ISO INTERNATIONAL STANDARD 18185-4 First edition 2007-05-01 Freight containers Electronic seals - Part 4: Data protection Conteneurs pour le transport de marchandises - Scelles électroniques Partie 4: Protection des données Reference number ISO 18185-4:2007(E) @ ISO 2007 by IHS under lic itted without license from IHS Not for Resale ISO 18185-4:2007(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by IsO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below COPYRIGHTPROTECTEDDOCUMENT @ISO2007 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, IsO's member body in the country of the requester. ISO copyright office Case postale 56 . CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail [email protected] Web www.iso.org Published in Switzerland @ ISo 2007 - All rights reserved ed without license from IHS Not for Resale ISO 18185-4:2007(E) Contents Page Foreword. Introduction 1 Scope 2 Normative references 3 Terms, definitions and abbreviated terms 4 Data protection. 4.1 General. 4.2 Confidential information 4.3 Public information . 4.4 Fixed data .... 4.5 Variable data... 5 Device authentication... 5.1 5.2 Physical authentication. 5.3 Electronic authentication .... 6 Conformance Annex A (normative) Electronic seal manufacturers' security-related practices.. Bibliography 10 Copyright internatina organizaio far standardizalion ghts reserved ii nse from IHS Not for Resale ISO 18185-4:2007(E) Foreword IsO (the International Organization for Standardization) is a worldwide federation of national standards bodies technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with isO, also take part in the work. so collaborates closely with the InternationalElectrotechnicalCommission(lEC)onallmattersofelectrotechnicalstandardization. International Standards are drafted in accordance with the rules given in the ISO/lEC Directives, Part 2. The main task of technical committees is to prepare International Standards. Draft International Standards adopted by the technical committees are circulated to the member bodies for voting. Publication as an International Standard requires approval by at least 75 % of the member bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. IsO shall not be held responsible for identifying any or all such patent rights. ISO 18185-4 was prepared by Technical Committee ISO/TC 104, Freight containers, Subcommittee SC 4, ldentification and communication. ISO 18185 consists of the following parts, under the general title Freight containers — Electronic seals: Part 1:Communication protocol Part 2: Application requirements Part 3:Environmentalcharacteristics Part 4: Data protection Part 5: Physical layer @ ISO 2007 - All rights reserved ional Organization for Standardizatior ISO 18185-4:2007(E) Introduction This part of ISO 18185 was prepared by ISO Technical Committee 104/Subcommittee 4/Working Group 2, usingthedraftingconventionsofISO/lECDirectives,Part2. In early 2005, an extensive Vulnerability Assessment took pla