BS ISO 9807 : 91 AMD 9320

1. Scope
2. Normative references
3. Definitions
4. Procedures for message authentication
4.1 Authentication keys
4.2 Authentication elements
4.3 MAC length
4.4 MAC generation
4.5 Placement of MAC
5. Verification of the MAC
6. Approval procedure for authentication algorithms
Annexes
A. Algorithms approved for calculation of MAC for
     authentication of retail messages
B. Procedure for the review of alternative
     authentication algorithms
C. Procedure to prevent exhaustive key determination
D. Guidance on the selection of authentication elements
E. Protection against duplication and loss
F. Pseudo-random key generator
G. Bibliography

Lays out procedures to be used for protecting the integrity of retail banking messages and for verifying that the message originated from an authorized source. Describes the method by which algorithms are approved for use for authentication of retail banking messages. Does not provide for encipherment for the protection of messages against unauthorized disclosure; or protection against loss or duplication of messages, whether accidental or intentional. Applicable to institutions responsible for implementing techniques to authentication messages used in a retail banking environment. Covers definitions, procedures for message authentication, verification of the MAC and approval procedure for authentication algorithms. BS AMD 9320 RENUMBERS THIS STANDARD