ISO/IEC 19794-11:2013/Amd 1:2014

Information technology — Biometric data interchange formats — Part 11: Signature/sign processed dynamic data — Amendment 1: Conformance test assertions

Technologies de l'information — Formats d'échange de données biométriques — Partie 11: Données dynamiques traitées de signature/signe — Amendment 1: Titre manque

General Information

• Status: Published
• Publication Date: 08-Jul-2014
• ICS: 35.040 - Information coding
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: ISO/IEC JTC 1/SC 37 - Biometrics
• Drafting Committee: ISO/IEC JTC 1/SC 37/WG 3 - Biometric data interchange formats
• Current Stage: 6060 - International Standard published
• Start Date: 24-Oct-2016
• Completion Date: 09-Jul-2014

Relations

• Consolidated By: ISO 21298:2017 - Health informatics — Functional and structural roles
• Effective Date: 06-Jun-2022
• Amends: ISO/IEC 19794-11:2013 - Information technology — Biometric data interchange formats — Part 11: Signature/sign processed dynamic data
• Effective Date: 08-May-2021

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 19794-11
First edition
2013-02-15
AMENDMENT 1
2014-07-15
Information technology — Biometric
data interchange formats —
Part 11:
Signature/sign processed dynamic
data
AMENDMENT 1: Conformance test
assertions
Technologies de l’information — Formats d’échange de données
biométriques —
Partie 11: Données dynamiques traitées de signature/signe
AMENDEMENT 1: .
Reference number
ISO/IEC 19794-11:2013/Amd.1:2014(E)
©
ISO/IEC 2014

---------------------- Page: 1 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2014
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail [e-mail]
Web www.iso.org
Published in Switzerland
ii © ISO/IEC 2014 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)

Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2. www.iso.org/directives
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of any
patent rights identified during the development of the document will be in the Introduction and/or on
the ISO list of patent declarations received. www.iso.org/patents
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical Barriers
to Trade (TBT), see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/IEC JTC 1, Information Technology, Subcommittee
SC 37, Biometrics.
© ISO/IEC 2014 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)
Information technology — Biometric data interchange
formats —
Part 11:
Signature/sign processed dynamic data
AMENDMENT 1: Conformance test assertions
Page 1, Clause 1
Add the following text to the existing Scope:
“This part of ISO/IEC 19794 also specifies elements of conformance testing methodology, test assertions,
and test procedures as applicable to this part of ISO/IEC 19794. It establishes test assertions pertaining
to the structure of the signature/sign processed dynamic data format (Type A Level 1 as defined in
ISO/IEC 19794-1X AMD 1), test assertions pertaining to internal consistency of the types of values that
may be contained within each field (Type A Level 2 as defined in ISO/IEC 19794-1X AMD 1), and semantic
test assertions (Type A Level 3 as defined in ISO/IEC 19794-1X AMD 1).
The conformance testing methodology specified in this part of ISO/IEC 19794 does not establish:
• tests of other characteristics of biometric products or other types of testing of biometric products
(e.g. acceptance, performance, robustness, security),
• tests of conformance of systems that do not produce data records conforming to the requirements
of this part of ISO/IEC 19794.”

Page 1, Clause 2
Add the following text to the existing “Conformance” clause:
“Biometric data interchange format conformance tests conform to this part of ISO/IEC 19794 if they
satisfy all of the normative requirements set forth in clauses X, Y, and Z. Specifically, they shall use the
test methodology specified in Clauses A, B, and C of ISO/IEC 19794-1x AMD 2, and all Level 1, Level 2 and
Level 3 tests shall use the assertions defined in Table N of Clause M in this part of ISO/IEC 19794.
Implementations of this part of ISO/IEC 19794 tested according to the specified methodology shall be
able to claim conformance only to those biometric data record (BDB) requirements specified in this part
of ISO/IEC 19794 that are tested by the test methods established by this methodology.
Implementations of this part of ISO/IEC 19794 do not necessarily need to conform to all possible aspects
of this part of ISO/IEC 19794, but only to those requirements that are claimed to be supported by the
implementation in an implementation conformance statement (ICS), filled out in accordance with
Clause K of ISO/IEC 19794-1x AMD 1 and Table K of Clause R of this part of ISO/IEC 19794.”

Page 17, Annex A
Replace the existing Annex A by the following:
© ISO/IEC 2014 – All rights reserved 1

---------------------- Page: 4 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)

Annex A
(normative)

Conformance test assertions
A.1 Introduction
This normative annex specifies elements of conformance testing methodology, test assertions, and test
procedures as applicable to signature/sign processed dynamic data.
The normative annex establishes
— conformance test assertions on the structure and internal consistency of signature/sign processed
dynamic data as specified in this part of ISO/IEC 19794 (Type A Level 1 and Level 2 as defined in
ISO/IEC 19794-1X AMD 1),
— semantic conformance test assertions on signature/sign processed dynamic data as specified in
this part of ISO/IEC 19794.
This normative annex does not establish
— conformance test assertions on CBEFF structures embedding signature/sign processed dynamic
data,
— test assertions on other characteristics of biometric products (e.g. acceptance, performance,
robustness, security),
— conformance test assertions on systems that do not produce signature/sign processed dynamic
data as specified in this part of ISO/IEC 19794.
The conformance testing methodology specified in ISO/IEC 19794-1X AMD 1 shall apply. The content
of the tables below is based on ISO/IEC 19794-1X AMD 1 and shall only be used in the context of that
conformance testing methodology.
The conformance test assertions are listed in the order in which the corresponding fields are required
to appear, if present, in a conforming record.
A.2 Table of requirements
The normative requirements of this part of ISO/IEC 19794 are listed in the Table A.1. The supplier of the
IUT shall explain which optional components of the standard are supported and the testing laboratory
shall note the results of the test.
2 © ISO/IEC 2014 – All rights reserved

---------------------- Page: 5 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)

Table A.1 — Requirements of the Base Standard
Reference
Requirement IUT Sup- Supported Test
in Base Requirement Summary Level Status
ID port Range Result
Standard
R-1 2 Satisfies all of the norma- O
tive requirements related
to the data structure, data
values and the relation-
ships between its data
elements, as specified in
Clause 8 of this part of ISO/
IEC 19794
R-2 2 Satisfies all of the norma- O
tive requirements related
to the relationship between
its data values and the
input biometric data from
which the biometric data
record was generated, as
specified in Clause 8 of this
part of ISO/IEC 19794
R-3 5.1 The coordinate system O
used to express the pen
position shall be a two-
dimensional Cartesian
coordinate system.
R-4 5.1 The x-axis shall be the O
horizontal axis of the
writing plane, with the x
coordinates increasing to
the right starting at 0.
R-5 5.1 The y-axis shall be the O
vertical axis of the writing
plane, with y coordinates
increasing upwards start-
ing at 0.
R-6 5.2 The more significant bytes O
of any multi-octet quan-
tity are stored at lower
addresses in memory
than (and are transmit-
ted before) less significant
bytes.
R-7 7.2 The X, Y coordinates, pres- O
sure F, time T, and type of
event shall be recorded
R-8 8.1 Each record shall pertain O
to a single subject
R-9 8.1 Each record shall contain a O
signature/sign processed
dynamic record (consisting
of one or more representa-
tions)
© ISO/IEC 2014 – All rights reserved 3

---------------------- Page: 6 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)

Table A.1 (continued)
Reference
Requirement IUT Sup- Supported Test
in Base Requirement Summary Level Status
ID port Range Result
Standard
R-10 8.2 The format identifier shall 1 M
be recorded in four bytes.
The format identifier shall
consist of three characters
“SPD” followed by a zero
byte as a NULL string ter-
minator.
R-11 8.2 The number for the ver- 1 M
sion of that part of ISO/
IEC 19794 used for con-
structing the BDIR shall be
placed in four bytes. This
version number shall con-
sist of three ASCII numer-
als followed by a zero byte
as a NULL string termina-
tor. The first and second
character will represent
the major version number
and the third character will
represent the minor revi-
sion number. The version
number shall be “010” –
Version 1 revision 0.
R-12 8.2 The length (in bytes) of 2 M
the entire BDIR shall be
recorded in four bytes.
This count shall be the
total length of the BDIR
including the general
record header and one
or more representation
records.
R-13 8.2 The total number of 2 M
representation records
contained in the BDIR shall
be recorded in two bytes. A
minimum of one represen-
tation is required.
R-14 8.2 The one-byte certification 1 M
flag shall indicate whether
each Representation
Header includes a certifica-
tion block. Its value shall
be 00 to indicate that no
Hex
representation contains a
certification block.
R-15 8.3.1 The Representation Length 2 M
recorded in 4 bytes shall
denote the length in bytes
of the representation
header including the repre-
sentation header fields.
4 © ISO/IEC 2014 – All rights reserved

---------------------- Page: 7 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)

Table A.1 (continued)
Reference
Requirement IUT Sup- Supported Test
in Base Requirement Summary Level Status
ID port Range Result
Standard
R-16 8.3.1 The capture date and time 1 M
field shall indicate when
the capture of this repre-
sentation started in Coor-
dinated Universal Time
(UTC). The capture date
and time field shall consist
of 9 bytes. Its value shall be
encoded in the form given
in ISO/IEC 19794-1.
R-17 8.3.1 The capture device tech- 1 M
nology ID shall be encoded
in one byte. This field
shall indicate the class of
capture device technol-
ogy used to acquire the
captured biometric sample.
A value of 00 indicates
Hex
unknown or unspecified
technology.
R-18 8.3.2 Capture device technology 1 M
ID shall be encoded in 1
byte where:
00 is Unknown or
Hex
unspecified
01 is Electromagnetic
Hex
02 is Semiconductor
Hex
04 is Special pen with
Hex
acceleration sensors
08 is Special pen with
Hex
optical sensors
R-19 8.3.1 The capture device vendor 1 M
identifier shall identify the
biometric organization that
owns the product that cre-
ated the BDIR. The capture
device algorithm vendor
identifier shall be encoded
in two bytes carrying a
CBEFF biometric organiza-
tion identifier (registered
by IBIA or other approved
registration authority).
A value of all zeros shall
indicate that the capture
device vendor is unre-
ported.
© ISO/IEC 2014 – All rights reserved 5

---------------------- Page: 8 ----------------------
ISO/IEC 19794-11:2013/Amd.1:2014(E)

Table A.1 (continued)
Reference
Requirement IUT Sup- Supported Test
in Base Requirement Summary Level Status
ID port Range Result
Standard
R-20 8.3.1 The capture device type 1 M
identifier shall be encoded
in two bytes and shall
identify the product type
that created the BDIR. It
shall be assigned by the
registered product owner
or other approved registra-
tion authority. A value of
all zeros shall indicate that
the capture device type is
unreported.
R-21 8.3.1 A quality record shall 1 M
consist of a length field
followed by zero or more
quality blocks. The length
field shall consist of one
byte. It shall represent the
number of quality blocks as
an unsigned integer.
R-22 8.3.3 Each quality block shall 1 M
consist of
– a quality score,
– a quality algorithm ven-
dor identifier, and
– a quality algorithm iden-
tifier.
R-23 8.3.3 A quality score shall be 1 M
encoded in one byte as an
unsigned integer. Allowed
values are
– 0 to 100 with higher
values indicating better
quality,
– 255, i.e. FF , for indi-
Hex
cating that an attempt to
calculate a quality score
failed.
R-24 8.3.3 The quality algorithm 1 M
vendor identifier shall
identify the provider of
the q
...