ISO IEC 24727-2-2008 PDF

Full title and description

ISO/IEC 24727-2:2008 — Identification cards — Integrated circuit card programming interfaces — Part 2: Generic card interface. This part defines a generic card interface for integrated circuit (smart) cards presented as command–response pairs and a card/application capability description mechanism to support interoperability across card implementations.

Abstract

Part 2 of ISO/IEC 24727 specifies the generic card-level interface used by the ISO/IEC 24727 framework. It describes command/response semantics intended to enable interoperable access to card services and the means to describe and determine card and application capabilities. The document is based on relevant ISO/IEC 7816 parts and is intended to sit within the multi‑part 24727 programming‑interface family.

General information

• Status: Published (International Standard, confirmed stage 90.93).
• Publication date: October 2008 (Edition 1, 2008-10).
• Publisher: ISO / IEC (ISO/IEC JTC 1/SC 17 responsible committee).
• ICS / categories: 35.240.15 (Identification cards; smart cards interfaces).
• Edition / version: Edition 1 (2008).
• Number of pages: 35.

These bibliographic and lifecycle details are taken from the ISO catalogue entry and national standards catalogues. The standard was later issued with an amendment (Amd 1:2014) and the ISO record shows confirmation status following routine five‑year reviews.

Scope

ISO/IEC 24727-2:2008 defines a generic, card‑side interface intended to provide a common command/response model and capability description for integrated circuit cards used for identification, authentication and signature services. The scope covers the syntactic and semantic description of commands, expected responses and mechanisms for discovering card and application capabilities; it does not specify transport layers or host APIs beyond what is required to ensure card-level interoperability. The part is intended to work in conjunction with other parts of ISO/IEC 24727 (architecture, application interface, API administration, testing and registration procedures).

Key topics and requirements

• Definition of a generic card interface expressed as command–response pairs for interoperability.
• Card and application capability description and mechanisms for capability determination.
• Alignment and mapping to ISO/IEC 7816 family elements (notably 7816‑4, 7816‑8, 7816‑9 and 7816‑15) to ensure compatibility with existing smart‑card APDU conventions.
• Normative structures and semantics required for card behaviour within the 24727 layered framework.
• Support for enabling higher‑level application interfaces and API administration defined in other parts of ISO/IEC 24727.

Typical use and users

Implementers of smart‑card operating systems, card middleware vendors, system integrators for identity/authentication/signature solutions, certification bodies that test card interoperability, and national/industry standards bodies. Typical uses include enabling interoperable access to card services across different card products, supporting identity management deployments (e‑ID, e‑government, payment, physical access) and defining card behaviour required by higher‑level application interfaces.

Related standards

ISO/IEC 24727-2 is part of the ISO/IEC 24727 series (parts covering Architecture; Application Interface; API administration; Testing; Registration authority procedures). It is explicitly based on elements of the ISO/IEC 7816 series (notably parts 4, 8, 9 and 15) which define APDU format, file structures and other card conventions. Organizations implementing 24727 will commonly reference the 7816 family and the other 24727 parts for a complete interoperability solution.

Keywords

smart card, integrated circuit card, generic card interface, APDU, interoperability, identity card, ISO/IEC 24727, ISO/IEC 7816, card capability description, command–response.

FAQ

Q: What is this standard?

A: ISO/IEC 24727-2:2008 is Part 2 of the ISO/IEC 24727 series; it specifies a generic smart‑card interface (command/response and capability description) to support interoperability within the 24727 programming‑interface framework.

Q: What does it cover?

A: It covers the card‑side interface definition: the structure and semantics of commands and responses, and mechanisms to describe and determine card and application capabilities. It does not replace transport or host API specifications provided in other documents.

Q: Who typically uses it?

A: Smart‑card OS developers, middleware vendors, system integrators for identity/authentication systems, test laboratories and standards bodies concerned with card interoperability and lifecycle interfaces.

Q: Is it current or superseded?

A: The 2008 edition (Edition 1) remains the published Part 2. The ISO catalogue shows the standard as published and later confirmed during routine reviews; an amendment (Amd 1:2014) exists. Users should check the ISO catalogue or their national body for the latest confirmation/amendment status before procurement.

Q: Is it part of a series?

A: Yes — ISO/IEC 24727 is a multi‑part standard (Architecture, Generic card interface, Application interface, API administration, Testing, Registration procedures). Part 2 is the Generic card interface within that series.

Q: What are the key keywords?

A: smart card; integrated circuit card; generic card interface; APDU; interoperability; capability description; ISO/IEC 24727; ISO/IEC 7816.