This document gives guidelines for performance criteria and an evaluation methodology for authentication solutions that aim to unambiguously establish material good authenticity and integrity throughout an entire material good\u2019s life cycle. It focuses on the authentication of a material good and, if appropriate, its components, parts and related data:<\/p>\n
covered by intellectual property rights;<\/p>\n<\/li>\n
covered by relevant international, regional or national regulations;<\/p>\n<\/li>\n
with counterfeiting-related implications;<\/p>\n<\/li>\n
otherwise with a distinctive identity.<\/p>\n<\/li>\n<\/ul>\n
This document is applicable to all types and sizes of organizations that require the ability to validate the authenticity and integrity of material goods. It will help organizations to determine the categories of authentication elements they need in order to combat counterfeiting-related risks, and the criteria for selecting authentication elements, after having undertaken a counterfeiting risk assessment.<\/p>\n
Authentication solutions can be used in areas such as anti-counterfeiting, prevention of product fraud and prevention of diversion.<\/p>\n
This document does not specify economic criteria aiming to correlate performance and costs of the authentication solutions.<\/p>\n
| PDF Pages<\/th>\n | PDF Title<\/th>\n<\/tr>\n | ||||||
|---|---|---|---|---|---|---|---|
| 2<\/td>\n | National foreword <\/td>\n<\/tr>\n | ||||||
| 6<\/td>\n | Foreword <\/td>\n<\/tr>\n | ||||||
| 7<\/td>\n | Introduction <\/td>\n<\/tr>\n | ||||||
| 11<\/td>\n | 1 Scope 2 Normative references 3 Terms and definitions <\/td>\n<\/tr>\n | ||||||
| 13<\/td>\n | 4 Principles 4.1 General <\/td>\n<\/tr>\n | ||||||
| 14<\/td>\n | 4.2 Security-by-design process for authentication solutions <\/td>\n<\/tr>\n | ||||||
| 15<\/td>\n | 4.3 Categorization of authentication solutions 4.3.1 General <\/td>\n<\/tr>\n | ||||||
| 16<\/td>\n | 4.3.2 Provision of knowledge 4.3.3 Sourcing and production of authentication elements and tools 4.3.4 Inspection <\/td>\n<\/tr>\n | ||||||
| 17<\/td>\n | 4.3.5 Categories of authentication elements <\/td>\n<\/tr>\n | ||||||
| 18<\/td>\n | 5 Performance criteria specification based on risk analysis 5.1 General <\/td>\n<\/tr>\n | ||||||
| 19<\/td>\n | 5.2 Risk analysis elements 5.3 Performance criteria categories 5.4 Criteria for selection of authentication elements 5.4.1 Physical characteristics <\/td>\n<\/tr>\n | ||||||
| 20<\/td>\n | 5.4.2 Attack resistance <\/td>\n<\/tr>\n | ||||||
| 21<\/td>\n | 5.4.3 Integration process <\/td>\n<\/tr>\n | ||||||
| 22<\/td>\n | 5.5 Attack-resistance criteria for selection of authentication tools 5.5.1 General 5.5.2 Obsolescence 5.5.3 Assessment of vulnerability and resistance of authentication tools 5.6 Criteria for selection of authentication elements and tools <\/td>\n<\/tr>\n | ||||||
| 23<\/td>\n | 5.7 Criteria for selection of authentication solutions 5.7.1 Location\/environment for authentication process 5.7.2 Authentication parameters 5.7.3 Life cycle criteria 5.7.4 Security policy <\/td>\n<\/tr>\n | ||||||
| 24<\/td>\n | 5.7.5 Compliance with regulations, security practices and quality procedures 5.7.6 Operation 5.7.7 Ability to evaluate the performance of the authentication solution <\/td>\n<\/tr>\n | ||||||
| 25<\/td>\n | 6 Effectiveness assessment of authentication solutions 6.1 General 6.2 Definition of effectiveness assessment protocols <\/td>\n<\/tr>\n | ||||||
| 27<\/td>\n | 6.3 Effectiveness assessment in manufacturing of authentication elements 6.4 Effectiveness of delivery of authentication elements 6.5 Effectiveness of application of authentication elements 6.6 Data management <\/td>\n<\/tr>\n | ||||||
| 28<\/td>\n | 6.7 Effectiveness measurement in normal verification\/authentication situations 6.8 Effectiveness assessment in emergency verification\/authentication situations 6.9 Impact of verification results and corrective actions <\/td>\n<\/tr>\n | ||||||
| 29<\/td>\n | Annex A (informative) Assessment grid <\/td>\n<\/tr>\n | ||||||
| 34<\/td>\n | Annex B (informative) Control means access table <\/td>\n<\/tr>\n | ||||||
| 35<\/td>\n | Bibliography <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":" Security and resilience. Authenticity, integrity and trust for products and documents. Guidelines for the selection and performance evaluation of authentication solutions for material goods<\/b><\/p>\n |