इंटरनेट मानक Disclosure to Promote the Right To Information Whereas the Parliament of India has set out to provide a practical regime of right to information for citizens to secure access to information under the control of public authorities, in order to promote transparency and accountability in the working of every public authority, and whereas the attached publication of the Bureau of Indian Standards is of particular interest to the public, particularly disadvantaged communities and those engaged in the pursuit of education and knowledge, the attached public safety standard is made available to promote the timely dissemination of this information in an accurate manner to the public. “जान1 का अ+धकार, जी1 का अ+धकार” “प0रा1 को छोड न’ 5 तरफ” Mazdoor Kisan Shakti Sangathan Jawaharlal Nehru “The Right to Information, The Right to Live” “Step Out From the Old to the New” IS 14173-2 (2012): Identification Cards - Identification of Issuers, Part 2: Application and Registration Procedures [LITD 16: Computer Hardware, Peripherals and Identification Cards] “!ान $ एक न’ भारत का +नम-ण” Satyanarayan Gangaram Pitroda ““IInnvveenntt aa NNeeww IInnddiiaa UUssiinngg KKnnoowwlleeddggee”” “!ान एक ऐसा खजाना > जो कभी च0राया नहB जा सकता हहहहै””ै” Bhartṛhari—Nītiśatakam “Knowledge is such a treasure which cannot be stolen” IS 14173 (Part 2) : 2012 ISO/IEC 7812-2 : 2007 Hkkjrh; ekud igpku i=k tkjhdrkZ dh igpku — Hkkx 2 vkosnu vkSj iathdj.k çfØ;k (nwljk iqujh{k.k) Indian Standard IDENTIFICATION CARDS — IDENTIFICATION OF ISSUERS PART 2 APPLICATION AND REGISTRATION PROCEDURES ( Second Revision ) ICS 35.240.15 © BIS 2012 B U R E A U O F I N D I A N S T A N D A R D S MANAK BHAVAN, 9 BAHADUR SHAH ZAFAR MARG NEW DELHI 110002 October 2012 Price Group 9 Computer Hardware, Peripherals and Identification Cards Sectional Committee, LITD16 NATIONAL FOREWORD This Indian Standard (Part 2) (Second Revision) which is identical with ISO/IEC 7812-2 : 2007 ‘Identification cards — Identification of issuers — Part 2: Application and registration procedures’ issued by the International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC) jointly was adopted by the Bureau of Indian Standards on the recommendations of the Computer Hardware, Peripherals and Identification Cards Sectional Committee and approval of the Electronics and Information Technology Division Council. This standard was originally published in 1994 which was identical to ISO/IEC 7812 : 1987. This standard was then revised and published in two parts in 2003 to align it with ISO/IEC 7812-1 : 2000 and ISO/IEC 7812-2 : 2000. This standard is now again being revised to align it with the latest version of ISO/IEC 7812-2 : 2007. The other part of this standard is: Part 1 Numbering system The text of ISO/IEC Standard has been approved as suitable for publication as an Indian Standard without deviations. Certain conventions are, however, not identical to those used in Indian Standards. Attention is particularly drawn to the following: “Wherever the words ‘International Standard’ appear referring to this standard, they should be read as ‘Indian Standard’.” In this adopted standard, reference appear to the following International Standard for which Indian Standard also exists. The corresponding Indian Standard which is to be substituted in its place is listed below along with its degree of equivalence for the edition indicated: International Standard Corresponding Indian Standard Degree of Equivalence ISO/IEC 7812-1 : 2006 Identification IS 14173 (Part 1) : 2012 Identification Identical cards — Identification of issuers — cards — Identification of issuers: Part 1: Numbering system Part 1 Numbering system (second revision) IS 14173 (Part 2) : 2012 ISO/IEC 7812-2 : 2007 Indian Standard IDENTIFICATION CARDS — IDENTIFICATION OF ISSUERS PART 2 APPLICATION AND REGISTRATION PROCEDURES ( Second Revision ) 1 Scope This part of ISO/IEC 7812 specifies the application and registration procedures for Issuer Identification Numbers (IINs) issued in accordance with ISO/IEC 7812-1. ISO/IEC 7812-1 specifies a numbering system for the identification of issuers of cards that require an IIN to operate in international, interindustry and/or intra-industry interchange. 2 Normative references The following referenced document is indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 7812-1, Identification cards — Identification of issuers — Part 1: Numbering system 3 Terms and definitions For the purposes of this document, the terms and definitions given in ISO/IEC 7812-1 and the following apply. 3.1 administrative blockholder body/business entity that is assigned a block of Issuer Identification Numbers (IINs) for re-assignment to card issuing organizations within its specific geographic or industry sector area of jurisdiction NOTE These IINs are assigned in accordance with the procedures established herein and under legal agreement with the Registration Authority. 3.2 block of IINs reservation in the ISO Register of Card Issuer Identification Numbers of a series of two or more IINs for assignment by an administrative or card scheme blockholder 3.3 card acceptor party accepting the identification card for the purpose of presenting transaction data to an acquirer 3.4 card scheme blockholder body/business entity representing a group of card issuers, one purpose of which is to facilitate the issuance and acceptance of the cards of that group NOTE Interchange among the card scheme members is governed by a set of operating procedures. 1 IS 14173 (Part 2) : 2012 ISO/IEC 7812-2 : 2007 3.5 Sponsoring Authority body authorized by the Sub-Committee responsible for administering an ISO numbering system, (in this case ISO/IEC JTC 1/SC 17) to receive, process and approve applications for IINs submitted in accordance with ISO/IEC 7812-1 4 Application and registration procedures 4.1 Application procedure for assignment of a single IIN An applicant shall apply to its national standards body, or its national body's designated Sponsoring Authority for the assignment of a single IIN using the form shown in Annex A. In the absence of a national standards body, or designated Sponsoring Authority, the application should be sent to the secretariat of the ISO/IEC technical body responsible for this International Standard. Application forms are also available, on request from the Registration Authority, the secretariat of the Registration Management Group (RMG) and the secretariat of ISO/IEC JTC 1/SC 17. The national standards body or the secretariat of ISO/IEC JTC 1/SC 17 then acts as the “Sponsoring Authority” (see Clause 7) with respect to the application. 4.2 Application procedure for approval to become an authorized blockholder 4.2.1 Types of blockholders There are two types of blockholders, administrative blockholders and card scheme blockholders. Administrative blockholders (see 3.1) are assigned a block of IINs, following approval by the RMG, for re-assignment to organizations that fall within their specific industry or geographic area of jurisdiction. Once assigned, the IIN belongs to the organization unless it specifically agrees to relinquish the IIN because it is no longer used by them. The Registration Authority fee applies to each IIN assigned from the block. Card scheme blockholders (see 3.4) represent a group of card issuers. These blockholders are assigned a block of IINs, following approval by the RMG, for assignment to the members of that particular card scheme. If a card issuer relinquishes membership of that scheme the IIN reverts back to the blockholder and use of it by the organization must cease. The Registration Authority fee applies to each IIN assigned from the block. 4.2.2 Application procedure Where the applicant is applying for a block of IINs either as an administrative blockholder (see 3.1), or as a card scheme blockholder (see 3.4), the applicant shall complete a Blockholder Application Form (see Annex E) and provide the following supplementary information as justification: a) whether the application is to become an administrative blockholder or a card scheme blockholder; b) the reason why card issuers must receive IINs from a blockholder, rather than each card issuer applying individually to the Registration Authority for an IIN; c) description of the nature of the service that the applicant's organization is planning to provide; d) whether the proposed blockholder will act as an agent for issuers legally associated with it, but each issuer is a separate corporate legal entity; e) details of any future proposed plans, including where relevant the following: 1) estimated number of cards issuers by country; 2) timing plans, (i.e. estimated date for allocation of all IINs in the proposed block); f) whether card acceptors can access all the card issuers in the card scheme, through an acquiring link; 2 IS 14173 (Part 2) : 2012 ISO/IEC 7812-2 : 2007 g) whether the service provided to the issuers extends beyond networking, i.e. communications switching, and if so in what way; h) any common aspects of services offered by card issuers within a proposed card scheme. The RMG may request additional information where further clarification is needed. 4.3 Criteria for approval and rejection of applications 4.3.1 Criteria for approval of an application for a single IIN Applications for a single IIN shall meet all the criteria for approval below and shall not comply with any of the criteria for rejection in 4.3.2. The criteria for approval are: a) the applicant applying for a single IIN shall not already have an IIN assigned to it in its own right (outside of any card scheme); b) the IIN shall be for immediate use, preferably within 12 months of the date of issue of the IIN; c) the card being issued shall be for use in an interchange environment (see ISO/IEC 7812-1); d) the applicant shall be a single corporate entity operating under a specific legislative regulation. Where cards are for use solely within the country of issue and/or there is no interchange, card issuers shall contact their national standards body for information on the availability of a national numbering system (see ISO/IEC 7812-1). 4.3.2 Criteria for rejection of an application for a single IIN An application for a single IIN shall be rejected by the Sponsoring Authority or the RMG when any one of the following conditions exist: a) the applicant is not a card issuer; b) the applicant has previously been assigned an IIN in its own right (outside of its membership of any card scheme) that it is still using; c) the cards issued by the applicant would not be used in an international, interindustry and/or intra-industry interchange environment; d) the IIN will be used to identify or differentiate between products, services, or technologies (i.e. including but not limited to integrated circuit cards), or solely to facilitate routing, or to identify geographic location; e) the IIN will be used to identify or differentiate between branches or subsidiaries within the applicant's organization (i.e. these branches or subsidiaries are not separate corporate entities); f) the applicant has requested a specific IIN or the reservation of a specific IIN that is outside the scope of this part of ISO/IEC 7812; g) no card will be issued for immediate use, e.g. within 12 months from the date of issue of an IIN. Where special circumstances exist, the Sponsoring Authority may approve an application for assignment of a specific IIN and forward the application to the Registration Authority for assignment of the IIN. All such requests shall be reported by the Sponsoring Authority to the RMG. 3 IS 14173 (Part 2) : 2012 ISO/IEC 7812-2 : 2007 4.3.3 Criteria for approval as an authorized blockholder Applications to become an administrative or card scheme blockholder shall be approved only by the RMG, following sponsorship by a Sponsoring Authority. Requests to become a blockholder shall meet all the criteria for approval below and shall not comply with any of the criteria for rejection in 4.3.4. The criteria for approval are: a) the applicant has provided adequate supplementary information as justification to become an administrative or card scheme blockholder (see 4.2); b) the applicant shall request a block size that accommodates only a single IIN for each entity that it currently represents or may reasonably expect to represent in the future; c) the applicant agrees to assign a single IIN from the block to each card issuer and not to assign subsequent IINs to differentiate between products, services, technologies or geographic location; d) the applicant agrees to forward requests for second or additional IINs to the RMG for their decision; e) the applicant shall agree to sign a legal agreement with the Registration Authority (see letter of agreement on block assignments, annex B) and shall accept the responsibilities enumerated in the letter of agreement. 4.3.4 Criteria for rejection of an application to become an authorized blockholder An application to become an administrative or card scheme blockholder shall be rejected by the Sponsoring Authority or the RMG where any one of the following conditions exist: a) the applicant does not meet the criteria for approval as a blockholder in 4.3.3; b) the organizations represented by the applicant (i.e. the card issuers) will not issue cards for use in an international, interindustry and/or intra-industry interchange environment; c) the organizations represented by the applicant (i.e. the card issuers) will use the IINs to identify or differentiate between products, services, or technologies (i.e. including but not limited to integrated circuit cards), or to identify geographic locations; d) the blockholder will not be in a position to assign any IINs from the reserved block within 12 months from the date of issue of the block of IINs; e) the service provided to the issuers does not extend beyond networking, i.e., switching transactions. 5 Appeal process 5.1 Appeal bodies Where an application has been rejected by a Sponsoring Authority, the applicant may appeal to the secretariat of the RMG (see Clause 8). Where an application has been rejected by the RMG, the applicant may appeal to ISO/IEC JTC 1/SC 17 through the secretariat of ISO/IEC JTC 1/SC 17. Applicants may submit for appeal, applications that have been rejected by ISO/IEC JTC 1/SC 17, to the ISO Central Secretariat. Appeal against rejection of an application shall be lodged with the appropriate body within 90 days of the date of the letter of rejection. 4 IS 14173 (Part 2) : 2012 ISO/IEC 7812-2 : 2007 5.2 Information to be provided Where an application for either a single IIN or to become an authorized blockholder has been rejected by the Sponsoring Authority, the following information shall be provided by the applicant to the relevant appeal body in support of the appeal: a) statement of which rejection clause (see 4.3.2 or 4.3.4) is disputed and why the applicant believes that the rejected application fulfils the criteria for acceptance (see 4.3.1 or 4.3.3). The applicant must provide adequate supplementary information as justification for the approval of the request as submitted under the appeal. b) statement of special circumstances whereby a specific requirement of the rejected application can be met, but such requirement is outside the current procedures and criteria for acceptance outlined in this part of ISO/IEC 7812. 6 Responsibilities 6.1 Responsibilities of card issuing applicants The responsibilities of card issuing applicants shall be: a) to forward to its national standards body, or designated Sponsoring Authority, a completed application form, (see Annex A) together with the requisite fee. In the absence of a national standards body, or designated Sponsoring Authority, the application should be sent to the secretariat of the ISO/IEC technical body responsible for this International Standard. b) to retain the completed application form containing the IIN assigned to the applicant by the Registration Authority; c) to issue cards using the IIN assigned by the Registration Authority within a reasonable timeframe (defined as within 12 months of the date of assignment of the IIN); d) to fully comply with the numbering system as contained in ISO/IEC 7812-1 and this part of ISO/IEC 7812; e) to inform the Registration Authority of any change to the details provided on the original application form. 6.2 Responsibilities of authorized blockholders Applicants meeting the criteria in 4.3.3 and approved to become an administrative or card scheme blockholder shall enter into a written legal agreement with the Registration Authority (see Annex B). The responsibilities of blockholders shall be: a) to process applications for IINs from within its area of responsibility within 30 days of receipt of the application; b) to approve applications that meet the criteria in 4.3.1; c) to assign sequentially a single IIN, within 30 days of receipt of the request, from the reserved block to each card issuer whose application fulfils the criteria for acceptance in 4.3.1; d) to inform its constituents in writing, within 30 days of receipt of the application, as to the disposition of their application; e) to inform the Registration Authority in writing, within the agreed timeframe (see 10.3.3) of each IIN assignment; and to notify the Registration Authority regarding changes to the information as originally supplied. This information shall be provided either when such changes arise or as stipulated in the written agreement with the Registration Author ity. The Registration Authority shall stipulate the format for supplying the information (see 10.3.3); 5