ISO/IEC 19785-3:2015

Information technology - Common Biometric Exchange Formats Framework - Part 3: Patron format specifications

ISO/IEC 19785-3:2015 specifies and publishes registered CBEFF patron formats (see ISO/IEC 19785‑1) defined by the CBEFF patron ISO/IEC JTC 1/SC 37, and specifies their registered CBEFF patron format types (see ISO/IEC 19785‑2) and resulting full ASN.1 Object Identifiers.

Technologies de l'information — Cadre de formats d'échange biométriques communs — Partie 3: Spécifications de format d'usager

General Information

• Status: Withdrawn
• Publication Date: 31-Aug-2015
• Withdrawal Date: 31-Aug-2015
• ICS: 35.040 - Information coding
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: ISO/IEC JTC 1/SC 37 - Biometrics
• Drafting Committee: ISO/IEC JTC 1/SC 37/WG 2 - Biometric technical interfaces
• Current Stage: 9599 - Withdrawal of International Standard
• Start Date: 14-Sep-2020
• Completion Date: 30-Oct-2025

Relations

• Consolidated By: ISO 7488:2018 - Dentistry - Mixing machines for dental amalgam
• Effective Date: 06-Jun-2022
• Revised: ISO/IEC 19785-3:2020 - Information technology - Common Biometric Exchange Formats Framework - Part 3: Patron format specifications
• Effective Date: 20-Aug-2016
• Revises: ISO/IEC 19785-3:2007 - Information technology - Common Biometric Exchange Formats Framework - Part 3: Patron format specifications
• Effective Date: 17-Sep-2011
• Revises: ISO/IEC 19785-3:2007/Amd 1:2010 - Information technology - Common Biometric Exchange Formats Framework - Part 3: Patron format specifications - Amendment 1: Support for Additional Data Elements
• Effective Date: 17-Sep-2011

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 19785-3
Second edition
2015-09-01
Information technology — Common
Biometric Exchange Formats
Framework —
Part 3:
Patron format specifications
Technologies de l’information — Cadre de formats d’échange
biométriques communs —
Partie 3: Spécifications de format d’usager
Reference number
©
ISO/IEC 2015
© ISO/IEC 2015, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. [phone]
Fax [phone]
[e-mail]
www.iso.org
ii © ISO/IEC 2015 – All rights reserved

Contents Page
Foreword .vii
Introduction .viii
1 Scope . 1
2 Conformance . 1
3 Normative references . 1
4 Terms and definitions . 2
5 Symbols and abbreviated terms . 2
6 ASN.1 type definitions for CBEFF data elements and abstract values .2
6.1 General . 2
6.2 CBEFF data elements type definitions module . 2
7 Patron format specification: Minimum simple bit-oriented patron format (deprecated) .5
7.1 Patron . 5
7.2 Patron format owner . 5
7.3 Patron format name . 5
7.4 Patron format type. 5
7.5 ASN.1 object identifier for this patron format . 5
7.6 Domain of use . 5
7.7 Version identifier . 5
7.8 CBEFF version . 5
7.9 General . 5
7.10 Bit oriented patron format specification . 6
8 Patron format specification: Minimum simple byte-oriented patron format (deprecated) .6
8.1 Patron . 6
8.2 Patron format owner . 6
8.3 Patron format name . 7
8.4 Patron format type. 7
8.5 ASN.1 object identifier for this patron format . 7
8.6 Domain of use . 7
8.7 Version identifier . 7
8.8 CBEFF version . 7
8.9 General . 7
9 Patron format specification: Fixed-length-fields, byte-oriented patron format using
presence bit-map (deprecated) . 7
9.1 Patron . 7
9.2 Patron format owner . 7
9.3 Patron format name . 8
9.4 Patron format type. 8
9.5 ASN.1 object identifier for this patron format . 8
9.6 Domain of use . 8
9.7 Version identifier . 8
9.8 CBEFF version . 8
9.9 General . 8
9.10 Specification . 9
10 Patron format specification: Fixed-length-fields, bit-oriented patron format using
presence bit-map (deprecated) .11
10.1 Patron .11
10.2 Patron format owner .11
10.3 Patron format name .12
10.4 Patron format type.12
10.5 ASN.1 object identifier for this patron format .12
© ISO/IEC 2015 – All rights reserved iii

10.6 Domain of use .12
10.7 Version identifier .12
10.8 CBEFF version .12
10.9 General .12
10.10 Specification .12
11 Patron format specification: TLV-encoded patron format, for use with smartcards
or other tokens .13
11.1 Patron .13
11.2 Patron format owner .13
11.3 Patron format name .13
11.4 Patron format type.13
11.5 ASN.1 object identifier for this patron format .13
11.6 Domain of Use .14
11.7 Version identifier .14
11.8 CBEFF version .14
11.9 General .14
11.10 ASN.1 specification .16
11.11 Tabular representations for information .17
11.11.1 The Biometric Information Template used for on-card biometric comparison .17
11.11.2 The Biometric Information Template used for off-card biometric comparison .19
11.12 The Group BIT Data Object .21
11.13 Abstract values and encodings for biometric type and subtype .21
11.14 Illustrative examples .22
12 Patron format specification: complex patron format (deprecated) .22
12.1 Patron .22
12.2 Patron format owner .22
12.3 Patron format name .22
12.4 Patron format type.22
12.5 ASN.1 object identifier for this patron format .22
12.6 Domain of use .23
12.7 Version identifier .23
12.8 CBEFF version .23
12.9 General .23
12.10 Specification .24
12.11 Illustrative examples .28
12.12 ASN.1 definition (provided for illustrative purposes only) .32
13 Patron format specification: XML patron format (with additional data elements) .34
13.1 Patron .34
13.2 Patron format owner .34
13.3 Patron format name .34
13.4 Patron format type.34
13.5 ASN.1 object identifier for this patron format .34
13.6 Domain of use .34
13.7 Version identifier .34
13.8 CBEFF version .34
13.9 General .34
13.10 Specification .35
13.11 Element .36
13.11.1 Syntax .36
13.11.2 Semantics .36
13.12 Element .37
13.12.1 Syntax .37
13.12.2 Semantics .37
13.13 Element .38
13.13.1 Syntax .38
13.13.2 Semantics .38
13.14 Element .38
iv © ISO/IEC 2015 – All rights reserved

13.14.1 Syntax .38
13.14.2 Semantics .39
13.15 Element .40
13.15.1 Syntax .40
13.15.2 Semantics .41
13.16 Element of BDBInfoType.45
13.16.1 Syntax .45
13.16.2 Semantics .45
13.17 Element .45
13.17.1 Syntax .45
13.17.2 Semantics .45
13.18 Element .46
13.18.1 Syntax .46
13.18.2 Semantics .46
13.19 Element .46
13.19.1 Syntax .46
13.19.2 Semantics .46
13.20 Element .47
13.20.1 Syntax .47
13.20.2 Semantics .47
13.21 Element .47
13.21.1 Syntax .47
13.21.2 Semantics .47
13.22 Element .47
13.22.1 Syntax .47
13.22.2 Semantics .48
13.23 Element .48
13.23.1 Syntax .48
13.23.2 Semantics .48
13.24 Element .48
13.24.1 Syntax .48
13.24.2 Semantics .49
13.25 Element of SBInfoType .49
13.25.1 Syntax .49
13.25.2 Semantics .49
13.26 Representation of Integers .49
13.27 Representation of Octet Strings .49
13.28 Representation of Date and Time of the Day .50
13.29 Representation of Universally Unique Identifiers .50
13.30 XML schema of the patron format .51
13.31 ASN.1 schema of the patron format .54
13.32 An example of a simple BIR in XML encoding (complying with the ASN.1 schema,
the XSD schema, and the normative textual description) .56
13.33 An example of a complex BIR in XML encoding (complying with the ASN.1 schema,
the XSD schema, and the normative textual description) .57
14 Patron format specification: complex patron format (with additional data elements) .59
14.1 Patron .59
14.2 Patron format owner .59
14.3 Patron format name .59
14.4 Patron format type.59
14.5 ASN.1 object identifier for this patron format .60
14.6 Domain of use .60
14.7 Version identifier .60
14.8 CBEFF version .60
14.9 General .60
14.10 Specification .61
14.11 Illustrative examples .66
14.12 ASN.1 definition (provided for illustrative purposes only) .70
© ISO/IEC 2015 – All rights reserved v

Annex A (informative) Guidelines on the specification of patron formats .73
Annex B (informative) Conformance of the defined patron formats .77
vi © ISO/IEC 2015 – All rights reserved

Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work. In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical
Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/IEC JTC 1, Information technology, Subcommittee
SC 37, Biometrics.
This second edition cancels and replaces the first edition (ISO/IEC 19785-3:2007), Clauses 13 and
15 of which have been merged into Clause 13 (XML patron format). Minor updates have been made
throughout the document to reflect vocabulary harmonization and updated committee procedures.
It also incorporates the Amendment ISO/IEC 19785-3:2007/Amd 1:2010.
ISO/IEC 19785 consists of the following parts, under the general title Information technology — Common
Biometric Exchange Formats Framework:
— Part 1: Data element specifications
— Part 2: Procedures for the operation of the Biometric Registration Authority
— Part 3: Patron format specifications
— Part 4: Security block format specifications
© ISO/IEC 2015 – All rights reserved vii

Introduction
Biometric-based authentication systems and applications are expected to support multiple biometric
devices and multiple biometric data formats. The Common Biometric Exchange Formats Framework
(CBEFF) promotes interoperability of biometric-based application programs and systems developed by
different vendors by facilitating biometric data interchange.
ISO/IEC 19785-1:2006 defines the following items that enable standardized biometric data interchange:
a) a 3-part standardized structure for biometric information records (BIRs) consisting of:
1) standardized biometric headers (SBHs);
2) biometric data blocks (BDBs, which can be standardized or proprietary);
3) optional security blocks (SBs);
b) variations of the 3-part structure to support BIRs containing:
1) only one SBH, one BDB, and possibly one SB (simple BIRs);
2) more than one BDB along with the SBHs necessary to encode the BIR’s structure and some
number of SBs (complex BIRs);
c) more than 20 data elements and their associated abstract values that can be used in an SBH to
describe attributes of a BDB within a BIR, as well as attributes of the BIR itself;
d) the concept of a CBEFF patron format (but ISO/IEC 19785-1:2006 does not itself define any patron
formats), which is a detailed specification of the structure and content of a particular, standardized
BIR;
e) the concept of a CBEFF patron, which is a recognized standards organization that has registered
with the Biometric Registration Authority and declared its intention to define CBEFF patron format
specifications;
f) the concept of the Biometric Registration Authority (RA), which is the mechanism by which unique
identifiers are assigned to organizations (standards organizations, vendors, and others) that create
BDB formats and CBEFF patron formats (ISO/IEC 19785-2:2006 defines the responsibilities and
operations of the Biometric RA);
g) CBEFF data elements [see c) above] that support, within the SBH, the unique identifiers assigned by
the Biometric RA for biometric organizations, BDB formats, biometric products, capture devices,
feature extraction algorithms, comparison algorithms, quality algorithms, compression algorithms,
patron formats, and SB formats.
Patron formats can be specified in other standards documents and registered in the CBEFF Registration
Authority (see ISO/IEC 19785-2:2006), for example, there is a registered patron format specified in
ISO/IEC 9834-1:2006. For a complete list of registered patron formats, consult the CBEFF Registration
Authority web site.
This part of ISO/IEC 19785 specifies a number of CBEFF patron formats that are considered to be
of general utility in a variety of domains of use. Additional SC 37 patron format specifications can
be published as new clauses in future amendments to this part of ISO/IEC 19785, or in other SC 37
International Standards.
The CBEFF patron format type unambiguously identifies the CBEFF patron format within the scope of
the CBEFF patron format owner. The CBEFF patron format type is unambiguous within the scope of an
ASN.1 Object Identifier (see ISO/IEC 9834-1) that identifies the Biometric Registration Authority (see
viii © ISO/IEC 2015 – All rights reserved

ISO/IEC 19785-2:2006). That ASN.1 Object Identifier (OID) is itself globally unambiguous within the
scope of all ASN.1 Object Identifiers, which forms a widely-used global name-space.
NOTE ASN.1 Object Identifiers are used by ITU-T, ITU-R, the UPU, many ISO, and IEC Standards, to identify
some IETF MIME types, and for many other purposes. (These acronyms have not been spelled out, as the precise
identification of these organizations is not relevant to this International Standard.)
The combination of the Biometric Registration Authority OID, the CBEFF patron format owner, and the
CBEFF patron format type forms a larger ASN.1 OID that provides an unambiguous identification of
the CBEFF patron format. This part of ISO/IEC 19785 specifies, for each CBEFF patron format that it
defines, the ASN.1 OID that unambiguously identifies that CBEFF patron format.
© ISO/IEC 2015 – All rights reserved ix

INTERNATIONAL STANDARD ISO/IEC 19785-3:2015(E)
Information technology — Common Biometric Exchange
Formats Framework —
Part 3:
Patron format specifications
1 Scope
This part of ISO/IEC 19785 specifies and publishes registered CBEFF patron formats (see
ISO/IEC 19785-1) defined by the CBEFF patron ISO/IEC JTC 1/SC 37, and specifies their registered
CBEFF patron format types (see ISO/IEC 19785-2) and resulting full ASN.1 Object Identifiers.
2 Conformance
Clauses 6 onwards of this part of ISO/IEC 19785 specify at the bit-level the set of bit-patterns (and their
semantics) that can form a valid instance of the CBEFF patron format that is defined in that clause,
together with the ASN.1 Object Identifier for that set of bit-patterns.
A bit-pattern identified by one of the ASN.1 Object Identifiers allocated in this part of ISO/IEC 19785
conforms to this specification if and only if it is one of the bit-patterns in the set identified by that ASN.1
Object Identifier.
If an implementation claims that it supports (and conforms to) a CBEFF patron format defined in this
part of ISO/IEC 19785, then it shall either be:
a) capable of generating at least one of the set of bit patterns specified for that CBEFF patron format,
and shall never generate bit patterns that are not part of the set, or
b) capable of decoding (determining the semantics of), or in any other way processing all the bit-
patterns in the set of bit patterns specified for that CBEFF patron format.
NOTE If a decoding implementation is presented with a bit pattern that purports to be part of the set, but it
is not, there is no requirement placed on the action taken by the implementation, but it is normally expected that
the implementation will guard against denial of service or other security threats in such circumstances.
3 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 7816-4, Identification cards — Integrated circuit cards — Part 4: Organization, security and
commands for interchange
ISO/IEC 7816-6, Identification cards — Integrated circuit cards — Part 6: Interindustry data elements for
interchange
ISO/IEC 7816-11, Identification cards — Integrated circuit cards — Part 11: Personal verification through
biometric methods
ISO 8601, Data elements and interchange formats — Information interchange — Representation of dates
and times
© ISO/IEC 2015 – All rights reserved 1

ISO/IEC 8824-1, Information technology — Abstract Syntax Notation One (ASN.1): Specification of basic
notation — Part 1
ISO/IEC 8825-1, Information technology — ASN.1 encoding rules: Specification of Basic Encoding Rules
(BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER) — Part 1
ISO/IEC 8825-4:2008, Information technology — ASN.1 encoding rules: XML Encoding Rules (XER) —
Part 4
ISO/IEC 10646, Information technology — Universal Coded Character Set (UCS)
ISO/IEC 19785-1:2006, Information technology — Common Biometric Exchange Formats Framework —
Part 1: Data element specification
ISO/IEC 19785-2, Information technology — Common Biometric Exchange Formats Framework — Part 2:
Procedures for the operation of the Biometric Registration Authority
ISO/IEC 24787, Information technology — Identification cards — On-card biometric comparison
4 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 19785-1 and the following
apply.
4.1
TLV encoding
common form of encoding (with many variants) in which every field in the encoding has an assigned
type (or tag) that is unambiguous in some context, a length determinant, and a value part that can
contain further TLV components, nested to any depth
5 Symbols and abbreviated terms
For the purposes of this document, the symbols and abbreviated terms given in ISO/IEC 19785-1:2006
and the following apply.
TLV Type (or Tag) Length and Value
6 ASN.1 type definitions for CBEFF data elements and abstract values
6.1 General
This clause specifies in 6.2 an ASN.1 module CBEFF-DATA-ELEMENTS that defines types (see ITU-T
Rec. X.680 | ISO/IEC 8824-1) for each of the CBEFF data elements. These type definitions are fully
aligned with the abstract values of CBEFF data elements specified in ISO/IEC 19785-1:2006 (conforming
to CBEFF version “major(2) minor(0)”, and do not in themselves specify encodings of those abstract
values. Encodings are determined by the patron formats specified in ASN.1 in this part of ISO/IEC 19785.
6.2 CBEFF data elements type definitions module
CBEFF-DATA-ELEMENTS
{iso standard 19785 mod
...