO/IEC 7816-15:2016 - "Identification cards - Integrated circuit cards - Part 15: Cryptographic information application" defines a standardized, platform-neutral application for storing, organizing and sharing cryptographic information on smart cards (integrated circuit cards). The standard specifies a common syntax and file formats (ASN.1-based) for cryptographic information objects (CIOs), directory files and related mechanisms to enable vendor-neutral, application-neutral and interoperable use of keys, certificates and authentication objects across multiple platforms.

Key objectives:

• Facilitate interoperability among components on different platforms
• Enable multi-vendor product integration
• Allow technological evolution without rewriting application-level software
• Maintain consistency with related standards while expanding only where needed

Note: ISO/IEC 7816-15:2016 does not mandate internal card implementation details and implementations are not required to support every option. In case of ASN.1 discrepancies, Annex A (ASN.1 module) takes precedence.

Key Topics and Technical Requirements

• Cryptographic Information Objects (CIOs): Common classes and attributes for private/public keys, secret keys, certificates, authentication objects and opaque data containers.
• File structure and Directory Files: Mechanisms such as EF.DIR and DF.CIA provide indirection for locating and retrieving cryptographic objects on the card.
• ASN.1 Syntax and Encoding: Information syntax defined in ASN.1 (with encoding guidelines and a normative ASN.1 module in Annex A).
• Storage & Retrieval: Support for multiple instances of cryptographic information and cross-referencing with data objects from other parts of ISO/IEC 7816.
• Access Control & Authentication: Definitions for access restrictions and multiple authentication mechanisms to protect keys and sensitive objects.
• Algorithm Agnostic: Support for multiple cryptographic algorithms (suitability of algorithms is out of scope).
• Extensibility: Cross-referencing and object identifiers to integrate with other ISO/IEC 7816 data objects and external applications.

Practical Applications and Who Uses It

ISO/IEC 7816-15 is used by:

• Smart card and secure element manufacturers (key and certificate storage formats)
• System integrators and software developers building card-based authentication, digital signature and secure ID systems
• Government agencies and credential issuers for eIDs, passports and national ID programs
• Payment, telecom and IoT solutions that require secure on-card cryptography and standardized object management
• Certificate Authorities and Public Key Infrastructure (PKI) implementers integrating card-based credentials

Benefits include improved interoperability across vendors, simplified integration of cryptographic services, and predictable object access and protection models.

Related Standards

• Other parts of the ISO/IEC 7816 series (file structure, data object definitions and APDU conventions) provide complementary specifications for card file systems and command interfaces.
• Annex A of ISO/IEC 7816-15 contains the normative ASN.1 module and takes precedence for encoding definitions.