标准摘要
[中文适用范围]： 本文件旨在通过使用ISO/IEC 7816和ISO/IEC 18328的部分机制（这些机制对安全性和隐私性做出了贡献），提供发现隐私属性的手段，定义基于属性的凭证处理要求，并识别IC上的数据对象和命令。现有的通用上下文中的增强隐私协议被采用到分布式系统中，包括IC卡。此外，用于在ICC与外部设备之间建立安全通道的身份验证协议得到了增强，增加了隐私保护功能。在ICC上与卡片内设备之间的安全通信也得到了考虑。本文档描述的所有协议和服务均有助于隐私保护。附录B给出了相应系统的隐私影响评估示例。 [外文原描述]： ISO/IEC 19286:2018 aims to normalize privacy-enhancing protocols and services by - using the mechanisms from parts of ISO/IEC 7816 and parts of ISO/IEC 18328 that contribute to security and privacy, - providing discoverability means of privacy-enabling attributes, - defining requirements for attribute-based credential handling, and - identifying data objects and commands for ICCs. Existing privacy-enhancing protocols available in a generic context are adopted for distributed systems including ICCs. Additionally, existing authentication protocols between an ICC and an external device used for establishing a secure channel are enhanced with privacy protection. Secure communication between an ICC and an on-card device is also considered. All the protocols and services described in this document contribute to privacy. Annex B describes an example of privacy impact assessments of respective systems.
英文名称Identification cards - Integrated circuit cards - Privacy-enhancing protocols and services