Reference number
ISO 9564-4:2016
© ISO 2024
International Standard
ISO 9564-4:2016
Financial services — Personal Identification Number (PIN) management and security — Part 4: Requirements for PIN handling in eCommerce for Payment Transactions
Edition 1
2016-03
Preview
недоступно на русском языке
Опубликовано (Версия 1, 2016)
Последний раз этот публикация был пересмотрен в  2022. Поэтому данная версия остается актуальной.

ISO 9564-4:2016

Язык
Формат
CHF 96
Пересчитать швейцарские франки (CHF) в ваша валюта

Тезис

ISO 9564-4:2016 provides requirements for the use of personal identification numbers (PIN) in eCommerce. The PINs in scope are the same cardholder PINs used as a means of cardholder verification in card-based financial transactions; notably, automated teller machine (ATM) systems, point-of-sale (POS) terminals, automated fuel dispensers, and vending machines.

It is applicable to financial card-originated transactions requiring verification of the PIN and to those organizations responsible for implementing techniques for the management of the PIN in eCommerce.

The provisions of this part of ISO 9564 are not intended to cover

- passwords, passcodes, pass phrases and other shared secrets used for customer authentication in online banking, telephone banking, digital wallets, mobile payment, etc.,

- management of cardholder PINs for use as a means of cardholder verification in retail banking systems in, notably, automated teller machine (ATM) systems, point-of-sale (POS) terminals, automated fuel dispensers, vending machines, banking kiosks and PIN selection/change systems, which are covered in ISO 9564‑1,

- card proxies such as mobile phones or key fobs,

- approved algorithms for PIN encipherment, which are covered in ISO 9564‑2,

- the protection of the PIN against loss or intentional misuse by the customer or authorized employees of the issuer,

- privacy of non-PIN transaction data,

- protection of transaction messages against alteration or substitution, e.g. an online authorization response,

- protection against replay of the transaction,

- functionality of devices used for PIN entry which is related to issuer functions other than PIN entry,

- specific key management techniques, and

- access to, and storage of, card data other than the PIN by applications such as wallets.

Общая информация

  • Текущий статус
     : Опубликовано
    Дата публикации
     : 2016-03
    Этап
    : Подтверждение действия международного стандарта [90.93]
  • Версия
     : 1
  • Технический комитет :
    ISO/TC 68/SC 2
    ICS :
    35.240.40 
  • RSS обновления

Жизненный цикл

Цели в области устойчивого развития

Данный стандарт разработан для достижения следующих Цель устойчивого развития

9
Индустриализация, инновации и инфраструктура

Появились вопросы?

Ознакомьтесь с FAQ

  2. Интернет-магазин
  3. Каталог стандартов
  4. МКС
  5. 35
  6. 35.240
  7. 35.240.40
  8. ISO 9564-4:2016