信息技术.自动识别和数据捕获技术.数字签名数据结构模式

[中文适用范围]： 本文件规定了基于条码和/或射频识别（RFID）标签存储数据进行自动识别服务的应用规范。 使用 ISO/IEC 9594-8 提供标准方法，用于密钥和数据描述管理与分发。 由于自动识别数据载体的数据容量或传输能力有限，因此限制了根据 ISO/IEC 9594-8 规定的数字签名在自动识别服务中的正常使用。 本文件旨在提供一种开放且互操作的方法，在线性离线使用情况下，用于在自动识别服务和数据载体之间读取数据、验证数据原始性和完整性。 [外文原描述]： This document is an ISO/IEC 9594‑8 [public key infrastructure (PKI) digital signatures and certificates] application specification for automated identification services. It specifies a method whereby data stored within a barcode and/or RFID tag are structured, encoded and digitally signed. ISO/IEC 9594‑8 is used to provide a standard method for key and data description management and distribution. The data capacity and/or data transfer capacity of automated identification data carriers are restricted. This restricts the normal use of a digital signature as specified in ISO/IEC 9594‑8 within automated identification services. The purpose of this document is to provide an open and interoperable method, between automated identification services and data carriers, to read data, verify data originality and data integrity in an offline use case. This document specifies — the meta data structure, the DigSig, which contains the digital signature and encoded structured data, — the public key certificate parameter and extension use, the DigSig certificate, which contains the certified associated public key, the structured data description, the read methods, and private containers, — the method to specify, read, describe, sign, verify, encode, and decode the structured data, the DigSig Data Description, — the DigSig EncoderGenerator which generates the relevant asymmetric key pairs, keeps the private key secret, and generates the DigSigs, and — the DigSig DecoderVerifier which, by using to the DigSig certificate, reads the DigSig from the set of data carriers, verifies the DigSig and extracts the structured data from the DigSig. This document does not specify — cryptographic methods, or — key management methods.