本文件是ISO/IEC9594？8[公钥基础设施（PKI）数字签名和证书]自动识别服务应用规范。它指定了一种方法，其中存储在条形码和/或RFID标签内的数据被结构化、编码和数字签名。ISO/IEC9594？8用于提供密钥和数据描述管理和分发的标准方法。自动识别数据载体的数据容量和/或数据传输容量受到限制。这限制了ISO/IEC中规定的数字签名的正常使用9594？8在自动识别服务中。 本文档的目的是在自动识别服务和数据载体之间提供一种开放且可互操作的方法，以在脱机用例中读取数据、验证数据原创性和数据完整性。 本文件规定 —？元数据结构DigSig，包含数字签名和编码的结构化数据， —？公钥证书参数和扩展使用，DigSig证书，其中包含经认证的相关公钥、结构化数据描述、读取方法和私有容器， —？指定、读取、描述、签名、验证、编码和解码结构化数据的方法，DigSig数据描述， —？DigSig编码器生成器生成相关的非对称密钥对，保留私钥机密，并生成DigSig，以及 —？DigSig解码器，通过使用DigSig证书，从数据载体集中读取DigSig，验证DigSig并从DigSig中提取结构化数据。 本文件未规定 —？加密方法，或 —？关键管理方法。

This document is an ISO/IEC？9594？8 [public key infrastructure (PKI) digital signatures and certificates] application specification for automated identification services. It specifies a method whereby data stored within a barcode and/or RFID tag are structured, encoded and digitally signed. ISO/IEC？9594？8 is used to provide a standard method for key and data description management and distribution. The data capacity and/or data transfer capacity of automated identification data carriers are restricted. This restricts the normal use of a digital signature as specified in ISO/IEC？9594？8 within automated identification services. The purpose of this document is to provide an open and interoperable method, between automated identification services and data carriers, to read data, verify data originality and data integrity in an offline use case. This document specifies —？the meta data structure, the DigSig, which contains the digital signature and encoded structured data, —？the public key certificate parameter and extension use, the DigSig certificate, which contains the certified associated public key, the structured data description, the read methods, and private containers, —？the method to specify, read, describe, sign, verify, encode, and decode the structured data, the DigSig Data Description, —？the DigSig EncoderGenerator which generates the relevant asymmetric key pairs, keeps the private key secret, and generates the DigSigs, and —？the DigSig DecoderVerifier which, by using to the DigSig certificate, reads the DigSig from the set of data carriers, verifies the DigSig and extracts the structured data from the DigSig. This document does not specify —？cryptographic methods, or —？key management methods.