This part of EN 726 specifies :
- the minimum security requirements for a Security Module (SM) ;
- the general card related functions embedded in the SM - terminal protocols including minimum
data exchange ; The data elements and cryptographic processing described in annex A for the
case where the SM is an ICC should be supported if the SM is not an ICC or the configuration
of the system, eng. where the SM handles more than one terminalhser card. Configurations
where the SM handles more than one terminalluser card are not fully specified in this standard.
Further mechanisms may be required to enable these configurations ;
- the necessary security services and mechanisms to provide application and cryptographic
security information for the processing of telecomrnunication transactions ;
considering several types of SMs at different locations in the system and different system
configurations.
This part of EN 726 standard allows interaction between the lntegrated Circuit Card (IC card) and
the SM via the terminal in a way that may be functionally transparent to the terminal and possibly
also the network(s). This provides the flexibility to use different techniques, commands and
message formats at the terminal - SM interface.
This part of EN 726 supports IC cards with payment applications following EN 726-5 and all card
applications following clauses 4 to 7 of this part of the standard. This part of EN 726 supports IC
cards following EN 726-3:1994. Other telecommunication cards which are not in accordance with
EN 726, e.g. simple memory cards, may also be supported by the SM described in this part.
Dieser Teil der EN 726 legt die Mindest-Sicherheitsanforderungen für ein Sicherheitsmodul (SM), die allgemeinen kartenbezogenen Funktionen, die in das SM integriert sind, Endgeräteprotokolle einschließlich einem minimalen Datenaustausch, teilweise Datenelemente und die kryptographische Verarbeitung sowie die notwendigen Sicherheitsdienste und -mechanismen zur Bereitstellung von anwendungsbezogenen und kryptographischen Sicherheitsinformationen für die Verarbeitung der Telekommunikation fest.