FrancophonIA/DGT-Translation_Memory huggingface dataset:
English: Vehicle units and tachograph cards shall use a classical RSA public-key cryptographic system to provide the following security mechanisms:
Danish: Køretøjsenheder og fartskriverkort skal anvende et kryptografisk system med en klassisk offentlig RSA-nøgle til at tilvejebringe følgende sikkerhedsmekanismer:
English: authentication between vehicle units and cards,
Danish: ægthedsbekræftelse mellem køretøjsenheder og kort,
English: transport of Triple-DES session keys between vehicle units and tachograph cards,
Danish: transport af tredobbelte DES-sessionsnøgler mellem køretøjsenheder og fartskriverkort,
English: digital signature of data downloaded from vehicle units or tachograph cards to external media.
Danish: digital underskrift af data, som er overført fra køretøjsenhederne eller fra fartskriverkort til eksterne medier.
English: Vehicle units and tachograph cards shall use a Triple DES symmetric cryptographic system to provide a mechanism for data integrity during user data exchange between vehicle units and tachograph cards, and to provide, where applicable, confidentiality of data exchange between vehicle units and tachograph cards.
Danish: I køretøjsenheder og fartskriverkort skal anvendes et tredobbelt symmetrisk DES-kryptograferingssystem til sikring af dataintegritet under udveksling af brugerdata mellem køretøjsenheder og fartskriverkort og til, i givet fald, at sikre fortroligheden af dataoverførsel mellem køretøjsenheder og fartskriverkort.
English: Cryptographic algorithms
Danish: Kryptografiske algoritmer
English: RSA algorithm
Danish: RSA-algoritme
English: The RSA algorithm is fully defined by the following relations:
Danish: RSA-algoritmen er fuldt defineret ved følgende relationer:
English: >PIC FILE= "L_2002207EN.024001.TIF">
Danish: >PIC FILE= "L_2002207DA.024001.TIF">
English: A more comprehensive description of the RSA function can be found in reference (PKCS1).
Danish: En mere fuldstændig beskrivelse af RSA-funktionen findes i henvisning PKCS1.
English: Public exponent, e, for RSA calculations will be different from 2 in all generated RSA keys.
Danish: I alle genererede RSA-nøgler bliver den offentlige eksponent, e, til RSA-beregninger forskellig fra 2.
English: Hash algorithm
Danish: Hash-algoritme
English: The digital signature mechanisms shall use the SHA-1 hash algorithm as defined in reference (SHA-1).
Danish: Mekanismerne til digital underskrift skal anvende SHA-1-hashalgoritmen som defineret i henvisning SHA-1.
English: Data encryption algorithm
Danish: Algoritme til datakryptering
English: DES based algorithms shall be used in Cipher Block Chaining mode of operation.
Danish: Der skal anvendes DES-baserede algoritmer i blokkædnings-funktionsmåde.
English: KEYS AND CERTIFICATES
Danish: NØGLER OG CERTIFIKATER
English: Keys generation and distribution
Danish: Generering og distribution af nøgler
English: RSA keys generation and distribution
Danish: Generering og distribution af RSA-nøgler
English: RSA keys shall be generated through three functional hierarchical levels:
Danish: RSA-nøgler skal genereres i tre funktionelle hierarkiske niveauer:
English: European level,
Danish: europæisk niveau,
English: Member State level,
Danish: medlemsstatsniveau,
English: Equipment level.
Danish: apparatniveau.
English: At European level, a single European key pair (EUR.SK and EUR.PK) shall be generated.
Danish: På europæisk niveau skal der genereres et enkelt europæisk nøglepar (EUR.SK og EUR.PK).
English: The European private key shall be used to certify the Member States public keys.
Danish: Den europæiske private nøgle skal anvendes til at certificere medlemsstaternes offentlige nøgler.
English: Records of all certified keys shall be kept.
Danish: Der skal føres registre over alle certificerede nøgler.
English: These tasks shall be handled by a European certification authority, under the authority and responsibility of the European Commission.
Danish: Disse opgaver udføres af en europæisk certificeringsmyndighed under Europa-Kommissionens myndighed og ansvar.
English: At Member State level, a Member State key pair (MS.SK and MS.PK) shall be generated.
Danish: På medlemsstatniveau skal der genereres et medlemsstat-nøglepar (MS.SK og MS.PK).
English: Member States public keys shall be certified by the European Certification Authority.
Danish: Medlemsstaternes offentlige nøgler skal være certificeret af den europæiske certificeringsmyndighed.
English: The Member State private key shall be used to certify public keys to be inserted in equipment (vehicle unit or tachograph card).
Danish: Den private medlemsstatnøgle anvendes til at certificere de offentlige nøgler, som skal indsættes i udstyret (køretøjsenhed eller fartskriverkort).
English: Records of all certified public keys shall be kept with the identification of the equipment to which it is intended.
Danish: Der skal føres register over alle certificerede offentlige nøgler med identifikation af det udstyr, de er bestemt til.
English: These tasks shall be handled by a Member State certification authority.
Danish: Disse opgaver varetages af en medlemsstats certificeringsmyndighed.
English: A Member State may regularly change its key pair.
Danish: En medlemsstat kan jævnligt skifte sit nøglepar.
English: At equipment level, one single key pair (EQT.SK and EQT.PK) shall be generated and inserted in each equipment.
Danish: På apparatniveau skal der genereres et enkelt nøglepar (EQT.SK og EQT.PK), som indsættes i hvert apparat.
English: Equipment public keys shall be certified by a Member State certification authority.
Danish: Apparatets offentlige nøgler skal certificeres af en medlemsstats certificeringsmyndighed.
English: These tasks may be handled by equipment manufacturers, equipment personalisers or Member State authorities.
Danish: Disse opgaver kan varetages af udstyrsfabrikanter, af leverandører af individuelle tilpasninger af udstyr eller af medlemsstaternes myndigheder.
English: This key pair is used for authentication, digital signature and encipherement services
Danish: Dette nøglepar anvendes til ægthedsbekræftelse, digital underskrift og og krypteringstjenester.
English: Private keys confidentiality shall be maintained during generation, transport (if any) and storage.
Danish: De private nøglers fortrolighed skal bibeholdes under generering, eventuel transport og opbevaring.
English: The following picture summarises the data flow of this process:
Danish: Følgende billede sammenfatter datastrømmen under denne proces:
English: >PIC FILE= "L_2002207EN.024101.TIF">
Danish: >PIC FILE= "L_2002207DA.024101.TIF">
English: RSA test keys
Danish: RSA-prøvenøgler
English: For the purpose of equipment testing (including interoperability tests) the European certification authority shall generate a different single European test key pair and at least two Member State test key pairs, the public keys of which shall be certified with the European private test key.
Danish: Til afprøvning af udstyr (herunder interoperabilitetsprøvning) skal den europæiske certificeringsmyndighed generere et uens par europæiske prøvenøgler og mindst to par medlemsstatprøvenøgler, af hvilke de offentlige nøgler skal certificeres med den europæiske private prøvenøgle.
English: Manufacturers shall insert, in equipment undergoing type approval tests, test keys certified by one of these Member State test keys.
Danish: I det udstyr, som skal typegodkendes, skal fabrikanterne indsætte prøvenøgler, som er certificeret med en af medlemsstaternes prøvenøgler.
English: Motion sensor keys
Danish: Nøgler til bevægelsesføler
English: The confidentiality of the three TDES keys described below shall be appropriately maintained during generation, transport (if any) and storage.
Danish: Generering, eventuel transport og opbevaring af de tre nedenfor beskrevne TDES-nøgler skal ske under iagttagelse af fuld fortrolighed.
English: In order to support recording equipment compliant with ISO 16844, the European certification authority and the Member State certification authorities shall, in addition, ensure the following:
Danish: For at understøtte kontrolapparater, som er i overensstemmelse med ISO 16844, skal den europæiske certificeringsmyndighed og medlemsstaternes certificeringsmyndigheder endvidere sikre følgende:
English: The European certification authority shall generate KmVU and KmWC, two independent and unique Triple DES keys, and generate Km as:
Danish: Den europæiske certificeringsmyndighed genererer KmVU og KmWC, to uafhængige og unikke tredobbelte DES-nøgler, og genererer Km som:
English: >PIC FILE= "L_2002207EN.024201.TIF">
Danish: >PIC FILE= "L_2002207DA.024201.TIF">
English: The European certification authority shall forward these keys, under appropriately secured procedures, to Member States certification authorities at their request.
Danish: Den europæiske certificeringsmyndighed fremsender disse nøgler under brug af tilbørligt sikrede procedurer til medlemsstaternes certificeringsmyndigheder på disses anmodning.
English: Member States certification authorities shall:
Danish: Medlemsstaternes certificeringsmyndigheder skal:
English: use Km to encrypt motion sensor data requested by motion sensor manufacturers (data to be encrypted with Km is defined in ISO 16844-3),
Danish: Anvende Km til kryptering af bevægelsesfølerdata, som begæres af fabrikanter af bevægelsesfølere (de data, som skal krypteres med Km, er fastlagt i ISO 16844-3),
English: forward KmVU to vehicle unit manufacturers, under appropriately secured procedures, for insertion in vehicle units,
Danish: Fremsende KmVU til fabrikanterne af køretøjseneheder under brug af behørigt sikrede procedurer, til indsætning i køretøjsenheder,
English: ensure that KmWC will be inserted in all workshop cards (SensorInstallationSecData in Sensor_Installation_Data elementary file) during card personalisation.
Danish: Sørge for, at KmWC indsættes i alle værkstedskort (SensorInstallationSecData i elementærfilen Sensor_Installation_Data) under personalisering af kortet.
English: T-DES session keys generation and distribution
Danish: Generering og distribution af T-DES-sessionsnøgler
English: Vehicle units and tachograph cards shall, as a part of the mutual authentication process, generate and exchange necessary data to elaborate a common Triple DES session key.
Danish: Køretøjsenheder og fartskriverkort skal som del af den gensidige ægthedskontrol generere og udveksle de nødvendige data til udarbejdning af en tredobbelt fælles DES-sessionsnøgle.
English: This exchange of data shall be protected for confidentiality through an RSA crypt-mechanism.
Danish: Denne dataudveksling skal være fortrolighedsbeskyttet ved RSA-kryptering.
English: This key shall be used for all subsequent cryptographic operations using secure messaging.
Danish: Denne nøgle skal anvendes til alle efterfølgende kryptografiske operationer, hvor der anvendes sikker meddelelsesoverførsel.
English: Its validity shall expire at the end of the session (withdrawal of the card or reset of the card) and/or after 240 use (one use of the key = one command using secure messaging sent to the card and associated response).
Danish: Dens gyldighed skal udløbe ved sessionens afslutning (udtagning eller genindsætning af kort) og/eller efter 240 anvendelser (én anvendelse af nøglen = én kommando med sikker meddelelsesoverførsel sendt til kortet, samt det tilhørende svar).
English: Keys
Danish: Nøgler
English: RSA keys shall have (whatever the level) the following lengths: modulus n 1024 bits, public exponent e 64 bits maximum, private exponent d 1024 bits.
Danish: RSA-nøgler skal (uanset niveau) have følgende længde: modulus n 1024 bit, offentlig eksponent e maks. 64 bit, privat eksponent d 1024 bit.
English: Triple DES keys shall have the form (Ka, Kb, Ka) where Ka and Kb are independent 64 bits long keys.
Danish: Tredobbelte DES-nøgler skal have formen (Ka, Kb, Ka), hvor Ka og Kb er uafhængige 64 bit lange nøgler.
English: No parity error detecting bits shall be set.
Danish: Der skal ikke sættes paritetsbit.
English: Certificates
Danish: Certifikater
English: RSA Public key certificates shall be "non self-descriptive" "Card Verifiable" certificates (Ref.: ISO/IEC 7816-8)
Danish: Certifikater med offentlig RSA-nøgle skal være "ikke selvdeskriptive" og "verificerbare med kort" (ref.: ISO/IEC 7816-8)
English: Certificates content
Danish: Certifikaters indhold
English: RSA Public key certificates are built with the following data in the following order:
Danish: Certifikater med offentlig RSA-nøgle er opbygget med følgende data i følgende rækkefølge:
English: The "Certificate Profile Identifier" (CPI) delineates the exact structure of an authentication certificate.
Danish: "Certifikatprofil-identifikatoren" (CPI) beskriver den nøjagtige opbygning af et ægthedscertifikat.
English: It can be used as an equipment internal identifier of a relevant headerlist which describes the concatenation of Data Elements within the certificate.
Danish: Den kan bruges som intern identifikator for udstyret i en relevant headerliste, som beskriver sammenkædningen af dataelementer i certifikatet.
English: The headerlist associated with this certificate content is as follows:
Danish: Den headerliste, der er knyttet til indholdet af dette certifikat, er som følger:
English: >PIC FILE= "L_2002207EN.024301.TIF">
Danish: >PIC FILE= "L_2002207DA.024301.TIF">
English: The "Certification Authority Reference" (CAR) has the purpose of identifying the certificate issuing CA, in such a way that the data element can be used at the same time as an authority key identifier to reference the public key of the certification authority (for coding, see Key Identifier below).
Danish: "Henvisning til certificeringsmyndighed" (CAR) har til formål at identificere den certifikatudstedende myndighed på en sådan måde, at dataelementet samtidig kan anvendes som identifikator for en myndigheds nøgle og henvise til certificeringsmyndighedens offentlige nøgle (vedrørende kodning henvises til nøgleidentifikatoren nedenfor).
English: The "Certificate Holder Authorisation" ((CHA) is used to identify the rights of the certificate holder.
Danish: "Certifikatindehavers autorisation" (CHA) anvendes til at identificere certifikatindehaverens rettigheder.
English: It consists of the Tachograph Application ID and of the type of equipment to which the certificate is intended (according to EquipmentType data element, "00" for a Member State).
Danish: Den består af fartskriverapplikationens ID og af den art udstyr, som certifikatet er bestemt til (i henhold til dataelementet EquipmentType, "00" for en medlemsstat).
English: "Certificate Holder Reference" (CHR) has the purpose of identifying uniquely the certificate holder, in such a way that the Data Element can be used at the same time as a Subject Key Identifier to reference the Public Key of the certificate holder.
Danish: "Henvisning til certifikatindehaver" (CHR) har til formål at identificere certifikatindehaveren entydigt, således at dataelementet på én gang kan anvendes som identifikator for en persons nøgle og henvise til certifikatindehaverens offentlige nøgle.
English: Key Identifiers uniquely identify certificate holder or certification authorities.
Danish: Nøgleidentifikatorer identificerer entydigt certifikatindehaver eller certificeringsmyndigheder.
English: They are coded as follows:
Danish: De kodes som følger:
English: Equipment (VU or Card):
Danish: Udstyr (køretøjsenhed eller kort):
English: In the case of a VU, the manufacturer, when requesting certificates, may or may not know the identification of the equipment in which the keys will be inserted.
Danish: For en køretøjsenhed kan producenten, når han anmoder om certifikater, være vidende eller uvidende om identifikationen af det udstyr, nøglerne vil blive indsat i.
English: In the first case, the manufacturer will send the equipment identification with the public key to its Member State authority for certification.
Danish: I første tilfælde sender fabrikanten identifikationen af udstyret med den offentlige nøgle til den pågældende medlemsstats myndigheder til certificering.
English: The certificate will then contain the equipment identification, and the manufacturer must ensure that keys and certificate are inserted in the intended equipment.
Danish: Certifikatet vil derefter indeholde identifikationen af udstyret, og fabrikanten skal sikre, at nøgler og certifikat indsættes i det udstyr, det er bestemt for.
English: The Key identifier has the form shown above.
Danish: Nøgleidentifikatoren har den ovenfor viste form.
English: In the later case, the manufacturer must uniquely identify each certificate request and send this identification with the public key to its Member State authority for certification.
Danish: I sidstnævnte tilfælde skal fabrikanten entydigt identificere hver forespørgsel om certifikat og sende denne identifikation med den offentlige nøgle til den pågældende medlemsstats myndigheder til certificering.
English: The certificate will contain the request identification.
Danish: Certifikatet vil indeholde identifikationen af anmodningen.
English: The manufacturer must feed back its Member State authority with the assignment of key to equipment (i.e. certificate request identification, equipment identification) after key installation in the equipment.
Danish: Fabrikanten skal melde tilbage til myndighederne i sin medlemsstat med tilordning af nøgle til udstyr (dvs. identifikation af anmodning om certifikat, identifikation af udstyr) efter installation af nøglen i udstyret.
English: The key identifier has the following form:
Danish: Nøgleidentifikatoren har følgende form:
English: Certification Authority:
Danish: Certificeringsmyndighed:
English: The key serial number is used to distinguish the different keys of a Member State, in the case the key is changed.
Danish: Nøglens serienummer anvendes til at skelne mellem en medlemsstats forskellige nøgler i tilfælde af, at nøglen ændres.
English: Certificate verifiers shall implicitly know that the public key certified is an RSA key relevant to authentication, digital signature verification and encipherement for confidentiality services (the certificate contains no Object Identifier to specify it).
Danish: Certifikatkontrollører skal implicit vide, at den certificerede offentlige nøgle er en RSA-nøgle, som er relevant for ægthedsbekræftelse, verificering af digital underskrift og kryptering til fortrolighedstjenester (certifikatet indeholder ingen objektidentifikator til specificering heraf).
English: Certificates issued
Danish: Udstedte certifikater
English: The certificate issued is a digital signature with partial recovery of the certificate content in accordance with ISO/IEC 9796-2, with the "Certification Authority Reference" appended.
Danish: Det udstedte certifikat er en digital underskrift med delvis genetablering af certifikatets indhold i overensstemmelse med ISO/IEC 9796-2, med "henvisning til certificeringsmyndighed" vedhæftet.
English: >PIC FILE= "L_2002207EN.024401.TIF">
Danish: >PIC FILE= "L_2002207DA.024401.TIF">
English: With certificate content
Danish: Med certifikatindhold
English: >PIC FILE= "L_2002207EN.024402.TIF">
Danish: >PIC FILE= "L_2002207DA.024402.TIF">
English: This certificate is 194 bytes long.
Danish: Dette certifikat er 194 bytes langt.
English: CAR, being hidden by the signature, is also appended to the signature, such that the public key of the certification authority may be selected for the verification of the certificate.
Danish: Henvisning til certificeringsmyndigheden (CAR), som er skjult af underskriften, er ligeledes vedhæftet underskriften, således at certificeringsmyndighedens offentlige nøgle kan vælges til verificering af certifikatet.
English: The certificate verifier shall implicitly know the algorithm used by the certification authority to sign the certificate.
Danish: Certifikatkontrolløren skal implicit kende den algoritme, der af certificeringsmyndigheden er anvendt til at underskrive certifikatet.
English: The headerlist associated with this issued certificate is as follows:
Danish: Den headerliste, der er knyttet til dette udstedte certifikat, er som følger:
English: >PIC FILE= "L_2002207EN.024501.TIF">
Danish: >PIC FILE= "L_2002207DA.024501.TIF">
English: Certificate verification and unwrapping
Danish: Verificering og udpakning af certifikater
English: Certificate verification and unwrapping consists in verifying the signature in accordance with ISO/IEC 9796-2, retrieving the certificate content and the public key contained: X.PK = X.CA.PKoX.C, and verifying the validity of the certificate.
Danish: Certifikatverificering og -udpakning består i verificering af underskriften i overensstemmelse med ISO/IEC 9796-2, hentning af certifikatets indhold og den deri indeholdte offentlige nøgle, X.PK = X.CA.PKoX.C, samt verificering af certifikatets validitet.
English: It involves the following steps:
Danish: Der indgår heri følgende trin:
English: verify signature and retrieve content:
Danish: Verificering af underskrift og hentning af indhold:
English: from X.C retrieve Sign, Cn' and CAR':
Danish: fra X.C hent Sign, Cn' og CAR':
English: >PIC FILE= "L_2002207EN.024502.TIF">
Danish: >PIC FILE= "L_2002207DA.024502.TIF">
English: from CAR' select appropriate Certification Authority Public Key (if not done before through other means)
Danish: fra henvisning til certificeringsmyndighed (CAR): vælg korrekt offentlig nøgle for certificeringsmyndighed (hvis dette ikke er sket før på anden måde)
English: open Sign with CA Public Key: Sr' = X.CA.PK [Sign],
Danish: åben Sign med certificeringsmyndighedens offentlige nøgle: Sr' = X.CA.PK [Sign],
English: check Sr' starts with '6A' and ends with 'BC'
Danish: kontrollér, at Sr' begynder med '6A' og ender på 'BC'
English: compute Cr' and H' from:
Danish: beregn Cr' og H' af:
English: >PIC FILE= "L_2002207EN.024503.TIF">
Danish: >PIC FILE= "L_2002207DA.024503.TIF">
English: Recover certificate content C' = Cr' Cn',
Danish: genetabler certifikatindhold C' = Cr' Cn',
English: check Hash(C') = H'
Danish: kontrollér, at Hash(C') = H'
English: If the checks are OK the certificate is a genuine one, its content is C'.
Danish: Giver kontrollerne tilfredsstillende resultat, er certifikatet ægte, dets indhold er C'.
English: Verify validity.
Danish: Verificer gyldighed.
English: From C':
Danish: Fra C':
English: if applicable, check End of validity date,
Danish: kontrollér i givet fald udløbsdatoen.
English: Retrieve and store public key, Key Identifier, Certificate Holder Authorisation and Certificate End of Validity from C':
Danish: Hent og gem offentlig nøgle, nøgleidentifikator, certifikatindehavers autorisation og certifikatudløbsdato fra C':
English: X.PK = n e
Danish: X.PK = n e
English: X.KID = CHR
Danish: X.KID = CHR
English: X.CHA = CHA
Danish: X.CHA = CHA
English: X.EOV = EOV.
Danish: X.EOV = EOV
English: MUTUAL AUTHENTICATION MECHANISM
Danish: MEKANISME TIL GENSIDIG ÆGTHEDSBEKRÆFTELSE
English: Mutual authentication between cards and VUs is based on the following principle:
Danish: Gensidig ægthedsbekræftelse mellem kort og køretøjsenheder bygger på følgende princip:
English: Each party shall demonstrate to the other that it owns a valid key pair, the public key of which has been certified by a Member State certification authority, itself being certified by the European certification authority.
Danish: Hver part skal over for den anden godtgøre, at den er indehaver af en gyldig nøgle, af hvilken den offentlige nøgle er certificeret af en af medlemsstaternes certificeringsmyndigheder, som selv er certificeret af den europæiske certificeringsmyndighed.
English: Demonstration is made by signing with the private key a random number sent by the other party, who must recover the random number sent when verifying this signature.
Danish: Dette sker ved, at der med den private nøgle underskrives et tilfældigt tal, afsendt af den anden part, som derefter skal genfinde det afsendte tilfældige tal ved verificering af denne underskrift.
English: The mechanism is triggered at card insertion by the VU.
Danish: Mekanismen udløses af køretøjsenheden ved isætningen af kortet.