Overview
ISO 18185-4:2007 - "Freight containers - Electronic seals - Part 4: Data protection" defines requirements for the protection, authentication and conformance capabilities of electronic seals used on freight containers. The standard focuses on ensuring the accessibility, integrity and non‑repudiation of data stored in or communicated by electronic seals (RFID-based seal tags), and on methods for verifying device authenticity and meeting mechanical conformance expectations.
Key topics and technical requirements
- Data protection scope: Addresses confidentiality, integrity and accessibility of seal data. In this first‑generation specification, all seal communications are deemed public information and transmitted in clear text; the emphasis is on protecting data integrity rather than encrypting transmissions.
- Fixed data vs. variable data:
- Fixed data (e.g., manufacturer ID, tag serial number, model, protocol/version) must be protected against erasure or alteration after manufacture.
- Variable data (e.g., time of seal closure/opening, battery status, event log) must be appended to the seal’s memory as permanent records and protected against modification or deletion during the seal’s lifetime.
- Device authentication:
- Requires capability for physical (forensic) authentication so manufacturers can validate mechanical and electronic components and unique manufacturing characteristics.
- No electronic authentication (via transmitted cryptographic credentials) is required in this first edition.
- Conformance:
- Electronic seals claiming compliance must meet the high security mechanical properties specified in ISO/PAS 17712 and follow the manufacturer security practices outlined in Annex A.
- Normative references: ISO/IEC 17025, ISO/PAS 17712, ISO 18185‑3 (environmental characteristics).
Applications and who uses the standard
ISO 18185-4 is intended for stakeholders in container security, logistics and supply chain operations:
- Electronic seal manufacturers - to design seals with immutable fixed data and tamper-evident event logs and to follow security-related manufacturing practices.
- System integrators and RFID solution providers - to implement compliant seal-reader systems and event logging.
- Shipping lines, freight forwarders, ports and terminal operators - to use seals for tamper evidence, container identification and chain-of-custody records.
- Customs, regulators and auditors - for forensic validation and verification of seal authenticity and event histories.
Practical uses include tamper detection, seal inventory control, event logging (open/close timestamps and battery status), and forensic validation after suspected intrusion.
Related standards
- ISO 18185 (series) - Parts 1–5 (communication protocol, application requirements, environmental characteristics, data protection, physical layer)
- ISO/PAS 17712 - Mechanical seals (high security seal physical properties)
- ISO/IEC 17025 - Testing and calibration laboratory competence
Note: ISO 18185-4:2007 defines first‑generation requirements; future revisions may introduce electronic authentication and additional confidentiality mechanisms.
