C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

11. Security ArchitectureThe security architecture of the card is based on the following components:• Current Security Status• Access Conditions (AC)• Base Security Objects (BSO)• Current Security Environment (CSE)• Security Environment Object (SEO)Together, they set the rules for using the resources of the card.11.1 Access Conditions and Security StatusEvery command has specific security conditions to meet for its execution. The specific conditionsdepend on the current framework, and on the operation to perform.The information that links the object, the operation to control and the rules to apply is the AccessCondition (AC).An Access Condition can be attached to a file (EF, DF or MF), or to other card objects, as describedlater in the document. It tells in which status the card has to be in order to allow a specific operationon a specific object.The Access Conditions relative to an object are grouped in a byte string logically attached to theobject, where each byte is associated to one operation or to a group of operations, and can assumeone of the values in the next table:Byte Value Condition00h01h..1FhFFhALWAYSID of a BSONEVERTable 6: AC valuesThe values ALWAYS and NEVER mean that the operation is respectively always or never allowed.In the other cases, the value of the AC is the ID of a TEST BSO (see Section 11.2) that contains therules for the access.CIE - Functional Specification v 2.0 -Page 26/76