ISO 9564-1:2017规定了提供有效国际PIN管理所需最低安全措施的基本原则和技术。这些措施适用于负责实施PIN创建、发布、使用和停用期间管理和保护技术的机构。 ISO 9564-1:2017适用于零售银行系统中作为持卡人验证手段使用的持卡人PIN的管理，尤其是在自动柜员机（ATM）系统、销售点（POS）终端、自动加油机、自动售货机、银行亭和PIN选择/更改系统中。它适用于发卡机构和交换环境。 ISO 9564-1:2017的规定不包括: a） 在交易发起设备和收单机构之间不存在持久加密关系的环境中，例如使用浏览器进行在线购物时，PIN管理和安全性（对于这些环境，请参阅ISO 9564-4）； b） 防止PIN丢失或被客户故意滥用； c） 非PIN交易数据的隐私； d） 保护交易信息不被更改或替换； e） 防止PIN或交易重播； f） 具体的关键管理技术； g） 非接触式设备中使用的离线PIN验证； h） 与PIN管理特别相关的要求，因为它涉及多个- ICC中的应用程序功能。

ISO 9564-1:2017 specifies the basic principles and techniques which provide the minimum security measures required for effective international PIN management. These measures are applicable to those institutions responsible for implementing techniques for the management and protection of PINs during their creation, issuance, usage and deactivation. ISO 9564-1:2017 is applicable to the management of cardholder PINs for use as a means of cardholder verification in retail banking systems in, notably, automated teller machine (ATM) systems, point-of-sale (POS) terminals, automated fuel dispensers, vending machines, banking kiosks and PIN selection/change systems. It is applicable to issuer and interchange environments. The provisions of ISO 9564-1:2017 are not intended to cover: a) PIN management and security in environments where no persistent cryptographic relationship exists between the transaction-origination device and the acquirer, e.g. use of a browser for online shopping (for these environments, see ISO 9564-4); b) protection of the PIN against loss or intentional misuse by the customer; c) privacy of non-PIN transaction data; d) protection of transaction messages against alteration or substitution; e) protection against replay of the PIN or transaction; f) specific key management techniques; g) offline PIN verification used in contactless devices; h) requirements specifically associated with PIN management as it relates to multi-application functionality in an ICC.