Overview
ISO/IEC 19823-16:2026 specifies conformance test methods for the security service crypto suite ECDSA-ECDH, as defined in ISO/IEC 29167-16. This part of the ISO/IEC 19823 series is critical for ensuring that radio frequency identification (RFID) devices-including tags and interrogators based on the ISO/IEC 18000 series-properly implement the ECDSA (Elliptic Curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman) cryptographic functions used in secure RFID applications.
By providing standardized test methods for all mandatory and applicable optional features, this document supports reliable and interoperable deployment of secure RFID technologies across industries. Its guidance is relevant both for product developers seeking certification and for conformance test laboratories evaluating RFID devices.
Key Topics
- Scope and Applicability: The standard applies to RFID tags and interrogators that utilize the ECDSA-ECDH crypto suite according to ISO/IEC 29167-16 and operate within the parameters set by the ISO/IEC 18000 series.
- Testing Approaches:
- By Demonstration: Practical laboratory testing under controlled conditions to verify operational conformance.
- By Design: Evaluation of submitted design parameters or theoretical analysis to ensure protocol and security compliance.
- Test Environment:
- Controlled temperature and humidity range (23 °C ± 3 °C, 40%-60% RH)
- Precise measurement uncertainty and default tolerance values
- Clearly defined test setups for tags and interrogators, including suitable equipment such as spectrum analyzers and signal generators.
- Conformance Criteria:
- Verification of protocol parameters, nominal values, and tolerances
- Test maps covering both mandatory and optional crypto suite features such as mutual authentication, secure communication, and certificate validation.
- Reporting and Documentation:
- Test reports must document test setup, equipment, reference points, and environmental conditions.
Applications
ISO/IEC 19823-16:2026 is essential for:
- RFID Product Manufacturers: Ensures that products implementing the ECDSA-ECDH crypto suite conform to international security and interoperability requirements.
- Conformance Test Laboratories: Provides standardized methods that support consistent, repeatable testing processes in line with ISO/IEC 17025 quality standards.
- Supply Chain Security: Strengthens the security of item management and automated identification systems by validating cryptographic authentication and secure communication features in RFID devices.
- Certification and Interoperability: Enables reliable certification processes and promotes global interoperability within secure RFID infrastructure by adhering to ISO frameworks.
- Technology Integrators and Solution Providers: Allows assurance that deployed RFID tags and readers support robust cryptographic services, addressing growing concerns about privacy, data integrity, and system security.
Related Standards
- ISO/IEC 29167-16: Defines the ECDSA-ECDH crypto suite and its use for security services in RFID air interface communications.
- ISO/IEC 18000 Series: Specifies parameters for radio frequency identification across multiple frequency bands and applications.
- ISO/IEC 18047 Series: Details conformance test methods for RFID device air interfaces.
- ISO/IEC 17025: Sets out general requirements for the competence of testing and calibration laboratories.
- ISO/IEC 19762: Provides vocabulary for automatic identification and data capture (AIDC) techniques.
Adhering to ISO/IEC 19823-16:2026 helps organizations achieve compliance, strengthen security in RFID deployments, and maintain global interoperability for cryptographically protected RFID systems using ECDSA and ECDH. For more information and official documentation, visit www.iso.org.