International Standard: Iso/Iec 7816-5
International Standard: Iso/Iec 7816-5
STANDARD 7816-5
Second edition
2004-12-01
Part 5:
Registration of application providers
Cartes d'identification — Cartes à circuit intégré —
Partie 5: Enregistrement des fournisseurs d'application
Reference number
ISO/IEC 7816-5:2004(E)
© ISO/IEC 2004
ISO/IEC 7816-5:2004(E)
PDF disclaimer
This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but
shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In
downloading this file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat
accepts no liability in this area.
Adobe is a trademark of Adobe Systems Incorporated.
Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation
parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In
the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below.
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
© ISO/IEC 2004
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means,
electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or
ISO's member body in the country of the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail [email protected]
Web www.iso.org
Published in Switzerland
Contents Page
Foreword ............................................................................................................................................................ iv
1 Scope...................................................................................................................................................... 1
2 Normative references ........................................................................................................................... 1
3 Terms, definitions and abbreviated terms.......................................................................................... 1
3.1 Terms and definitions........................................................................................................................... 1
3.2 Abbreviated terms................................................................................................................................. 1
4 Registration of international identifiers.............................................................................................. 2
4.1 Request and registration procedures ................................................................................................. 2
4.2 Appeal process ..................................................................................................................................... 2
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are members of
ISO or IEC participate in the development of International Standards through technical committees
established by the respective organization to deal with particular fields of technical activity. ISO and IEC
technical committees collaborate in fields of mutual interest. Other international organizations, governmental
and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information
technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1.
International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2.
The main task of the joint technical committee is to prepare International Standards. Draft International
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as
an International Standard requires approval by at least 75 % of the national bodies casting a vote.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights.
ISO/IEC 7816-5 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology,
Subcommittee SC 17, Cards and personal identification.
This second edition cancels and replaces the first edition (ISO/IEC 7816-5:1994) and incorporates the
Amendment ISO/IEC 7816-5:1994/Amd.1:1996). The technical content of Clauses 5 and 6 of the first edition
is now to be found in the second edition of ISO/IEC 7816-4, and Annex A has been technically revised.
ISO/IEC 7816 consists of the following parts, under the general title Identification cards — Integrated circuit
cards:
— Part 10: Cards with contacts: Electrical interface for synchronous cards
— Part 12: Cards with contacts: USB electrical interface and operating procedures
1 Scope
This part of ISO/IEC 7816 specifies a registration procedure for application providers, and establishes the
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
authorities and procedures to ensure and optimize the reliability of this registration.
NOTE 1 ISO/IEC 7816-4 defines the structures of registered application provider identifiers (RIDs), and how to use
them. A registered application provider identifier (RID) consists of five bytes.
NOTE 2 In international RIDs (assigned by the international registration authority), the first quartet is set to 'A'.
NOTE 3 In national RIDs (assigned by a national Registration Authority), the first quartet is set to 'D' and a relevant
country code follows (see Annex B).
2 Normative references
The following referenced documents are indispensable for the application of this document. For dated
references, only the edition cited applies. For undated references, the latest edition of the referenced
document (including any amendments) applies.
ISO/IEC 7816-4, Identification cards — Integrated circuit cards — Part 4: Organization, security and
commands for interchange
For the purposes of this document, the following terms and definitions, given in ISO/IEC 7816-4, apply.
3.1.1
application provider
entity providing the components that make up an application in the card
3.1.2
registered application provider identifier
data element (five bytes) that uniquely identifies an application provider
An application provider (including international organisations) shall apply to the standards body of its related
country (i.e. national standards body), or in the absence of a national standards body, to the secretariat of the
ISO technical body responsible for this part of ISO/IEC 7816 for the assignment of a RID.
The applicant shall use the form shown in Annex A. Registration forms are also available, on request, from the
Registration Authority, the secretariat of the Registration Management Group (RMG) and the secretariat of the
ISO technical body responsible for this part of ISO/IEC 7816.
The national standards body or the secretariat of the ISO technical body responsible for this part of
ISO/IEC 7816 then acts as the "Sponsoring Authority" (see Clause 5) with respect to the request.
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
a) the applicant shall be a corporate entity or its subsidiaries operating under a specific legislative regulation;
b) the applicant requesting a RID shall not already have an international RID (registration category 'A').
Exceptionally an applicant may apply for more than one RID, subject to decision by the RMG.
A request for a RID shall be rejected if any of the following conditions exist:
b) the applicant has requested a specific number or the reservation in the register of a specific number or has
made a request which is outside the scope of this part of ISO/IEC 7816.
NOTE Where special circumstances exist, the Sponsoring Authority may approve a request and forward the request
to the Registration Authority for assignment of a number. All such assignments must be reported by the Sponsoring
Authority to the RMG.
Where a request has been rejected by a Sponsoring Authority, the applicant may appeal to the secretariat of
the RMG (see Clause 6). Where a request has been rejected by the RMG, the applicant may appeal to the
ISO technical body responsible for this part of ISO/IEC 7816 through the secretariat of that ISO technical body.
Applicants may submit for appeal requests that have been rejected by the ISO technical body responsible for
this part of ISO/IEC 7816 to the ISO Central Secretariat.
Appeal against rejection of a request shall be submitted to the appropriate body within 90 days of the date of
the letter of rejection.
Where the Sponsoring Authority has rejected a request, the applicant shall provide the following information to
the relevant appeal body in support of the appeal:
a) Statement of which rejection clause (see 4.1.3) is disputed and why the applicant believes that the rejected
request fulfills the criteria for acceptance (see 4.1.2).
b) Statement of special circumstances whereby a specific requirement of the rejected request can be met, but
such requirement is outside the current procedures and criteria for acceptance outlined in this this part of
ISO/IEC 7816.
a) to comply fully with the numbering system defined in ISO/IEC 7816-4 and with the procedures for
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
b) to forward to its national standards body, or in the absence of a national standards body, to the secretariat
of the ISO technical body responsible for this part of ISO/IEC 7816, a completed registration form, (see
Annex A) together with the requisite fee;
c) to retain the completed registration form containing the RID assigned to the applicant by the Registration
Authority;
d) to inform the Sponsoring Authority of any modification to the data related to the assigned RID.
5 Sponsoring Authorities
The following bodies may act as Sponsoring Authorities in processing requests for RIDs:
a) any national member body of ISO (or agent appointed to act for its national member body); and
b) the ISO technical body responsible for this part of ISO/IEC 7816 (or agent appointed to act for the ISO
technical body).
5.2 Responsibilities
a) to comply fully with the numbering system defined in ISO/IEC 7816-4 and with the procedures for
requesting RIDs as contained in this part of ISO/IEC 7816;
b) to process within 30 days of receipt of requests, requests for RIDs from within their countries or areas of
responsibility;
c) to notify the applicant in writing, within 30 days of receipt of the request, as to the disposition of their
request. If rejected, to advise applicant of the reason(s);
d) to ensure that section A1 of the registration form has been filled in correctly;
f) to forward to the Registration Authority (see Clause 7) requests for RIDs that meet the approval criteria,
together with the requisite fee in a form determined by the Registration Authority;
g) on receipt of the number assignment from the Registration Authority, to inform the applicant of the number
assignment, returning the completed registration form containing the number assignment to the applicant,
informing it of the requirement to retain the completed registration form as a permanent record;
h) to reject requests for a specific number and for reservation of a specific number or any request outside the
scope of this part of ISO/IEC 7816; or, where special circumstances exist, to approve such a request and
to put forward a copy of the relevant papers to the RMG for review;
j) to establish and maintain a national numbering system where necessary according to Annex B;
k) to forward to the Registration Authority any modification to the data related to an assigned RID.
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
6.1 Constitution
In order to effectively manage the Registration system for applications in IC cards, the ISO technical body
responsible for this part of ISO/IEC 7816 has established a RMG, ISO/IEC JTC1/SC17/WG5, which is
delegated to act on its behalf.
a) a representative of the Registration Authority who shall be a non-voting member of the RMG and shall be
expected to attend all meetings;
b) each P and L member of the ISO technical body responsible for this part of ISO/IEC 7816 is entitled to
nominate one delegate and one alternate to the RMG. The alternate may attend all meetings but is entitled
to vote only in the absence of the principal delegate;
c) the convenor of the RMG and the secretariat of the RMG, nominated from the membership of the RMG.
6.2 Responsibilities
a) to ensure that applicants whose requests do not fulfill the conditions in 4.1.2 are rejected and informed of
the cause of the rejection and furthermore informed of their right to appeal (see 4.2);
b) to provide, on request, guidance and counsel to any national standards body on the establishment of a
national numbering system;
c) to provide guidance to Sponsoring Authorities on requests which demonstrate special circumstances and
requests for specific numbers. This guidance shall be decided by resolution at a meeting or in writing
following a letter ballot;
d) to review at each meeting of the RMG the Registration Management Report and the Summary of the
Register of Issued Numbers Report received from the Registration Authority;
e) to provide guidance to Sponsoring Authorities to ensure that they comply with the criteria laid down within
this part of ISO/IEC 7816;
f) to respond to all requests from the Registration Authority within 60 days of the date of request;
g) to review annually the register of RIDs and to report the activities of the RMG to each meeting of the ISO
technical body responsible for this part of ISO/IEC 7816 and as required between meetings.
Where requests for assignment of a specific number(s), or any specific request outside the scope of this part
of ISO/IEC 7816, have been forwarded to the RMG by a Sponsoring Authority, such requests may be dealt
with either by voting at a meeting or by ballot.
By approval of a majority of returned votes in a ballot or by majority of those voting at a meeting, the RMG
may authorise specific unusual requests.
Where a ballot has failed, it shall be referred to a meeting. If the RMG cannot resolve the failed ballot at a
meeting, the matter shall be referred to the ISO technical body responsible for this part of ISO/IEC 7816.
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
Where a request has been rejected, the RMG shall notify the applicant in writing, within 30 days of the close of
the ballot, or where a vote was taken at a meeting, within 30 days of that meeting, that the request has been
rejected. The RMG shall state the specific reason(s) for the rejection and advise the applicant of their right to
appeal to the ISO technical body responsible for this part of ISO/IEC 7816 (see 4.2).
7 Registration Authority
7.1 Appointment
For the purpose of this part of ISO/IEC 7816 and according to the rules for the designation and operation of
registration authorities in the ISO Directives, the ISO Council has designated Tele Danmark to act as
registration authority. The contact information for the registration authority is located on the ISO web site
(http://www.iso.org) on the registration authority page.
7.2 Resignation
If a Registration Authority finds it necessary to resign, six months notice shall be given to the ISO Central
Secretariat and the Secretariat of the ISO technical body responsible for this part of ISO/IEC 7816. The
Secretariat of the ISO technical body responsible for this part of ISO/IEC 7816 shall notify the RMG and
initiate a search for a new Registration Authority. If a new Registration Authority cannot be found within six
months, the Secretariat of the ISO technical body responsible for this part of ISO/IEC 7816 in association with
the ISO Central Secretariat shall assume the responsibilities of the Registration Authority on a temporary
basis until a replacement is found. The information contained in the database and the associated documents
remain the property of the ISO technical body responsible for this part of ISO/IEC 7816.
b) to submit a copy of the ISO register of RIDs annually to the Secretariat of the ISO technical body
responsible for this part of ISO/IEC 7816 and to the RMG. The form in which this copy shall be provided
shall be agreed upon by the Registration Authority and the secretariat of the ISO technical body
responsible for this part of ISO/IEC 7816;
c) to submit for review to each meeting of the RMG, a Summary of the Register of Issued Numbers Report
and a Registration Management Report. These reports shall be sent to the secretariat of the RMG two
months prior to a meeting;
d) to forward to the RMG, within 30 days of receipt of the request, requests where special circumstances
exist;
e) to retain as a permanent record copies of all requests submitted to it, along with the disposition of each
request;
f) to make available a copy of a summary of the register of issued numbers, containing at least:
The responsibilities of the Registration Authority to applicants requesting a RID shall be:
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
a) where requests fulfill the criteria set down in 4.1.2, notify the Sponsoring Authority or the Secretariat of the
ISO technical body responsible for this part of ISO/IEC 7816 as appropriate, in writing, within 30 days of
receipt of the request, as to the number assignment;
b) to assign a number(s) to the applicant and to forward the completed registration form to the Sponsoring
Authority, within 30 days of receipt of the sponsored request;
c) where a request is referred to the RMG, the Registration Authority shall notify the applicant, in writing, that
a reply may not be received within the usual time frame, and the reason for referring the request to the
RMG.
The Registration Authority shall maintain a database of information taken directly from the registration form.
From the database the Registration Authority shall publish a register of RIDs. The register shall be published
in both numerical and alphabetical order. The information in the register shall be made available according to
the rules given in 7.3.
8.2 Contents
a) name of organisation;
A copy of each request received shall be maintained on file by the Registration Authority.
Annex A
(normative)
This request is submitted in accordance with ISO/IEC 7816-5, Identification cards — Integrated circuit
cards — Registration of application providers.
Address to be registered
Date Signature
Date Signature
Date Signature
Annex B
(informative)
National registration
B.1 Introduction
According to ISO/IEC 7816-4, the first two bytes of national RIDs shall be set to 'DX YZ' where 'XYZ' is a
country code according to ISO/IEC 3166-1 for identifying a national standards body acting as a national
Registration Authority. Every national Registration Authority assigns national RIDs and establishes a national
register for application providers.
Externe elektronische Auslegestelle-Beuth-Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (HBZ)-KdNr.227109-ID.LB8ZA0SFYFOFSWG4EVCUPTNW.1-2019-06-11 01:17:54
ICS 35.240.15
Price based on 8 pages
ISO/IEC 7816-5:2004(E)