Overview
ISO/IEC 22460-2:2024 defines the cryptographic functions and data handling requirements for the drone/UAS security module - a secure container for a drone pilot license, operator license and other personal identification used in unmanned aircraft systems (UAS). The standard specifies how the module stores optional elements (e.g., drone ID, flight permit ID), and how it implements integrity validation, authentication, and data encryption to protect personal and operational data.
Key topics and technical requirements
- Scope of protection
- Storage of drone pilot/operator licenses, personal identification data, and optional elements such as drone ID and flight permit ID.
- No single mandatory data element - contents can vary by national regulation.
- Cryptographic functions
- Requirements for integrity validation (hash functions, digital signatures) to ensure data has not been altered.
- Authentication mechanisms (MACs, signature-based methods, mutual authentication) for verification between module and counterpart entities.
- Data encryption for confidentiality of stored or transmitted data.
- Support for secure communication protocols including TLS where applicable.
- Form-factors and interfaces
- Physical types are not restricted: examples include IC cards, USIM, micro SD, eSIM, or SoC implementations.
- Communication protocols: ISO/IEC 7816-3/4 APDU command-response is referenced; other interfaces such as SPI and USB are permitted.
- Data format and lifecycle
- Logical data structures for issuer-written and user-written data; key management and issuer responsibility for digital signatures.
- Referenced primitives and terms
- Standard references and terminology include ISO 21384-4 and common cryptographic primitives (e.g., AES, SHA, ECDSA, ECDH) as used in practice.
Practical applications and users
- Who uses it:
- Aviation authorities and UAS management systems issuing secure drone licenses.
- Drone manufacturers and hardware vendors implementing secure elements or modules.
- Service providers (drone operators, fleet managers) integrating secure identification and access control.
- System integrators building UA/ground-station mutual authentication and secure telemetry links.
- Practical benefits:
- Enables trusted pilot/operator identity, tamper-evident license storage, and secure access control to drones and management systems.
- Facilitates cross-border interoperability and compliance with national UAS regulations.
Related standards
- ISO/IEC 22460 series (Part 1: physical characteristics and data sets; Part 3: logical data structure - under development)
- ISO 21384-4 (UAS vocabulary)
- ISO/IEC 7816-3/4 (smart-card interfaces and APDU command-response)
- General cryptographic and TLS specifications referenced for secure communication
This standard is essential for anyone designing or deploying secure identity solutions for unmanned aircraft systems, and for regulators seeking consistent, cryptographically robust drone identification and license management.
Открыть превью (PDF)Cards and security devices for personal identification — ISO UAS license and drone/UAS security module — Part 2: Drone/UAS security module
