ISO/DIS 37180

Smart community infrastructures -- Guidance on smart transportation with QR code identification and authentification in transportation and its related or additional services

Titre manque

Standards Content (sample)

DRAFT INTERNATIONAL STANDARD
ISO/DIS 37180
ISO/TC 268/SC 1 Secretariat: JISC
Voting begins on: Voting terminates on:
2020-10-27 2021-01-19
Smart community infrastructures — Guidance on
smart transportation with QR code identification and
authentification in transportation and its related or
additional services
ICS: 03.220.01; 13.020.20; 35.040.50
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
This document is circulated as received from the committee secretariat.
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/DIS 37180:2020(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
PROVIDE SUPPORTING DOCUMENTATION. ISO 2020
---------------------- Page: 1 ----------------------
ISO/DIS 37180:2020(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2020

All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may

be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting

on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address

below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2020 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/DIS 37180:2020(E)
Contents Page

Foreword ..........................................................................................................................................................................................................................................v

Introduction ................................................................................................................................................................................................................................vi

1 Scope ................................................................................................................................................................................................................................. 1

2 Normative references ...................................................................................................................................................................................... 1

3 Terms and definitions ..................................................................................................................................................................................... 1

4 Concept of smart transportation with QR code identification and authentication ........................2

4.1 Background ................................................................................................................................................................................................ 2

4.2 Practical usefulness of QR codes ............................................................................................................................................. 2

4.3 Satisfaction of SDGs ............................................................................................................................................................................ 2

5 QR code identification and authentication-applicable transportation and its related

or additional services ...................................................................................................................................................................................... 2

5.1 General ........................................................................................................................................................................................................... 2

5.2 Services to customers in public transportation ......................................................................................................... 3

5.3 Services to customers in private transportation ....................................................................................................... 3

5.4 Services to customers in inter-modal, carrier or line operational transportation for

public and private purposes ........................................................................................................................................................ 3

5.5 Business work by operators, administrators and facilities owners of public

transportation and its related or additional services ............................................................................................ 3

5.6 Business work by operators, administrators and facilities owners of private

transportation and its related or additional services ............................................................................................ 3

6 QR code identification, authentication and authorization in or for smart transportation ....3

6.1 General ........................................................................................................................................................................................................... 3

6.2 QR code identification ...................................................................................................................................................................... 4

6.3 QR code authentication ................................................................................................................................................................... 4

6.4 QR code authorization ...................................................................................................................................................................... 4

6.4.1 General...................................................................................................................................................................................... 4

6.4.2 Authorization processes ........................................................................................................................................... . 4

6.5 Other practically useful applications of QR codes in transportation and its related

or additional services ........................................................................................................................................................................ 5

6.5.1 General...................................................................................................................................................................................... 5

6.6 Application to data transfer validation .............................................................................................................................. 5

7 Security of smart transportation with QR code identification and authentication ........................6

7.1 General ........................................................................................................................................................................................................... 6

7.2 QR code identification and authentication security ............................................................................................... 6

7.3 QR code authorization security ................................................................................................................................................ 6

7.3.1 General...................................................................................................................................................................................... 6

7.3.2 Personal information collection and encryptions ............................................................................... 7

7.3.3 Security procedures ...................................................................................................................................................... 7

8 Organization and operation of smart transportation with QR code identification

and authentication ............................................................................................................................................................................................. 7

8.1 General ........................................................................................................................................................................................................... 7

8.2 Secure-trusted infrastructures for QR code identification and authentication .............................. 7

8.2.1 Credible service management modules ....................................................................................................... 7

8.2.2 Big data analysis centres ........................................................................................................................................... 7

8.2.3 Registration centres ...................................................................................................................................................... 8

8.2.4 Data transfer modules ................................................................................................................................................. 8

8.2.5 Terminal application modules ............................................................................................................................. 8

9 Quality maintenance of smart transportation with QR code identification and

authentication ......................................................................................................................................................................................................... 8

9.1 General ........................................................................................................................................................................................................... 8

9.2 Parameters to be observed ........................................................................................................................................................... 8

© ISO 2020 – All rights reserved iii
---------------------- Page: 3 ----------------------
ISO/DIS 37180:2020(E)

Bibliography .............................................................................................................................................................................................................................10

iv © ISO 2020 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/DIS 37180:2020(E)
Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards

bodies (ISO member bodies). The work of preparing International Standards is normally carried out

through ISO technical committees. Each member body interested in a subject for which a technical

committee has been established has the right to be represented on that committee. International

organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.

ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of

electrotechnical standardization.

International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2.

The main task of technical committees is to prepare International Standards. Draft International

Standards adopted by the technical committees are circulated to the member bodies for voting.

Publication as an International Standard requires approval by at least 75 % of the member bodies

casting a vote.

Attention is drawn to the possibility that some of the elements of this document may be the subject of

patent rights. ISO shall not be held responsible for identifying any or all such patent rights.

ISO was prepared by Technical Committee ISO/TC 268, , Subcommittee SC 1, .

This second/third/... edition cancels and replaces the first/second/... edition (), [clause(s) / subclause(s)

/ table(s) / figure(s) / annex(es)] of which [has / have] been technically revised.

© ISO 2020 – All rights reserved v
---------------------- Page: 5 ----------------------
ISO/DIS 37180:2020(E)
Introduction

Quick Response (or QR) codes are widely used worldwide due to their extremely large capacity for

data storage and data transfer instead of barcodes. In the transportation field, QR codes have been

used for over 20 years. However, their application is limited since the identification and authentication

procedure with QR codes in data transfer takes over one second. In cities, a ticket inspection gate

should communicate with 60 customers per minute for their ticket validation at rail stations. As the

number of people delayed due to ticket processing in a concourse increases, this results in more risk

leading to passenger injuries. A typical example is the metro in Bangkok, Thailand. The slow processing

rate of ticket inspection machines disturbs passenger flows in the station. The passengers are delayed

frequently at the gate due to the processing resulting in missed trains.

In the past, the security of QR codes was very limited, and so it was highly risky to use the QR code for

ticket value information retention. If the QR codes were falsely duplicated, the copies would work as a

valid ticket. Transportation operators were hesitant to apply QR codes in ticketing and used the code

only for specific purposes or particular situations. For example, a bus stop numbered ticket for fare

adjustment in bus services and seat reservation sold within one hour of train departure.

However, the lack of security features have been overcome by improving QR code identification and

authentication procedures through the use of dynamic encryption keys and their matching fields. These

processes aid in achieving fluidity enhancement, controllable anonymity, non-forgery, non-repeatable

data transfer and non-repudiation. QR codes are now effective tools to identify data senders and

recipients. Further, QR codes can be used to authenticate information contents and authorize personal

status, by completing the procedures safely and quickly. This advanced performance and security

cultivates improved transportation and its related or additional service fields. Thereby, ensuring that

the services are more beneficial for customers and assists service agents with more highly accurate

and functional informational data flow.

This guidance document describes QR code identification and authentication to be applied in such

services.

In the development of this document, ISO Guide 82 has been taken into account in addressing

sustainability issues.
vi © ISO 2020 – All rights reserved
---------------------- Page: 6 ----------------------
DRAFT INTERNATIONAL STANDARD ISO/DIS 37180:2020(E)
Smart community infrastructures — Guidance on
smart transportation with QR code identification and
authentification in transportation and its related or
additional services
1 Scope

This document provides guidance on transportation and its related or additional services using quick

response (QR) codes for identification and authentication in data transfer, in order to make their

services both convenient and advantageous for customers and service agents while protecting them

from cheating and illegal action in data transfer.
2 Normative references
There are no normative references in this document.
— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at http:// www .electropedia .org/
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.

ISO and IEC maintain terminological databases for use in standardization at the following addresses:

— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at http:// www .electropedia .org/
3.1
QR code in or for smart transportation

quick response (QR) code that is to be used for identification and authentication in data transfer in or

for smart transportation in a general meaning defined by 3.7 in ISO 37154

Note 1 to entry: Smart transportation in a general meaning is transportation that provides smart-transportation

solutions to cities.

Note 2 to entry: In smart transportation in a general meaning, data is usually transferred between customers

and service agents in transportation and its related or additional services and between the agents.

Note 3 to entry: 3 QR codes designated by ISO/IEC 18004 should be used in smart transportation while other QR

codes not standardized as ISO still technically work for smart transportation, since the user of such QR codes

would be charged on the use.
3.2
QR code identification

process to identify data senders and recipients with QR codes when transferring data in transportation

and its related or additional services
3.3
QR code authentication

process to authenticate information contents with QR codes when transferring data in transportation

and its related or additional services
© ISO 2020 – All rights reserved 1
---------------------- Page: 7 ----------------------
ISO/DIS 37180:2020(E)
3.4
QR code authorization

process to authorize personal status by QR code identification and authentication in transportation and

its related or additional services
3.5
service agent

person working for operators, administrators and facilities owners in transportation and its related or

additional services
4 Concept of smart transportation with QR code identification and
authentication
4.1 Background

In transportation and its related or additional services, data should be transferred safely and quickly

between customers and service agents for specific purposes such as fare or fee payment and receipts,

seat, bed and room reservations and confirmation as well as delivery item and freight tracking. In

this case, data sender and recipient identification and information content authentication should be

completed instantaneously, where identification confirms who is who and authentication recognizes

what is whose, what is to, from, for or with whom and how what does. Identification and authentication

work to make sure of right persons and right information, respectively. For example, it can be checked

with a QR code printed on a ticket that the ticket is valid, held by a qualified person and fixed for the

fare and fee payment to transportation operators.
4.2 Practical usefulness of QR codes

QR codes have good readability helpful in identifying persons, authenticating information contents and

retaining multiple types of information.

QR codes are applied by printing directly on paper or other materials such as plastic tickets and pasting

a sticker printed therewith anywhere convenient for services (e.g. ticket vending machine bodies,

transportation vehicle fee boxes, cashier counters) for identification of data senders and recipients

(e.g. customers, service agents) and authentication of information contents (e.g. reservations, money

transaction, enquiries). As almost all customers hold smart phones that are normally equipped with

digital camera functions, smart phones work effectively as a QG code reader and indicator. PC displays

are also useful QR code indication devices, which show homepages linked to official websites for

information enquiries. QR codes protect customers, if used with identification and authentication, f

...