iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
SIST

SIST-TP CEN/TR 18108:2025

(Main)

Personal identification - Usage of biometrics in breeder documents

Personal identification - Usage of biometrics in breeder documents

This document provides guidance on usage of biometrics in breeder documents, in particular regarding
- encoding of biometric reference data,
- data quality maintenance for biometric reference data,
- data authenticity maintenance for biometric reference data, and
- privacy preservation of biometric reference data.
This document addresses advantages and disadvantages of biometric modalities, in particular regarding
- verification performance,
- privacy impact,
- feasibility of biometric acquisition considering the age of the capture subjects,
- limits of validity and need for updating biometric reference data.
The following aspects are out of scope:
- format and structure of breeder documents,
- general security aspects.

Personenidentifizierung - Verwendung biometrischer Daten in Hoheitsdokumenten

Identification des personnes - Utilisation des données biométriques dans les documents sources

Osebna identifikacija - Uporaba biometričnih podatkov v izvornih dokumentih

General Information

Status
Published
Public Enquiry End Date
16-Jul-2024
Publication Date
07-Jan-2025
ICS
35.240.15 - Identification cards. Chip cards. Biometrics
Technical Committee
ITC - Information technology
Current Stage
6060 - National Implementation/Publication (Adopted Project)
Start Date
10-Dec-2024
Due Date
14-Feb-2025
Completion Date
08-Jan-2025
Ref Project
CEN/TR 18108:2024 - Personal identification - Usage of biometrics in breeder documents

Buy Standard

TP CEN/TR 18108:2025TP CEN/TR 18108:2025
PreviousNext
Technical report
TP CEN/TR 18108:2025
English language
18 pages
sale 10% off
Preview
sale 10% off
Preview
e-Library read for
1 day

Standards Content (Sample)


SLOVENSKI STANDARD
01-februar-2025
Osebna identifikacija - Uporaba biometričnih podatkov v izvornih dokumentih
Personal identification - Usage of biometrics in breeder documents
Personenidentifizierung - Verwendung biometrischer Daten in Hoheitsdokumenten
Identification des personnes - Utilisation des données biométriques dans les documents
sources
Ta slovenski standard je istoveten z: CEN/TR 18108:2024
ICS:
35.240.15 Identifikacijske kartice. Čipne Identification cards. Chip
kartice. Biometrija cards. Biometrics
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

CEN/TR 18108
TECHNICAL REPORT
RAPPORT TECHNIQUE
September 2024
TECHNISCHER REPORT
ICS 35.240.15
English Version
Personal identification - Usage of biometrics in breeder
documents
Identification des personnes - Utilisation des données Personenidentifizierung - Verwendung biometrischer
biométriques dans les documents sources Daten in Hoheitsdokumenten

This Technical Report was approved by CEN on 19 August 2024. It has been drawn up by the Technical Committee CEN/TC 224.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and
United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2024 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 18108:2024 E
worldwide for CEN national Members.

Contents Page
European foreword . 4
Introduction . 5
1 Scope . 6
2 Normative references . 6
3 Terms and definitions . 6
4 Abbreviated terms . 7
5 General set-up . 7
6 Constraints on biometric data for reliable identity verification . 8
7 Suitability assessment of biometric modes for use on breeder documents . 8
7.1 Fingerprint . 8
7.1.1 Verification performance . 8
7.1.2 Privacy considerations . 8
7.1.3 Collectability . 9
7.1.4 Template aging . 9
7.1.5 Interoperability issues . 9
7.2 Face. 9
7.2.1 Verification performance . 9
7.2.2 Privacy considerations . 9
7.2.3 Collectability . 9
7.2.4 Template aging . 10
7.2.5 Interoperability issues . 10
7.3 Iris . 10
7.3.1 Verification performance . 10
7.3.2 Privacy considerations . 10
7.3.3 Collectability . 10
7.3.4 Template aging . 10
7.3.5 Interoperability issues . 10
7.4 Palmprint . 11
7.4.1 Verification performance . 11
7.4.2 Privacy considerations . 11
7.4.3 Collectability . 11
7.4.4 Template aging . 11
7.4.5 Interoperability issues . 11
7.5 Footprint . 11
7.5.1 Verification performance . 11
7.5.2 Privacy considerations . 11
7.5.3 Collectability . 11
7.5.4 Template aging . 11
7.5.5 Interoperability issues . 11
7.6 Palm vein and finger vein patterns . 11
7.6.1 Verification performance . 11
7.6.2 Privacy considerations . 12
7.6.3 Collectability . 12
7.6.4 Template aging . 12
7.6.5 Interoperability issues . 12
8 Summary . 12
8.1 General . 12
8.2 Choices for paper-based breeder documents . 15
8.3 Choices for hardware-based breeder documents . 15
8.4 Choices for server-based breeder documents . 15
Bibliography . 16

European foreword
This document (CEN/TR 18108:2024) has been prepared by Technical Committee CEN/TC 224
“Personal identification and related personal devices with secure element, systems, operations and
privacy in a multi-sectorial environment”, the secretariat of which is held by AFNOR.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
Any feedback and questions on this document should be directed to the users’ national standards body.
A complete listing of these bodies can be found on the CEN website.
Introduction
Birth certificates and marriage certificates are collectively referred to as breeder documents. Obtaining
authentic travel documents based on false breeder documents poses a major threat. The CEN/TS 17489
series [1] provides guidance on secure and interoperable European breeder documents that can be
used for establishing and verifying identity in various scenarios such as application for ePassports and
other identity documents.
A secure binding of breeder documents to their legitimate holders would increase the trust in the
breeder documents and prevent identity theft. This can be achieved using biometrics, but several
challenges arise in the context of breeder documents: In the case of birth certificates, the acquisition of
biometric characteristics from infants can be impractical. Furthermore, as some biometric
characteristics are sensible to ageing, linking breeder documents to their legitimate holders can become
difficult after some time.
This document discusses options for the use of biometrics in breeder documents. It compares
fingerprint, face, iris, palmprint, footprint, palm vein and finger vein recognition regarding verification
performance, privacy impact, feasibility of biometric acquisition in different age groups and
permanence of biometric features. Though resistance against presentation attacks (spoofing) is also
required, a comparison regarding presentation attack resistance is omitted because these biometric
modes can fulfil this criterion to a similar extent. Several studies have presented ways in which
biometric characteristics can be forged. Presentation attack detection is possible but can increase the
FNMR.
Even though non-coding DNA profiles allow a reliable verification of identity over the entire lifetime,
DNA profiles are not taken into consideration for use in breeder documents. The reason is that
processing of genetic material poses prohibitive risks to the rights and freedoms of natural persons
because it can give rise to discrimination as it can reveal ethnic origin or genetic diseases [2].
1 Scope
This document provides guidance on usage of biometrics in breeder documents, in particular regarding
— encoding of biometric reference data;
— data quality maintenance for biometric reference data;
— data authenticity maintenance for biometric reference data; and
— privacy preservation of biometric reference data.
This document addresses advantages and disadvantages of biometric modes, in particular regarding
— verification performance;
— privacy impact;
— feasibility of biometric acquisition considering the age of the capture subjects;
— limits of validity and need for updating biometric reference data.
The following aspects are out of scope:
— format and structure of breeder documents;
— general security aspects, which are covered in CEN/TS 17489-1 [1].
2 Normative references
There are no normative references in this document.
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 2382-37 [3] and the
following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— IEC Electropedia available at https://www.electropedia.org/;
— ISO Online Browsing Platform available at https://www.iso.org/obp.
3.1
biometric characteristic
biologic
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

SIST
SIST-TS CEN/TS 18099:2025(Main)
Biometric data injection attack detection
CEN/TS 18099:2024

This document provides an overview on:
-   Definitions on Biometric Data Injection Attack,
-   Biometric Data Injection Attack use case on main biometric system hardware for enrolment and verification,
-   Injection Attack Instruments on systems using one or several biometric modalities.
This document provides guidance on:
-   System for the detection of Injection Attack Instruments (defined in 3.12),
-   Appropriate mitigation risk of Injection Attack Instruments,
-   Creation of test plan for the evaluation of Injection Attack Detection system (defined in 3.9).
If presentation attacks testing is out of scope of this document, note that these two characteristics are in the scope of this document:
-   Presentation Attack Detection systems which can be used as injection attack instrument defence mechanism and/or injection attack method defence mechanism. Yet, no presentation attack testing will be performed by the laboratory to be compliant with this document (out of scope).
-   Bona Fide Presentation testing in order to test the ability of the Target Of Evaluation to correctly classify legitimate users.
The following aspects are out of scope:
-   Presentation Attack testing (as they are covered in ISO/IEC 30107 standards),
-   Biometric attacks which are not classified as Type 2 attacks (see Figure 1),
-   Evaluation of implementation of cryptographic mechanisms like secure elements,
-   Injection Attack Instruments rejected due to quality issues.

  • Technical specification
    37 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST-TP CEN/TR 18030:2024(Main)
Personal identification - Biometrics - Overview of biometric verification systems implemented across Europe
CEN/TR 18030:2023

This Technical Report provides an overview of the current deployment of biometric systems within Europe. It addresses the challenges that are being faced, in order to detect the current needs for improving the specifications for the implementation and deployment of biometric systems. This Technical Report considers all kind of deployments, from border control to ad-hoc services. As most of the deployed systems are based on the use of fingerprints or face recognition, this Technical Report will focus on these two biometric modalities, from the system integrator and interoperability points of view.
Identity documents, in terms of production, structure, interoperability, etc., are out of the scope of this TR. The TR is focused on the performance at system level.
The current European legislative initiatives around this topic (e.g., Entry/Exit System, framework for interoperability between EU information systems, etc.) need a robust framework study about the availability of standard technologies to improve interoperability in biometric products around the European Union.
By showing these needs, a set of recommendations for future standardization works is provided.
From a methodological perspective, the report gathers information of different entities with this classification:
- Capture/enrolment of biometrics including the quality assurance and the generation of feature or biometric models from the images.
- Best practices and guidelines to use biometrics in Europe.
- Data Quality environment using biometrics in European networks.

  • Technical report
    33 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO 21549-7:2024(Main)
Health informatics - Patient healthcard data - Part 7: Medication data (ISO 21549-7:2024)
EN ISO 21549-7:2024

ISO 21549-7:2016 applies to situations in which such data is recorded on or transported by patient healthcards compliant with the physical dimensions of ID-1 cards defined by ISO/IEC 7810.
ISO 21549-7:2016 specifies the basic structure of the data contained within the medication data object, but does not specify or mandate particular data sets for storage on devices.
The purpose of this document is for cards to provide information to other health professionals and to the patient or its non-professional caregiver.
It can also be used to carry a new prescription from the prescriber to the dispenser/pharmacy in the design of its sets.
Medication data include the following four components:
- medication notes: additional information related to medication and the safe use of medicines by the patient such as medication history, sensitivities and allergies;
- medication prescriptions: to carry a new prescription from the prescriber to the dispenser/pharmacy;
- medication dispensed: the records of medications dispensed for the patient;
- medication references: pointers to other systems that contain information that makes up medication prescription and the authority to dispense.
The following topics are beyond the scope of this document:
- physical or logical solutions for the practical functioning of particular types of data cards;
- how the message is processed further "downstream" of the interface between two systems;
- the form which the data takes for use outside the data card, or the way in which such data is visibly represented on the data card or elsewhere.
NOTE Not only does the definition of "medicinal products" differ from country to country, but also the same name can relate to entirely different products in some countries. Therefore, it is important to consider the safety of the patient when the card is used across borders.
ISO 21549-7:2016 describes and defines the Medication data objects used within or referenced by patient-held health data cards using UML, plain text and Abstract Syntax Notation (ASN.1).
ISO 21549-7:2016 does not describe nor define the common objects defined within ISO 21549-2, even though they are referenced and utilized within this document.

  • Standard
    51 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO 21549-5:2024(Main)
Health informatics - Patient healthcard data - Part 5: Identification data (ISO 21549-5:2023)
EN ISO 21549-5:2023

ISO 21549-5:2015 describes and defines the basic structure of the identification data objects held on healthcare data cards, but does not specify particular data sets for storage on devices.
The detailed functions and mechanisms of the following services are not within the scope of this part of ISO 21549 (although its structures can accommodate suitable data objects elsewhere specified):
- security functions and related services that are likely to be specified by users for data cards depending on their specific application, e.g. confidentiality protection, data integrity protection and authentication of persons and devices related to these functions;
- access control services;
- the initialization and issuing process (which begins the operating lifetime of an individual data card, and by which the data card is prepared for the data to be subsequently communicated to it according to this part of ISO 21549).
The following topics are therefore beyond the scope of this part of ISO 21549:
- physical or logical solutions for the practical functioning of particular types of data card;
- the forms that data take for use outside the data card, or the way in which such data are visibly represented on the data card or elsewhere.

  • Standard
    17 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO/IEC 2382-37:2024(Main)
Information technology - Vocabulary - Part 37: Biometrics (ISO/IEC 2382-37:2022)
EN ISO/IEC 2382-37:2023

This document establishes a systematic description of the concepts in the field of biometrics pertaining to recognition of human beings and reconciles variant terms in use in pre-existing biometric standards against the preferred terms, thereby clarifying the use of terms in this field.
Excluded from the scope of this document are concepts (represented by terms) from information technology, pattern recognition, biology, mathematics, etc. Biometrics uses such fields of knowledge as a basis.
In principle, mode specific terms are outside the scope of this document.
Words in bold are defined in this document. Words that are not in bold are to be understood in their natural language sense. The authority for natural language use of terms in this document is the Concise Oxford English Dictionary (COD), Thumb Index Edition (tenth edition, revised, 2002). Words used in their natural language sense are considered out-of-scope for further definition in this document.

  • Standard
    42 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST-TP CEN/TR 17982:2024(Main)
European Digital Identity Wallets standards Gap Analysis
CEN/TR 17982:2023

This document identifies relevant existing standards and standards work in progress around European Digital Identity Wallets. It also identifies missing work items and overlaps in standards and is supposed to work as a roadmap for future standardization projects in the area.

  • Technical report
    39 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST-TS CEN/TS 17661:2022(Main)
Personal identification – European enrolment guide for biometric ID documents (EEG)
CEN/TS 17661:2021

This technical specification provides guidance on
• capturing of facial images to be used as reference images in identity or similar documents,
• capturing of fingerprint images to be used as reference images in identity or similar documents,
• data quality maintenance for biometric reference data,
• data authenticity maintenance for biometric reference data.
The TS addresses the following aspects which are specific for biometric reference data capturing:
• biometric data quality and interoperability ensurance,
• data authenticity ensurance,
• morphing and other presentation attack detection,
• accessibility and usability,
• privacy and data protection,
• optimal process design.
The following aspects are out of scope:
• IT security,
• data capturing for verification purposes, e.g., in ABC gates.
• self-taken images, although a section on this has been included

  • Technical specification
    73 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST-TS CEN/TS 17631:2021(Main)
Personal identification - Biometric group access control
CEN/TS 17631:2021

This technical specification provides guidance on providing access
• To areas with physical access control, e.g., entertainment facilities, train stations, shops, libraries,banks, or border control,
• For small groups of persons, e.g., families with small children or seniors, or other accompanied persons in need of support,
• By means of biometric authentication technologies, e.g., facial, fingerprint, or vein recognition,
• In the European regulatory context.
The TS addresses the following aspects which are specific for biometric and group access:
• Accessibility and usability,
• User guidance including group guidance and interaction control,
• Privacy including data set content,
• Presentation attack detection,
• Applicable biometric technologies,
• Storage of reference data,
• Biometric process integration,
• Specific needs considering biometrics for groups,
• Biometric performance and error rates, and
• Group internal linkage.
The following aspects which reflect on generic access control issues are out of scope:
• IT security,
• Application specific physical security,
• Policy definition,
• Processes not related to biometric authentication, and
• Specific performance requirements of identification (1:N) and verification (1:1) applications.

  • Technical specification
    18 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST ISO/IEC 4909:2021(Main)
Identification cards -- Financial transaction cards -- Magnetic stripe data content for track 3
ISO/IEC 4909:2006

ISO/IEC 4909:2006 establishes specifications for financial transaction cards using track 3 and is intended to permit interchange based on the use of magnetic stripe encoded information. It specifies the data content and physical location of read/write information on track 3 and is to be used in conjunction with the relevant parts of ISO/IEC 7811 and ISO/IEC 7812.
ISO/IEC 4909:2006 recognizes the need for formats of track 3 which can be used independently of, or in conjunction with, track 2 as defined in ISO/IEC 7813. This approach is intended to permit the greatest degree of flexibility within the financial community in facilitating international interchange.
Using track 3 in conjunction with track 2 is a mode of operation in both on-line and off-line interchange environments. This mode of operation requires that the original encoded data on track 2 be read; the data on track 3 be read; and, if update is required, all the data on track 3 be rewritten.
Independent use of track 3 is an alternative mode of operation permitting both on-line interchange and off-line interchange based on mutual agreement between interested parties. It requires reading only of the data on track 3 and, if update is required, the rewriting of all the data on track 3.

  • Standard
    19 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Standard
    14 pages
    English language
    sale 15% off
SIST
SIST-TS CEN/TS 17489-1:2020(Main)
Personal identification - Secure and interoperable European Breeder Documents - Part 1: Framework overview
CEN/TS 17489-1:2020

This document provides an overview of a framework on breeder documents. It introduces the document structure of FprCEN/TS 17489 (all parts) that specifies how citizens retain the control of breeder document data and how they can use them to support identity proofing and verification. Moreover, the framework provides methodologies to assess and increase the level of trust in breeder documents.
This framework specifies methods for:
-   defining physical and logical/digital representations of a secure breeder document (hardware based, paper-based, server-based),
-   securing breeder document processes,
-   linking the document to its legitimate holder.
The following types of breeder documents are in the scope of the framework:
-   birth certificates,
-   marriage and partnership certificates,
-   death certificates.
The following breeder documents management processes including first-time application, later-in-life registration of an identity, and content update (e.g. name-changing) are in the scope of this framework:
-   registration,
-   issuance,
-   renewal,
-   inspection/verification,
-   revocation.
The specification of policies is out of scope.

  • Technical specification
    14 pages
    English language
    sale 10% off
    e-Library read for
    1 day