This standard was last reviewed and confirmed in 2021. Therefore this version remains current.
Abstract Preview
The goal of the non-repudiation service is to generate, collect, maintain, make available and validate evidence concerning a claimed event or action in order to resolve disputes about the occurrence or non-occurrence of the event or action. ISO/IEC 13888-2:2010 provides descriptions of generic structures that can be used for non-repudiation services, and of some specific communication-related mechanisms which can be used to provide non-repudiation of origin (NRO) and non-repudiation of delivery (NRD). Other non-repudiation services can be built using the generic structures described in ISO/IEC 13888-2:2010 in order to meet the requirements defined by the security policy.
ISO/IEC 13888-2:2010 relies on the existence of a trusted third party (TTP) to prevent fraudulent repudiation or accusation. Usually, an online TTP is needed.
Non-repudiation can only be provided within the context of a clearly defined security policy for a particular application and its legal environment. Non-repudiation policies are defined in ISO/IEC 10181-4.
General information
-
Status : PublishedPublication date : 2010-12
-
Edition : 2Number of pages : 17
-
Technical Committee:Information security, cybersecurity and privacy protection
-
- ICS :
-
IT Security
Buy this standard
Format | Language | |
---|---|---|
Paper |
- CHF88
Life cycle
-
Previously
WithdrawnISO/IEC 13888-2:1998
-
Now
Corrigenda / Amendments
PublishedISO/IEC 13888-2:2010/Cor 1:2012
Got a question?
Check out our FAQs
Opening hours:
Monday to Friday - 09:00-12:00, 14:00-17:00 (UTC+1)
Keep up to date with ISO
Sign up to our newsletter for the latest news, views and product information.