CEN/TS 16634:2014
(Main)Personal identification - Recommendations for using biometrics in European Automated Border Control
Personal identification - Recommendations for using biometrics in European Automated Border Control
This Technical Specification primarily focuses on biometric aspects of Automated Border Control (ABC) systems. Drawing on the first European and international ABC deployments, it aims to disseminate best practice experiences with a view to ensure consistent security levels in European ABC deployments. Furthermore, the best practice recommendations given here shall help make border control authorities' processes more efficient, speeding up border clearance, and delivering an improved experience to travellers.
ISO/IEC JTC1/SC 37 has published a series of standards dealing with biometric data coding, interfaces, performance tests as well as compliance tests. In order to promote global interoperability it is essential that all these standards are applied in European deployments. However, these standards do not consider national or regional characteristics; in particular, they do not consider European Union privacy and data protection regulation as well as European accessibility and usability requirements [22]. Thus, this Technical Specification amends the ISO standards with respect to special European conditions and constraints.
The Technical Specification systematically discusses issues to be considered when planning and deploying biometric systems for ABC and gives best practice recommendations for those types of systems that are or will be in use in Europe. The document deals with personal identification including ergonomic aspects that have an impact on the acquisition of biometric data.
Communication, infrastructure scalability and security aspects other than those related to biometrics are not considered. This document also does not consider hardware and security requirements of biometric equipment and does not recommend general border crossing procedures.
The enrolment process, e. g. for electronic passports, is out of scope of this document.
Persönliche Identifikation - Empfehlungen für den Einsatz von Biometrie bei der automatisierten Grenzübergangskontrolle in Europa
Identification personnelle - Recommandations pour l’usage de la biométrie lors des contrôles automatisés aux frontières de l’Europe
Osebna identifikacija - Priporočila za uporabo biometrije pri evropskem avtomatiziranem mejnem nadzoru
Tehnična specifikacija CEN/TS 16634 se osredotoča predvsem na biometrične vidike sistemov avtomatiziranega mejnega nadzora. Njen namen je razširjanje izkušenj najboljše prakse, da se zagotovi dosledno raven varnosti pri izvajanju evropskega avtomatiziranega mejnega nadzora, pri čemer se opira na prve izvedbe evropskega in mednarodnega avtomatiziranega mejnega nadzora. Poleg tega bodo navedena priporočila najboljše prakse pomagala pri povečanju učinkovitosti postopkov, ki jih izvajajo organi mejne kontrole, povečala hitrost prehoda meje in izboljšala izkušnjo potnikov. ISO/IEC JTC1/SC 37 je objavil serijo standardov, ki obravnavajo biometrično kodiranje podatkov, vmesnike, preskuse izvedbe in preskuse skladnosti. Za spodbujanje svetovne medoperabilnosti je uporaba teh standardov v evropskih izvedbah ključnega pomena. Vendar ti standardi ne upoštevajo nacionalnih ali regionalnih značilnosti; zlasti ne upoštevajo uredbe o varovanju zasebnosti in varstvu podatkov ter evropskih zahtev po dostopnosti in uporabnosti [22]. Tako ta tehnična specifikacija dopolnjuje standarde ISO na področju posebnih evropskih pogojev in omejitev. Tehnična specifikacija sistematično obravnava težave, ki jih je treba obravnavati pri načrtovanju in izvedbi biometričnih sistemov pri avtomatiziranem mejnem nadzoru, in daje priporočila glede najboljše prakse pri tistih vrstah sistemov, ki so ali bodo uporabljeni v Evropi. Dokument obravnava identifikacijo oseb, vključno z ergonomskimi vidiki, ki vplivajo na pridobivanje biometričnih podatkov. Komunikacija, nadgradljivost infrastrukture in vidiki varnosti, ki niso povezani z biometrijo, niso vključeni. Ta dokument prav tako ne obravnava zahtev strojne opreme in varnosti biometrične opreme in ne daje priporočil glede splošnih postopkov prečkanja meje. Prav tako področje uporabe tega dokumenta ni postopek vnašanja, npr. za elektronske potne liste.
General Information
Standards Content (Sample)
SLOVENSKI STANDARD
01-september-2014
2VHEQDLGHQWLILNDFLMD3ULSRURþLOD]DXSRUDERELRPHWULMHSULHYURSVNHP
DYWRPDWL]LUDQHPPHMQHPQDG]RUX
Personal identification - Recommendations for using biometrics in European Automated
Border Control
Persönliche Identifikation - Empfehlungen für den Einsatz von Biometrie bei der
automatisierten Grenzübergangskontrolle in Europa
Identification personnelle - Recommandations pour l’utilisation de la biométrie dans les
contrôles aux frontières automatisés en Europe
Ta slovenski standard je istoveten z: CEN/TS 16634:2014
ICS:
35.240.15 Identifikacijske kartice in Identification cards and
sorodne naprave related devices
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
TECHNICAL SPECIFICATION
CEN/TS 16634
SPÉCIFICATION TECHNIQUE
TECHNISCHE SPEZIFIKATION
April 2014
ICS 35.240.15
English Version
Personal identification - Recommendations for using biometrics
in European Automated Border Control
Identification personnelle - Recommandations pour l'usage Persönliche Identifikation - Empfehlungen für den Einsatz
de la biométrie lors des contrôles automatisés aux von Biometrie bei der automatisierten
frontières de l'Europe Grenzübergangskontrolle in Europa
This Technical Specification (CEN/TS) was approved by CEN on 11 November 2013 for provisional application.
The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their
comments, particularly on the question whether the CEN/TS can be converted into a European Standard.
CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available
promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS)
until the final decision about the possible conversion of the CEN/TS into an EN is reached.
CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION
EUROPÄISCHES KOMITEE FÜR NORMUNG
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TS 16634:2014 E
worldwide for CEN national Members.
Contents Page
Foreword .3
Introduction .4
1 Scope .5
2 Terms and definitions .5
3 Abbreviated terms .8
4 ABC systems - an overview .9
4.1 Concept .9
4.2 Biometric references .9
4.3 Types of travel documents . 10
4.3.1 General . 10
4.3.2 National identity cards . 10
4.3.3 Biometric passports . 10
4.3.4 Schengen visa . 11
4.4 Topologies of ABC systems . 11
5 Biometric systems in ABC . 11
5.1 General recommendations . 11
5.1.1 Usability and accessibility . 11
5.1.2 Architecture . 13
5.1.3 Biometric security functions . 15
5.1.4 Logging, data protection and privacy. 20
5.2 Recommendations for face biometrics . 20
5.2.1 Condition for good quality sample acquisition . 20
5.2.2 Biometric verification and process design . 21
5.2.3 Security . 22
5.2.4 Usability and environment . 23
5.3 Recommendations for fingerprint biometrics . 23
5.3.1 Condition for good quality sample acquisition . 23
5.3.2 Biometric verification and process design . 24
5.3.3 Usability and environment . 24
5.4 Recommendations for iris biometrics . 25
5.4.1 Condition for good quality sample acquisition . 25
5.4.2 Biometric verification and process design . 26
5.4.3 Security . 27
5.4.4 Usability and environment . 27
Annex A (informative) Testing examples — Facial Images. 29
Annex B (informative) Example process for multi-camera systems for 3D face recognition . 30
Bibliography . 32
Foreword
This document (CEN/TS 16634:2014) has been prepared by Technical Committee CEN/TC 224 “Personal
identification, electronic signature and cards and their related systems and operations”, the secretariat of
which is held by AFNOR.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the following
countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria, Croatia, Cyprus,
Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany,
Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland,
Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom.
Introduction
European countries are increasingly deploying technological solutions to support border guard officers in
fulfilling their duties. Such solutions can consist of inspection systems that directly assist the officers in
screening travellers or of electronic kiosk and gates offering various degrees of automation.
Electronic Machine Readable Travel Documents (eMRTD) as defined in ICAO Document 9303 [27] can
contribute to a high degree of border automation. Under Council Regulation (EC) No 2252/2004 [21], EU
Member States nowadays issue electronic passports containing biometric data (facial image, two fingerprint
images). Ireland and UK are not bound by the Regulation and issue ePassports storing only the facial image
of the holder. Currently a number of European countries have deployed ABC systems which automate border
checks for EU citizens in possession of an electronic passport. The upcoming “Smart Borders Package” will
foresee the introduction of an EU Registered Traveller Programme [23]. This would allow certain groups of
frequent travellers (i.e. business travellers, family members, etc.) from third countries to enter the EU, subject
to appropriate pre-screening, using simplified border checks at ABC systems. The European Commission
proposes that this RTP makes maximum use of existing systems and tools, such as the Biometric Matching
System which underpins the Visa Information System (VIS) and the fingerprint scanners which are used for
this system.
There is a need to harmonize processes containing biometric elements, biometric technology tests and
reporting frameworks (in accordance with Bibliographical Entries [11], [12], [13]) and to link biometric
characteristics with supervision requirements.
This Technical Specification focuses on automated systems that can be supervised by an operator, but such
supervision is not a requirement for the biometric comparison subsystem. The level of supervision is an
operational decision that can be changed according to the needs of the operating authorities.
ABC systems can be classified into four profiles based on their document requirements:
• eMRTD based,
• MRTD based,
• Token other than MRTD - physical and logical, transferable,
• Tokenless.
Regarding the location of the eligibility check, ABC systems can be implemented as:
• One-Step Process,
• Integrated Two-Step Process,
• Segregated Two-Step Process.
This document has been drafted with the contribution of the European Agency for the Management of
Operational Cooperation at the External Borders of the Member States of the European Union (Frontex) and
was adopted by CEN after public enquiry and formal vote according to the CEN Rules of Procedure.
1 Scope
This Technical Specification primarily focuses on biometric aspects of Automated Border Control (ABC)
systems. Drawing on the first European and international ABC deployments, it aims to disseminate best
practice experiences with a view to ensure consistent security levels in European ABC deployments.
Furthermore, the best practice recommendations given here shall help make border control authorities'
processes more efficient, speeding up border clearance, and delivering an improved experience to travellers.
ISO/IEC JTC1/SC 37 has published a series of standards dealing with biometric data coding, interfaces,
performance tests as well as compliance tests. In order to promote global interoperability it is essential that all
these standards are applied in European deployments. However, these standards do not consider national or
regional characteristics; in particular, they do not consider European Union privacy and data protection
regulation as well as European accessibility and usability requirements [22]. Thus, this Technical Specification
amends the ISO standards with respect to special European conditions and constraints.
The Technical Specification systematically discusses issues to be considered when planning and deploying
biometric systems for ABC and gives best practice recommendations for those types of systems that are or
will be in use in Europe. The document deals with personal identification including ergonomic aspects that
have an impact on the acquisition of biometric data.
Communication, infrastructure scalability and security aspects other than those related to biometrics are not
considered. This document also does not consider hardware and security requirements of biometric
equipment and does not recommend general border crossing procedures.
The enrolment process, e. g. for electronic passports, is out of scope of this document.
2 Terms and definitions
2.1
Automated Border Control (ABC) system
automated system which authenticates the electronic machine readable travel document or token, establishes
that the passenger is the rightful holder of the document or token, queries border control records, then
determines eligibility of border crossing according to the pre-defines rules
2.2
biometric capture
collection of, or attempt to collect a signal
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.