ISO/IEC 19785-2:2021

Information technology - Common Biometric Exchange Formats Framework - Part 2: Biometric registration authority

This document describes the identification scheme used by the Biometric Registration Authority (BRA) in preparing, maintaining and publishing registers of identifiers for biometric organizations and biometric objects, and provides a description of BRA responsibilities and services. Procedural requirements and recommendations are not within the scope of this document and are maintained separately on the ISO/IEC JTC 1/SC 37 website.

Technologies de l'information — Cadre de formats d'échange biométriques communs — Partie 2: Autorité d'enregistrement biométrique

General Information

• Status: Published
• Publication Date: 13-Dec-2021
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: ISO/IEC JTC 1/SC 37 - Biometrics
• Drafting Committee: ISO/IEC JTC 1/SC 37/WG 2 - Biometric technical interfaces
• Current Stage: 6060 - International Standard published
• Start Date: 14-Dec-2021
• Due Date: 27-Feb-2021
• Completion Date: 14-Dec-2021

Relations

• Revises: ISO/IEC 19785-2:2006/Amd 1:2010 - Information technology - Common Biometric Exchange Formats Framework - Part 2: Procedures for the operation of the Biometric Registration Authority - Amendment 1: Additional registrations
• Effective Date: 10-Mar-2018
• Revises: ISO/IEC 19785-2:2006 - Information technology - Common Biometric Exchange Formats Framework - Part 2: Procedures for the operation of the Biometric Registration Authority
• Effective Date: 10-Mar-2018

Overview

ISO/IEC 19785-2:2021 is an international standard titled Information technology - Common Biometric Exchange Formats Framework - Part 2: Biometric registration authority. Published by ISO and IEC, this document defines the identification scheme used by the Biometric Registration Authority (BRA) for preparing, maintaining, and publishing registers of identifiers for biometric organizations and biometric objects. It supports global interoperability by providing unambiguous and consistent identifiers, enhancing biometric data exchange frameworks across various platforms and vendors.

This standard focuses on the role of the BRA in enabling standardized identification for biometric entities and products without delving into procedural requirements, which are managed separately on the ISO/IEC JTC 1/SC 37 website.

Key Topics

• Biometric Organization Identifiers
  The standard mandates a scheme for assigning unique 16-bit positive integer identifiers to biometric organizations. Values from 0xF000 to 0xFFFF and zero are reserved and cannot be used for valid organizations.

• Biometric Object Identifiers
  Similarly, biometric objects within each organization receive unique 16-bit identifiers to distinguish objects such as data formats, algorithms, devices, and biometric categories.

• ASN.1 Object Identifiers Structure
  BRA utilizes a hierarchical ASN.1 Object Identifier (OID) tree for global uniqueness. Each biometric entity is identified by a sequence of integer arcs, ensuring unambiguous worldwide assignment. This approach supports standardized interoperability by defining:

  • Object identifier components with values between 1 and 65535
  • Separate arcs for biometric organizations, biometric information record (BIR) formats, biometric data block (BDB) formats, security blocks (SB), and specialized biometric products
  • Subcategories like capture devices, quality algorithms, feature extraction & comparison algorithms, compression methods, and presentation attack detection (PAD)

• Biometric Registration Authority Responsibilities
  BRA manages the global registry of these identifiers, validating applications from biometric organizations and biometric object registrants. It publishes updated registers to maintain consistent identifier usage across systems without enforcing procedural standards directly within this document.

Applications

• Interoperable Biometric Systems
  ISO/IEC 19785-2:2021 ensures seamless interoperability among diverse biometric systems by providing a common framework to identify biometric entities unambiguously-critical when combining devices or algorithms developed by different vendors.

• Biometric Data Exchange
  The standard underpins the Common Biometric Exchange Formats Framework (CBEFF), which is crucial for biometric information record (BIR) format definitions and data interchange, permitting trustworthy communication of biometric information in security and authentication applications.

• Vendor-Neutral Biometric Solutions
  Organizations adopting this standard facilitate vendor neutrality by aligning with globally recognized identifiers, simplifying integration, maintenance, and updates in biometric systems.

• Support for Advanced Biometric Products
  Registration extends to presentation attack detection (PAD) technologies for enhancing biometric security against spoofing and fraud, addressing emerging needs in biometric authentication.

Related Standards

• ISO/IEC 19785-1: Common Biometric Exchange Formats Framework – Part 1: Data element specification
  Defines the biometric data elements and formats that are identified and registered under Part 2.

• ISO/IEC 2382-37: Information technology - Vocabulary - Part 37: Biometrics
  Provides standardized terms and definitions essential for understanding biometric concepts referenced in the standard.

• ISO/IEC 8824-1: Specification of ASN.1 (Abstract Syntax Notation One) used for defining the object identifier structure.

• ISO/IEC JTC 1/SC 37 Procedures
  Maintains procedural guidelines and recommendations related to biometric registration authorities and is hosted on the ISO/IEC SC 37 website.

---

Keywords: Biometric Registration Authority, ISO/IEC 19785-2, biometric organization identifiers, biometric object identifiers, ASN.1 object identifier, Common Biometric Exchange Formats Framework, biometric interoperability, presentation attack detection, biometric data exchange, biometric standards, biometric systems integration, CBEFF, biometric product registration.

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 19785-2
Second edition
2021-12
Information technology — Common
Biometric Exchange Formats
Framework —
Part 2:
Biometric registration authority
Technologies de l'information — Cadre de formats d'échange
biométriques communs —
Partie 2: Autorité d'enregistrement biométrique
Reference number
© ISO/IEC 2021
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
© ISO/IEC 2021 – All rights reserved

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 2
5 General . 2
5.1 Identifiers for biometric organizations and biometric objects . 2
5.1.1 Biometric organization identifiers . 2
5.1.2 Biometric object identifiers . 2
5.2 ASN.1 object identifier components . 2
5.3 Biometric object type identifiers . 5
6 Biometric Registration Authority . 5
6.1 Identification . 5
6.2 Services and responsibilities . 5
Bibliography . 6
iii
© ISO/IEC 2021 – All rights reserved

Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work.
The procedures used to develop this document and those intended for its further maintenance
are described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria
needed for the different types of document should be noted. This document was drafted in
accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives or
www.iec.ch/members_experts/refdocs).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents) or the IEC
list of patent declarations received (see https://patents.iec.ch).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to
the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see
www.iso.org/iso/foreword.html. In the IEC, see www.iec.ch/understanding-standards.
This document was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology,
Subcommittee SC 37, Biometrics.
This second edition cancels and replaces the first edition (ISO/IEC 19785-2:2006), which has been
technically revised. It also incorporates the Amendment ISO/IEC 19785-2:2006/Amd1:2010 and the
Technical Corrigendum ISO/IEC 19785-2:2006/Cor:2013.
The main changes are as follows:
— Biometric Registration Authority procedural requirements and recommendations were removed
from the standard and published on the ISO/IEC JTC 1/SC 37 website to comply with JTC 1
Supplement, JF.3.3.
— The registration identifier scheme was revised to correct issues with a valid representation of the
ASN.1 object identifier component.
— Support was added for additional biometric object types, including presentation attack detection
(PAD).
— Other minor technical and editorial changes were made to correct technical requirements and to
improve readability and organization.
A list of all parts in the ISO/IEC 19785 series can be found on the ISO and IEC websites.
Any feedback or questions on this document should be directed to the user’s national standards
body. A complete listing of these bodies can be found at www.iso.org/members.html and
www.iec.ch/national-committees.
iv
© ISO/IEC 2021 – All rights reserved

Introduction
Biometric-based authentication systems and applications are expected to support multiple biometric
devices, multiple biometric data formats and multiple algorithms for feature extraction, comparison,
quality determination, presentation attack detection (PAD) and compression, possibly each from
a different vendor. The Common Biometric Exchange Formats Framework (CBEFF) promotes
interoperability of biometric-based application program and systems developed by different vendors
by facilitating biometric data interchange. This document supports such exchanges by providing
unambiguous identification of biometric organizations, formats and products, with separate registration
of identifiers for components of products that are biometric products, including specialized products
like capture devices, feature extraction algorithms, comparison algorithms, quality algorithms, PAD
mechanisms or compression algorithms.
The Biometric Registration Authority (BRA) is the entity that facilitates globally unambiguous
identification of biometric objects and biometric organizations by maintaining and publishing a registry
of unique ASN.1 object identifiers. This document describes the universal identification scheme that
allows assignment of unique and unambiguous identifiers, and avoids changes in identifiers over time.
A general description of the BRA responsibilities and registration services is also included.
The publication of the registers promotes compatibility in interchange of biometric data and improves
interoperability of biometric systems. Registration provides an identifier, but registration should not
be regarded as a standardization procedure. Nevertheless, as a matter apart from registration, the
registered object may, but need not, be the subject of an international, national or other standard.
v
© ISO/IEC 2021 – All rights reserved

INTERNATIONAL STANDARD ISO/IEC 19785-2:2021(E)
Information technology — Common Biometric Exchange
Formats Framework —
Part 2:
Biometric registration authority
1 Scope
This document describes the identification scheme used by the Biometric Registration Authority
(BRA) in preparing, maintaining and publishing registers of identifiers for biometric organizations
and biometric objects, and provides a description of BRA responsibilities and services. Procedural
requirements and recommendations are not within the scope of this document and are maintained
1)
separately on the ISO/IEC JTC 1/SC 37 website .
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 2382-37, Information technology — Vocabulary — Part 37: Biometrics
ISO/IEC 19785-1, Information technology — Common Biometric Exchange Formats Framework — Part 1:
Data element specification
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 2382-37 and
ISO/IEC 19785-1 and the following apply.
ISO and IEC maintain terminology databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at https:// www .electropedia .org/
3.1
applicant
organization requesting registration as a CBEFF biometric organization, or a registered CBEFF
biometric organization requesting registration of a biometric object
3.2
open standard
standard that is subject to vetting procedures that ensure that it is technically correct and accurate and
has wide-spread approval
3.3
register
record of assigned identifiers for CBEFF biometric organizations and biometric objects
1) ISO/IEC JTC 1/SC 37 website: https:// committee .iso .org/ home/ jtc1sc37. BRA procedural information:
https:// committee .iso .org/ files/ live/ sites/ jtc1sc37/ files/ ABOUT/ Procedural _Information _BRA .pdf.
© ISO/IEC 2021 – All rights reserved

4 Abbreviated terms
For the purposes of this document, the abbreviated terms given in ISO/IEC 19785-1 and the following
apply.
ASN.1 Abstract Syntax Notation One
BDB biometric data block
BIR biometric information record
BRA biometric registratio
...