Related Standards for ISO/IEC 7816-4
ISO 7816 Part 4: Interindustry Commands for Interchange
ISO 7816 part 4, section..1 2 3 4 5 6 7 8 9 annex.. A B C D E F
Standards you will need alongside ISO/IEC 7816-4
Part 4 does not stand alone. A working smart-card implementation almost always pulls in several neighbouring standards, and knowing which one owns which problem is half the battle. The list below is Ambimat’s practical map of the documents that surround Part 4, with links to the official ISO catalogue entries.
Within the ISO/IEC 7816 family
- ISO/IEC 7816-1 — physical characteristics of the card body. Needed when qualifying card stock or a manufacturing process.
- ISO/IEC 7816-2 — dimensions and location of the contacts. Needed for module and artwork decisions.
- ISO/IEC 7816-3 — electrical interface, activation, the ATR, and the T=0 and T=1 protocols. Needed whenever the question is “why did the exchange fail” rather than “what did the command mean”.
- ISO/IEC 7816-5 — registration of application providers, which is what makes application identifiers globally unique. Needed before you invent an AID.
- ISO/IEC 7816-6 — interindustry data elements and their tags. Needed when you want a data element that other systems will already understand.
- ISO/IEC 7816-8 — commands and mechanisms for security operations. This is where the cryptographic command set lives; Part 4 provides the frame, Part 8 provides the operations.
- ISO/IEC 7816-9 — additional interindustry commands and security attributes, including file and card management. Consult the ISO catalogue for the current edition.
- ISO/IEC 7816-15 — cryptographic information application, a standard description of the keys and certificates a card holds. Useful when middleware must discover a card’s credentials rather than be told about them.
Outside the 7816 family
- ISO/IEC 8825 / ITU-T X.690 — the Basic Encoding Rules for ASN.1. Part 4 uses BER-TLV encoding pervasively, so this is the reference behind every tag-length-value structure you will parse.
- ISO/IEC 14443 — proximity contactless cards. Not part of 7816, but dual-interface products carry 7816-4 APDUs over a 14443 link, so both apply at once.
- ISO/IEC 9797 — message authentication codes. Relevant when implementing the cryptographic checksums used by secure messaging.
- ISO/IEC 9796 and the ISO/IEC 14888 series — digital signature schemes, referenced where a card performs signature operations.
- ISO/IEC 10116 and ISO/IEC 10118 — block cipher modes of operation and hash functions respectively.
A caution about editions
Every document above is revised independently. Several of the standards historically cited by older smart-card literature have since been superseded, renumbered, or absorbed into other series — cryptographic standards in particular have moved considerably since the 1990s. Before citing any of them in a specification, a test plan or a compliance claim, check the current edition on the ISO catalogue rather than relying on a secondary source.
Authoritative source
The normative reference list for Part 4 is contained in ISO/IEC 7816-4:2020 itself, published by ISO. The map above is Ambimat’s own guidance on which document to reach for and is not a reproduction of that list.