SIST ISO 9564-1:1995 PDF

Name: SIST ISO 9564-1:1995 — Banking -- Personal Identification Number management and security -- Part 1: PIN protection principles and techniques
SKU: SIST ISO 9564-1:1995
Price: 88.78 EUR
Availability: InStock

Banking -- Personal Identification Number management and security -- Part 1: PIN protection principles and techniques

Название (английский):

SIST ISO 9564-1:1995

Banking -- Personal Identification Number management and security -- Part 1: PIN protection principles and techniques

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 34
Дата публикации:: 1 мая 1995 г.
ICS:: 35.240.40
Технический комитет:: BFS - Banking and related financial services

Тип поставки:

Full version510 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:6 раб. дн. (перевод)

Цена:510 €

Описание (английский):

Specifies the minimum security measures required for effective international PIN management. Annexes A and B form an integral part of this standard. Annexes C, D, E, F, G and H are for information only.

Abstract

Overview

Key Topics

1. PIN Protection Principles

Emphasizes safeguarding PIN secrecy at all times - including selection, issuance, activation, storage, entry, transmission, validation, deactivation, and destruction.
Governs procedures so that hardware and software cannot be fraudulently accessed or modified without detection.
Requires that PINs, when stored, are encrypted unless physically secured.
Mandates controls to prevent PINs from being displayed, verbally communicated, or entered through insecure devices.

2. PIN Management Techniques

Stipulates the use of secure procedures for PIN selection (assigned, random, or customer-selected), issuance (via secure PIN mailers), and changes.
PINs must be 4 to 12 characters in length; customers should be advised on PIN secrecy.
Special attention to disposal of materials which might reveal PINs (e.g., returned mailers, printing residue).

3. Encipherment and Key Management

PINs must be encrypted using approved cryptographic algorithms and keys (referenced in ISO 9564-2).
Specific cryptographic keys for storage and transmission cannot be used elsewhere.
Proper key management and dual control processes are required to prevent compromise.

4. Physical and Logical Security

Devices managing PINs must be physically secure - unauthorized penetration must erase sensitive data and render the device unusable.
All PIN entry devices (PIN pads) should prevent PIN observation and must meet strict design criteria.
Secure environments are required for handling unencrypted PINs or cryptographic keys.

Applications

ATM and POS Networks: Banks and transaction processors use the standard to define PIN handling requirements for ATMs and point-of-sale terminals.
Card Issuance: Institutions follow these PIN management guidelines when issuing cards or enabling PIN changes to ensure customer security.
Interbank and International Transactions: Provides standardized procedures for PIN encryption and verification, enabling secure cross-institution and international financial services.
Regulatory Compliance: Financial organizations implement the principles of SIST ISO 9564-1 to meet audit, risk management, and industry compliance requirements.

Related Standards

ISO 9564-2: Covers approved algorithms for PIN encipherment.
ISO 7812: Defines identification card numbering systems for issuer and account identification.
ISO 8583: Specifies financial transaction message content for card-originated exchanges.
ISO 9807: Details requirements for message authentication in retail banking.
ISO 8908: Describes vocabulary and data elements in banking and related financial services.

Adherence to SIST ISO 9564-1 supports robust PIN management, reducing fraud risk and fostering consumer trust in electronic banking. Standardized PIN protection techniques are central to the secure operation of ATMs, POS systems, and global interoperable banking infrastructures. For financial institutions, integrating the requirements of this standard is a critical part of building and maintaining resilient payment security systems.

Технические детали

SKU: SIST ISO 9564-1:1995

Главная

Каталог

SIST ISO 9564-2:1995

Действующий

Banking -- Personal Identification Number management and security -- Part 2: Approved algorithm(s) for PIN en…

Overview SIST ISO 9564-2:1995 is an international standard developed for the banking sector, specifically focusing on Personal Identification Number (PIN) management and security. This part of the st…

4 · PDF

31 €