ISO/IEC FDIS 29128-3 Information security, cybersecurity and privacy protection — Verification of cryptographic protocols Part 3: Evaluation methods and activities for protocol implementation verification

This document gives guidance on evaluating the implementation of a cryptographic protocol based on the framework provided in ISO/IEC 15408-4. This document specifies the required methods and activities to assess the conformance of a cryptographic protocol implementation to its ISO/IEC 29128-2 based formally verified protocol model. This document specifies assurance metrics for the integrated evaluation of both the cryptographic protocol and its implementation.

ISO/IEC CD 29115.2Information security, cybersecurity and privacy protection – Entity authentication assurance framework

Will replace ISO/IEC 29115:2013

ISO/IEC 29115:2013 provides a framework for managing entity authentication assurance in a given context. In particular, it:

- specifies four levels of entity authentication assurance;

- specifies criteria and guidelines for achieving each of the four levels of entity authentication assurance;

- provides guidance for mapping other authentication assurance schemes to the four LoAs;

- provides guidance for exchanging the results of authentication that are based on the four LoAs; and

- provides guidance concerning controls that should be used to mitigate authentication threats.

The scope of JPEG XE is the creation of a standard for the representation of Events in an efficient way allowing interoperability between sensing, storage, and processing, targeting machine vision and other relevant applications. An Event is the message that signals the result of an observation at a precise point in time. It is typically triggered by a detected change in the physical world. Examples are contrast detection (CD) events from an event-based vision sensor or inertial measurement unit (IMU) readings.

This document describes common capabilities, requirements and a supporting information model for logging of events in AI systems. This document is designed to be used with a risk management system.

This document specifies:

• logical data structures for a Biometric System-on-Card (BSoC);
• enrolment procedures; and
• usage of commands and data structures defined in other International Standards for BSoC.

This document does not define requirements for:

• commands and data structures that apply to devices external to a BSoC;
• commands and data structures that apply to logical interfaces inside a BSoC.

This document provides methods and mechanisms to assess the reliability of an AI system. It describes the metrics of reliability and the procedure for reliability assessment from a statistical perspective

IEC JWG 16 SyC Smart Cities

City Information Modelling and Urban Digital Twins

1) To carry out a gap analysis on standards related to City Information Modelling and Urban Digital Twins;

2) To use the gap analysis to develop requirements for the standards needed for the implementation of City Information Modelling and Urban Digital Twins;

3) To develop those standards relating to City Information Modelling and Urban Digital Twins that are within its competence, including a reference architecture that takes into account the differing perspectives of City Information Modelling and Urban Digital Twins.



Note for information:

1 The Joint Working Group is not expected to develop many standards itself, but rather through a process of use case/case study collection, the development of an integrated reference architecture, and standards mapping, to identify the gaps in existing standards and support the relevant specialist technical committees to address these.

2 The reference architecture is intended to be coherent with ISO/IEC 42010 and the developing work on Smart Cities Reference Architecture (IEC 63205), the Digital Twin Reference Architecture (ISO/IEC 30188), the IoT Reference Architecture (ISO/IEC 30141 Ed2) and other relevant standards.

For security evaluation of biometric verification systems and biometric identification systems, this document is dedicated to security evaluation of presentation attack detection applying the ISO/IEC 15408 series. It provides recommendations and requirements to the developer and the evaluator for the supplementary activities on presentation attack detection specified in ISO/IEC 19989-1.

This document is applicable only to TOEs for single biometric characteristic type but for the selection of a characteristic from multiple characteristics.