X9 X9.97-1-2009 (R2017)
Financial services - Secure Cryptographic Devices (Retail) - Part 1: Concepts, Requirements and Evaluation Methods
standard by Accredited Standards Committee X9 Incorporated, 05/22/2009
Most Recent
Language:
-
- Available Formats
- Availability
- Priced From ( in USD )
-
- Immediate download
- $140.00
- Add to Cart
-
- Printed Edition
- Ships in 1-2 business days
- $140.00
- Add to Cart
Customers Who Bought This Also Bought
-
ISO 11568-5:1998
Priced From $61.00 -
ISO 11568-3:1994
Priced From $45.00 -
ISO 16609:2012
Priced From $73.00 -
ISO 11568-1:2005
Priced From $111.00
About This Item
Full Description
ANSI X9.97-1-2009 (R2017) specifies the requirements for Secure Cryptographic Devices which incorporate the cryptographic processes defined in ISO 9564, ISO 16609 and ISO 11568.
This part of ANS X9.97 has two primary purposes:
1) to state the requirements concerning both the operational characteristics of SCDs and the management of such devices throughout all stages of their life cycle,
2) to standardize the methodology for verifying compliance with those requirements.
Appropriate device characteristics are necessary to ensure that the device has the proper operational capabilities and provides adequate protection for the data it contains. Appropriate device management is necessary to ensure that the device is legitimate, that it has not been modified in an unauthorized manner, e.g., by "bugging", and that any sensitive data placed within the device (e.g., cryptographic keys) has not been subject to disclosure or change.
This part of ANS X9.97 has two primary purposes:
1) to state the requirements concerning both the operational characteristics of SCDs and the management of such devices throughout all stages of their life cycle,
2) to standardize the methodology for verifying compliance with those requirements.
Appropriate device characteristics are necessary to ensure that the device has the proper operational capabilities and provides adequate protection for the data it contains. Appropriate device management is necessary to ensure that the device is legitimate, that it has not been modified in an unauthorized manner, e.g., by "bugging", and that any sensitive data placed within the device (e.g., cryptographic keys) has not been subject to disclosure or change.
