This part of GB/T 16649 stipulates: - the security protocol used in the card; - the security message exchange extension; - the mapping of the card's security function/security mechanism on the service, including the description of the security mechanism in the card; - data elements supported by security; - use of algorithms implemented on the card (algorithms themselves are not described in detail); - use of certificates; - security-related commands. This section does not cover internal implementation within the card and/or outside. The choice and conditions of use of the cryptographic mechanism may affect the output of the card. Evaluation of the suitability of algorithms and protocols is outside the scope of this standard. It is not mandatory for a card to support all commands described in this section or to support all options of a command.
GB/T 16649.8-2002 history
2002GB/T 16649.8-2002 Identification cards-Intergrated circuit(s) cards with contacts--Part 8: Security related interindustry commands