National foreword

This British Standard is the UK implementation of EN ISO 17574:2026. It is identical to ISO 17574:2026. It supersedes PD CEN ISO/TS 17574:2017, which is withdrawn.

The UK participation in its preparation was entrusted to Technical Committee EPL/278, Intelligent transport systems.

A list of organizations represented on this committee can be obtained on request to its committee manager.

Contractual and legal considerations

This publication has been prepared in good faith, however no representation, warranty, assurance or undertaking (express or implied) is or will be made, and no responsibility or liability is or will be accepted by BSI in relation to the adequacy, accuracy, completeness or reasonableness of this publication. All and any such responsibility and liability is expressly disclaimed to the full extent permitted by the law.

This publication is provided as is, and is to be used at the recipient’s own risk.

The recipient is advised to consider seeking professional guidance with respect to its use of this publication.

This publication is not intended to constitute a contract. Users are responsible for its correct application.

Compliance with a British Standard cannot confer immunity from legal obligations.

This British Standard was published under the authority of the Standards Policy and Strategy Committee on 30 September 2026.

This European Standard was approved by CEN on 27 July 2026.

CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN member.

This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and United Kingdom.

European foreword

This document (EN ISO 17574:2026) has been prepared by Technical Committee ISO/TC 204 "Intelligent transport systems" in collaboration with Technical Committee CEN/TC 278 “Intelligent transport systems” the secretariat of which is held by NEN.

This European Standard shall be given the status of a national standard, either by publication of an identical text or by endorsement, at the latest by September 2026, and conflicting national standards shall be withdrawn at the latest by September 2026.

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CEN shall not be held responsible for identifying any or all such patent rights.

This document supersedes CEN ISO/TS 17574:2017.

This document has been prepared under a standardization request addressed to CEN by the European Commission. The Standing Committee of the EFTA States subsequently approves these requests for its Member States.

Any feedback and questions on this document should be directed to the users’ national standards body/national committee. A complete listing of these bodies can be found on the CEN website.

According to the CEN-CENELEC Internal Regulations, the national standards organizations of the following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and the United Kingdom.

Endorsement notice

The text of ISO 17574:2026 has been approved by CEN as EN ISO 17574:2026 without any modification.

Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types of ISO document should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).

ISO draws attention to the possibility that the implementation of this document may involve the use of (a) patent(s). ISO takes no position concerning the evidence, validity or applicability of any claimed patent rights in respect thereof. As of the date of publication of this document, ISO had not received notice of (a) patent(s) which may be required to implement this document. However, implementers are cautioned that this may not represent the latest information, which may be obtained from the patent database available at www.iso.org/patents. ISO shall not be held responsible for identifying any or all such patent rights.

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www.iso.org/iso/foreword.html.

This document was prepared by Technical Committee ISO/TC 204, Intelligent transport systems, in collaboration with the European Committee for Standardization (CEN) Technical Committee CEN/TC 278, Intelligent Transport Systems, in accordance with the Agreement on technical cooperation between ISO and CEN (Vienna Agreement).

This first edition cancels and replaces the third edition (ISO/TS 17574:2017), which has been technically revised.

The main changes are as follows:

Clause 3 has been updated and ISO 17573‑2 has been made the primary source for terms and definitions;
requirements have been updated to reflect the latest edition of the ISO/IEC 15408 series.

Any feedback or questions on this document should be directed to the user’s national standards body. A complete listing of these bodies can be found at www.iso.org/members.html.

Introduction

Electronic fee collection (EFC) systems are subject to several ways of fraud both by users and operators but also from people outside the system. These security threats are countered with various types of security measures linked to specified security requirements.

It is recommended that EFC operators prepare their own EFC protection profile (PP) according to this document, as security requirements should be described from the operator's point of view.

A protection profile (PP) refers to a set of safety requirements for a category of products or systems that meet specific needs. A typical example is a PP for on-board equipment (OBE) to be used in an EFC system. However, the requirements in this document are superseded if a PP already exists for the subsystem in question.

The target of evaluation (TOE) for EFC is limited to EFC specific roles and interfaces as shown in Figure 1. Figure 1 shows the relationships and interactions among the entities related to the TOE of the EFC. As shown in this figure, entities are overall management of the toll charging environment, EFC service provider, toll charger and user of the service. Since the existing financial security standards and criteria are applicable to other external roles and interfaces, they are assumed to be outside the scope of TOE for EFC.

The security evaluation is performed by assessing the security-related properties of roles, entities and interfaces defined in security targets (STs), as opposed to assessing complete processes which often are distributed over more entities and interfaces than those covered by the TOE of this document.

NOTE Assessing security issues for complete processes is a complementary approach, which can be beneficial to apply when evaluating the security of a system.

It should be noted that the requirements provided in this document are intended to be read in conjunction with the ISO/IEC 15408 series. Annex A provides an example of how to prepare the security requirements for EFC equipment, in this case, a dedicated short-range communication (DSRC)-based OBE with an integrated circuit(s) card (ICC) containing data needed for the EFC. The example refers to a Japanese national EFC system and should only be regarded as an example.

After an PP for EFC is prepared, it can be internationally registered by the organization that prepared the PP for EFC so that other operators or countries that want to develop their EFC system security services can refer to an already registered PP for EFC.

This document on security service framework and PP for EFC is based on the ISO/IEC 15408 series. The ISO/IEC 15408 series includes a set of requirements for the security functions and assurance of IT-relevant products and systems. Operators, organizations or authorities defining their own PP for EFC can use these requirements. The different PPs for EFC defined by operators, organizations or authorities will be similar to the different PPs registered by several financial institutions, e.g. for payment instruments like IC cards (ICCs).

The products and systems that were developed in accordance with the ISO/IEC 15408 series can be publicly assured by the authentication of the government or designated private evaluation agencies.

1 Scope

This document specifies electronic fee collection (EFC) requirements for the preparation and evaluation of security requirements specifications, referred to as protection profiles (PP) in the ISO/IEC 15408 series and in ISO/IEC TR 15446.

2 Normative references

3 Terms and definitions

4 Abbreviated terms

5 EFC security architecture and protection profile processes

5.1 General

5.2 EFC security architecture

5.3 Protection profile preparatory steps

5.4 Relationship between actors

6 Outline of protection profile (PP)

6.1 Structure

6.2 Context

Bibliography