ISO/TR 24374:2023 PDF

Name: ISO/TR 24374:2023 — Financial services — Security information for PKI in blockchain and DLT implementations
SKU: ISO/TR 24374:2023
Price: 25 EUR
Availability: InStock

Financial services — Security information for PKI in blockchain and DLT implementations

Название (английский):

ISO/TR 24374:2023

Financial services — Security information for PKI in blockchain and DLT implementations

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 18
Дата публикации:: 19 апреля 2023 г.
Издание:: ISO TR 24374 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version270 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:3 раб. дн. (перевод)

Цена:270 €

Описание (английский):

This document describes the management of cryptographic keys in a blockchain, or distributed system used in the financial sector The objective of this document is to consider the impact of different types of key management processes that are required for PKI implementations in Blockchain and DLT projects

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/TR 24374:2023 - Financial services - Security information for PKI in blockchain and DLT implementations provides guidance on managing cryptographic keys and public key infrastructure (PKI) considerations when deploying blockchain and distributed ledger technology (DLT) in the financial sector. The report focuses on the impact of different key management processes required for PKI in blockchain/DLT projects and addresses security, privacy, governance and operational activities relevant to financial services.

Key technical topics and requirements

Key lifecycle and key management - Guidance on secure generation, storage, use and retirement of cryptographic keys in blockchain/DLT environments, recognizing differences from traditional centralized PKI.

Private key storage and protection - Emphasis on strong key protection mechanisms such as Hardware Security Modules (HSMs) and secure elements, and the need to interface blockchain nodes with secure execution environments.

PKI challenges and attacks - Discussion of threats to centralized Web PKI (e.g., CA compromise, revocation delays) and PKI-specific attack vectors relevant to blockchain systems.

Security objectives and controls - Technical controls, cryptographic tool selection, and operational controls tailored to decentralized ledger architectures.

Governance and operations - Roles, processes, risk analysis, legal risk considerations, and recommended organisational practices for managing PKI in DLT projects.

Integration patterns - Summary of how asymmetric cryptography is used in blockchain networks and considerations for implementing blockchain-based PKI solutions.

Standards references for crypto modules - Reference to secure cryptographic module standards (e.g., ISO/IEC 19790 for HSMs) and harmonisation with existing PKI practice.

Practical applications and users

Who will benefit:

Financial institutions evaluating or operating blockchain/DLT solutions

Security architects and PKI engineers designing key management for DLT

Blockchain developers responsible for node security and wallet integrations

Risk, compliance and legal teams assessing operational and legal risks of on‑chain keys

Auditors and regulators reviewing cryptographic controls and governance

Typical uses:

Designing secure key lifecycle management for token systems, payment rails, or settlement platforms built on DLT

Choosing and deploying HSM-backed key storage and transaction signing infrastructure

Performing risk assessments that account for irreversible, instantaneous exploitation of compromised keys

Defining PKI governance, certificate issuance and revocation models adapted to decentralized ledgers

Related standards

ISO 22739:2020 (DLT/blockchain vocabulary and concepts)

ISO/IEC 19790 (cryptographic module security requirements - HSMs)

ISO/TC 307 deliverables and ISO/DTR 23245 (related blockchain PKI work)

Keywords: ISO/TR 24374:2023, PKI, blockchain, DLT, financial services, key management, cryptographic keys, HSM, certificate authority, distributed ledger.

ISO/TR 24374:2023 PDF

Abstract

Похожие стандарты

Overview

Key technical topics and requirements

Practical applications and users

Related standards

Технические детали

ISO 22739:2020

Blockchain and distributed ledger technologies — Vocabulary

EN ISO/IEC 19896-2:2026

Information security, cybersecurity and privacy protection - Requirements for the competence of IT security c…

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies