ISO/IEC 9798-4:1999 PDF

Information technology — Security techniques — Entity authentication — Part 4: Mechanisms using a cryptographic check function

Название (английский):

ISO/IEC 9798-4:1999

Information technology — Security techniques — Entity authentication — Part 4: Mechanisms using a cryptographic check function

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 7
Дата публикации:: 16 декабря 1999 г.
Издание:: ISO/IEC IS 9798 edition 2 version 1
ICS:: 35.030

Тип поставки:

Full version105 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:2 раб. дн. (перевод)

Цена:105 €

Описание (английский):

This part of ISO/IEC 9798 specifies entity authentication mechanisms using a cryptographic check function. Two mechanisms are concerned with the authentication of a single entity (unilateral authentication), while the remaining are mechanisms for mutual authentication of two entities. The mechanisms specified in this part of ISO/IEC 9798 use time variant parameters such as time stamps, sequence numbers, or random numbers, to prevent valid authentication information from being accepted at a later time or more than once. If a time stamp or sequence number is used, one pass is needed for unilateral authentication, while two passes are needed to achieve mutual authentication. If a challenge and response method employing random numbers is used, two passes are needed for unilateral authentication, while three passes are required to achieve mutual authentication. Examples of cryptographic check functions are given in ISO/IEC 9797.

Технические детали

Технический комитет: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
SKU: ISO/IEC 9798-4:1999

Abstract

Overview

ISO/IEC 9798-4:1999 - "Information technology - Security techniques - Entity authentication - Part 4: Mechanisms using a cryptographic check function" specifies standardized mechanisms for proving the identity of an entity by computing a cryptographic check value (e.g., a MAC) over selected data with a shared secret key. The part covers both unilateral and mutual authentication and requires use of time‑variant parameters (time stamps, sequence numbers, or random numbers) to prevent replay and reuse of valid authentication tokens.

Key topics and requirements

Authentication types
- Unilateral authentication: one entity (claimant) authenticated to a verifier.
  - With time stamps/sequence numbers: one pass.
  - With challenge/response (random numbers): two passes.
- Mutual authentication: both entities authenticate each other.
  - With time stamps/sequence numbers: two passes.
  - With challenge/response: three passes.
Cryptographic check function
- The claimant demonstrates knowledge of a secret authentication key by producing a check value f(X) using that key. Examples of check functions are referenced in ISO/IEC 9797 (Message Authentication Codes).
Time‑variant parameters
- Use of time stamps, sequence numbers, or random nonces ensures timeliness/uniqueness and prevents replay attacks; selection depends on environment and device capabilities.
Security requirements
- Shared secret key must be established before authentication; key distribution is out of scope.
- Key secrecy and appropriate key length, check‑value length, and function choice determine strength.
Optional elements
- Text fields and distinguishing identifiers (A/B) can be included to bind messages and mitigate reflection/replay attacks; their use depends on application needs.

Applications and who uses it

Useful for protocol designers, security architects, and implementers of authentication systems in:
- Banking and payment systems (card-to-terminal authentication)
- Network authentication (VPNs, secure sessions)
- Smart cards and embedded devices (IoT device authentication)
- Telecom authentication and subscriber verification
Applies where lightweight symmetric-key verification (MAC-style check functions) is preferred over digital signatures, and where protection against replay/reflection is required.

Related standards

ISO/IEC 9797 - Message Authentication Codes (MACs) - examples of suitable cryptographic check functions.
ISO/IEC 9798-1 - Entity authentication - General (definitions and notation).
Other parts of ISO/IEC 9798 (Parts 2, 3, 5) describe alternative mechanisms (symmetric encipherment, digital signatures, zero-knowledge).

ISO/IEC 9798-4:1999 is a practical specification for secure, time‑aware symmetric authentication mechanisms and is commonly referenced when designing protocols that require efficient, replay-resistant entity authentication.

Overview

Key topics and requirements

Authentication types
- Unilateral authentication: one entity (claimant) authenticated to a verifier.
  - With time stamps/sequence numbers: one pass.
  - With challenge/response (random numbers): two passes.
- Mutual authentication: both entities authenticate each other.
  - With time stamps/sequence numbers: two passes.
  - With challenge/response: three passes.
Cryptographic check function
- The claimant demonstrates knowledge of a secret authentication key by producing a check value f(X) using that key. Examples of check functions are referenced in ISO/IEC 9797 (Message Authentication Codes).
Time‑variant parameters
- Use of time stamps, sequence numbers, or random nonces ensures timeliness/uniqueness and prevents replay attacks; selection depends on environment and device capabilities.
Security requirements
- Shared secret key must be established before authentication; key distribution is out of scope.
- Key secrecy and appropriate key length, check‑value length, and function choice determine strength.
Optional elements
- Text fields and distinguishing identifiers (A/B) can be included to bind messages and mitigate reflection/replay attacks; their use depends on application needs.

Applications and who uses it

Useful for protocol designers, security architects, and implementers of authentication systems in:
- Banking and payment systems (card-to-terminal authentication)
- Network authentication (VPNs, secure sessions)
- Smart cards and embedded devices (IoT device authentication)
- Telecom authentication and subscriber verification
Applies where lightweight symmetric-key verification (MAC-style check functions) is preferred over digital signatures, and where protection against replay/reflection is required.

Related standards

ISO/IEC 9797 - Message Authentication Codes (MACs) - examples of suitable cryptographic check functions.
ISO/IEC 9798-1 - Entity authentication - General (definitions and notation).
Other parts of ISO/IEC 9798 (Parts 2, 3, 5) describe alternative mechanisms (symmetric encipherment, digital signatures, zero-knowledge).

ISO/IEC 9798-4:1999 PDF

Технические детали

Abstract

Overview

Key topics and requirements

Applications and who uses it

Related standards

Похожие стандарты

Abstract

Overview

Key topics and requirements

Applications and who uses it

Related standards

Похожие стандарты

Information technology — Security techniques — Message Authentication Codes (MACs) — Part 1: Mechanisms using…

Information technology — Security techniques — Entity authentication — Part 1: General

Information technology — Security techniques — Entity authentication — Part 4: Mechanisms using a cryptograph…