CEN/TS 16921:2016

Personal identification - Borders and law enforcement application profiles for mobile biometric identification systems

This Technical Specification primarily focuses on biometric aspects of portable verification and identification systems for law enforcement and border control authorities. The recommendations given here will balance the needs of security, ease of access and data protection.
ISO/IEC has published a series of standards dealing with biometric data coding, interfaces, performance tests as well as compliance tests. It is essential for interoperability that all these standards are applied in European deployments. However, ISO/IEC standards do not consider national or regional characteristics; in particular, they do not consider European Union privacy and data protection regulation as well as accessibility and usability requirements.
This Technical Specification extends the ISO standards by emphasizing specific European needs (for example EU data Protection Directive 95/46/EC and European databases access). The Technical Specification systematically discusses issues to be considered when planning, deploying and using portable identity verification systems and gives recommendations for those types of systems that are or will be in use in Europe.
Communication, infrastructure scalability, and security aspects other than those related to biometrics are not considered. This document also does not consider hardware and security requirements of biometric equipment and does not recommend general identification procedures.

Personenidentifikation - Biometrische Anwendungsprofile für Ordnungs- und Grenkontrollbehörden, die tragbare Identifizierungssysteme einsetzen

Identification des personnes - Profils d'application des systèmes d'identification biométrique mobiles pour les autorités de contrôle aux frontières

Osebna identifikacija - Omejitve in zakonski profili za uporabo pravnega pregona za mobilne biometrične identifikacijske sisteme

Ta tehnična specifikacija se osredotoča predvsem na biometrične vidike prenosnih sistemov preverjanja in identifikacije za organe pregona in mejne kontrole. Podana priporočila bodo izravnala potrebe glede varnosti, enostavnega dostopa in zaščite podatkov.
ISO/IEC je objavil skupino standardov, ki obravnava biometrično kodiranje podatkov, vmesnike, preskuse izvedbe in preskuse skladnosti. Za namene medoperabilnosti je uporaba teh standardov v evropskih izvedbah ključnega pomena. Vendar standardi ISO/IEC ne upoštevajo nacionalnih ali regionalnih značilnosti; zlasti ne upoštevajo uredbe o varovanju zasebnosti in varstvu podatkov Evropske unije ter zahtev glede dostopnosti in uporabnosti.
Ta tehnična specifikacija razširja standarde ISO s poudarjanjem specifičnih evropskih potreb (na primer Direktiva EU o varstvu podatkov 95/46/ES in dostop do evropskih zbirk podatkov). Tehnična specifikacija sistematično obravnava vprašanja, ki jih je treba upoštevati pri načrtovanju, izvedbi in uporabi prenosnih sistemov preverjanja identitete, ter daje priporočila za tiste vrste sistemov, ki so ali bodo uporabljeni v Evropi.
Komunikacija, nadgradljivost infrastrukture in vidiki varnosti, ki niso povezani z biometrijo, niso vključeni. Ta dokument prav tako ne obravnava zahtev glede strojne opreme in varnosti biometrične opreme ter ne daje priporočil glede splošnih identifikacijskih postopkov.

General Information

• Status: Published
• Publication Date: 29-Mar-2016
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: CEN/TC 224 - Machine-readable cards, related device interfaces and operations
• Drafting Committee: CEN/TC 224/WG 18 - Interoperability of biometric recorded data
• Current Stage: 9093 - Decision to confirm - Review Enquiry
• Completion Date: 28-Nov-2023
• Ref Project: SIST-TS CEN/TS 16921:2016 - Personal identification - Borders and law enforcement application profiles for mobile biometric identification systems

Standards Content (Sample)

SLOVENSKI STANDARD
01-julij-2016
2VHEQDLGHQWLILNDFLMD2PHMLWYHLQ]DNRQVNLSURILOL]DXSRUDERSUDYQHJDSUHJRQD
]DPRELOQHELRPHWULþQHLGHQWLILNDFLMVNHVLVWHPH
Personal identification - Borders and law enforcement application profiles for mobile
biometric identification systems
Personenidentifikation - Biometrische Anwendungsprofile für Ordnungskräfte und
Grenzübergangsverantwortliche, die tragbare Identifizierungssysteme einsetzen
Ta slovenski standard je istoveten z: CEN/TS 16921:2016
ICS:
35.240.15 ,GHQWLILNDFLMVNHNDUWLFHýLSQH Identification cards. Chip
NDUWLFH%LRPHWULMD cards. Biometrics
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

CEN/TS 16921
TECHNICAL SPECIFICATION
SPÉCIFICATION TECHNIQUE
March 2016
TECHNISCHE SPEZIFIKATION
ICS 35.240.15
English Version
Personal identification - Borders and law enforcement
application profiles for mobile biometric identification
systems
Personenidentifikation - Biometrische
Anwendungsprofile für Ordnungskräfte und
Grenzübergangsverantwortliche, die tragbare
Identifizierungssysteme einsetzen
This Technical Specification (CEN/TS) was approved by CEN on 25 January 2016 for provisional application.

The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to
submit their comments, particularly on the question whether the CEN/TS can be converted into a European Standard.

CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS
available promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in
parallel to the CEN/TS) until the final decision about the possible conversion of the CEN/TS into an EN is reached.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and
United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2016 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TS 16921:2016 E
worldwide for CEN national Members.

Contents Page
European foreword . 3
Introduction . 4
1 Scope . 5
2 Terms and definitions . 5
3 Symbols and abbreviations . 6
4 Portable identity verification systems . 6
4.1 Introduction . 6
4.2 Typology of portable identity verification systems . 7
4.3 Portable identity verification systems in border control environment . 7
5 General recommendations for portable identity verification systems . 8
5.1 Biometric modalities . 8
5.2 Usability and accessibility. 8
5.3 European data protection regulation . 8
5.4 Architecture . 8
5.4.1 General aspects of architecture . 8
5.4.2 Physical and logical structure . 9
5.5 Biometric security functions . 11
5.6 Biometric sensors . 11
5.6.1 General . 11
5.6.2 Fingerprint sensors . 12
5.6.3 Face image sensors . 13
5.6.4 Iris sensors . 13
5.7 Biometric algorithms . 13
5.8 Network performance . 14
6 Application profiles . 14
6.1 Introduction . 14
6.2 Transportable systems . 14
6.2.1 Profile description . 14
6.2.2 Environment description . 14
6.2.3 Biometric security description evaluation . 14
6.3 Hand-held systems . 15
6.3.1 Profile description . 15
6.3.2 Environment description . 15
6.4 Workstation systems . 16
Bibliography . 17
European foreword
This document (CEN/TS 16921:2016) has been prepared by Technical Committee CEN/TC 224
“Personal identification and related personal devices with secure element, systems, operations and
privacy in a multi sectorial environment”, the secretariat of which is held by AFNOR.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia,
France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta,
Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and the United Kingdom.
Introduction
Most countries around the world are provided with identification systems for law enforcement and
border control. To be consistent in such deployments and processes, technical documents, guidelines
and best practice recommendations are being developed by different groups. However, these
documents are primarily focused on Automated Border Control (ABC) systems and the technical and
operational issues to be considered when planning and deploying such systems in Europe. There is little
guidance covering the circumstances in which identification is not done in a fixed point, or for other
purposes that cover any law enforcement application besides fixed ABC. There is a need for guidance
for the use of mobile or portable identification capabilities as such systems have special biometrics
characteristics: calibration problems, uncontrolled environment, specific biometric security aspects,
that have to be considered differently for fixed point solutions.
Law enforcement authorities can use mobile and especially hand-held systems to check person’s
identity under numerous circumstances, on borders as identity check for border control purposes as
well as inside the national borders for standard law enforcement purposes like suspect identity check,
police check point control, police swoop, etc. In any of these applications, the mobile system may be
able to use identity document, or if not present, to check person’s identity using his/her biometrics
against date base (local or remote).
1 Scope
This Technical Specification primarily focuses on biometric aspects of portable verification and
identification systems for law enforcement and border control authorities. The recommendations given
here will balance the needs of security, ease of access and data protection.
ISO/IEC has published a series of standards dealing with biometric data coding, interfaces, performance
tests as well as compliance tests. It is essential for interoperability that all these standards are applied
in European deployments. However, ISO/IEC standards do not consider national or regional
characteristics; in particular, they do not consider European Union privacy and data protection
regulation as well as accessibility and usability requirements.
This Technical Specification extends the ISO standards by emphasizing specific European needs (for
example EU data Protection Directive 95/46/EC and European databases access). The Technical
Specification systematically discusses issues to be considered when planning, deploying and using
portable identity verification systems and gives recommendations for those types of systems that are or
will be in use in Europe.
Communication, infrastructure scalability, and security aspects other than those related to biometrics
are not considered. This document also does not consider hardware and security requirements of
biometric equipment and does not recommend general identification procedures.
2 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
2.1
biometric verification (1:1)
process of confirming a biometric claim through biometric comparison
[SOURCE: ISO/IEC 2382-37]
2.2
biometric identification (1:N)
process of searching against a biometric enrolment database to find and return the biometric reference
identifier(s) attributable to a single individual
[SOURCE: ISO/IEC 2382-37]
2.3
transportable
system capable of being carried or moved about. Moving this system may require some specialized
procedures
2.4
workstation
system that can be carried by one person from place to place (typically size = suitcase; weight < 15 kg).
Usually, once the system is in place subject shall move to it
2.5
hand-held
system that can be operated by handling in one hand (typically size < 30 cm; weight < 1 kg). Usually,
controller can move to subject with the system
3 Symbols and abbreviations
For the purposes of this document, the following symbols and abbreviations apply.
ABC Automated Border Control
CEN European Committee for Standardization
eMRTD electronic Machine Readable Travel Documents
EU European Union
ICAO International Civil Aviation Organization
IEC International Electrotechnical Commission
ISO International Organization for Standardization
JTC Joint Technical Committee
NIST National Institute of Standards and Technology
RFID Radio-frequency identification
TS Technical Specification
VIS Visa Information System
WG Working Group
4 Portable identity verification systems
4.1 Introduction
A portable identity verification system for law enforcement applications allows performing the identity
verification of a citizen in contexts such as a police road block, foot or car patrol, etc. by comparing (1:1)
a biometric sample captured live using the portable system with a reference sample (stored in an
electronic document or in a remote database) or by performing a 1:N search in a database. Different
functionalities can be
...