Overview
ISO/IEC 19823-22:2026 is an international standard developed by the ISO and IEC technical committees for information technology. It specifies conformance test methods for the security service crypto suite SPECK, as defined in ISO/IEC 29167-22. This standard establishes how to test mandatory security functions in RFID Tags and Interrogators operating under the ISO/IEC 18000 series, particularly focusing on air interface communications in item management and automatic identification.
This document is part of a comprehensive framework for automatic identification and data capture (AIDC), ensuring secure cryptographic operations in RFID systems through standardized conformance assessment.
Key Topics
- Conformance Testing for SPECK: Defines test methods to verify that RFID Tags and Interrogators correctly implement the SPECK crypto suite as specified in ISO/IEC 29167-22.
- Scope and Applicability: Applies to devices compliant with the ISO/IEC 18000 series that have implemented the SPECK security suite, focusing on both mandatory and selected optional features.
- Testing Approaches: Utilizes both "by design" (review of technical documentation and analysis) and "by demonstration" (laboratory testing) verification methods.
- Test Patterns: Provides structured test cases corresponding to core protocol commands and authentication mechanisms, including Tag authentication, Interrogator authentication, mutual authentication, and secure communications.
- Interoperability and System Integrity: Ensures parameters such as protocol behavior, commands, replies, and error handling meet interoperability and functional standards.
Applications
Implementing ISO/IEC 19823-22:2026 is essential for:
- RFID System Vendors: To verify that their products conform to recognized international requirements for secure cryptographic communication, facilitating global market acceptance.
- Conformance Test Laboratories: To employ standardized and repeatable test methods aligned with ISO/IEC 17025 for reliable results.
- End Users in Supply Chain and Asset Management: To ensure secure item identification and tracking solutions that meet stringent security service requirements.
- Regulatory Compliance: To meet regional or international mandates for data privacy, authenticity, and tamper resistance in automated identification applications.
- Certification Bodies: As a basis for certification programs verifying SPECK implementation according to global standards.
- Interoperability Assurance: Ensuring diverse RFID devices from multiple vendors can securely communicate, preventing vulnerabilities or incompatibilities.
Related Standards
- ISO/IEC 29167-22: Specifies the technical details of the SPECK crypto suite for RFID systems’ security services.
- ISO/IEC 18000 Series: Defines foundational air interface protocols for RFID Tags and Interrogators across various frequencies and applications.
- ISO/IEC 18047-6: Outlines conformance testing for air interface communications at 860-960 MHz, a prerequisite before testing crypto suite conformance.
- ISO/IEC 17025: General competence requirements for testing and calibration laboratories performing the conformance assessments.
- ISO/IEC 19762: Provides essential vocabulary for AIDC technologies, ensuring consistent terminology across related standards.
ISO/IEC 19823-22:2026 delivers a robust, standardized approach for evaluating the conformance of SPECK-enabled RFID devices, ensuring high security, interoperability, and reliability in RFID-based security applications throughout various industries.