ISO/IEC JTC 1/SC 37/WG 6 - Cross-Jurisdictional and Societal Aspects of Biometrics

This document gives general guidance for the stages in the life cycle of a system’s biometric and associated elements. This covers the following: — the capture and design of initial requirements, including legal frameworks; — development and deployment; — operations, including enrolment and subsequent usage; — interrelationships with other systems; — related data storage and security of data; — data updates and maintenance; — training and awareness; — system evaluation and audit; — controlled system expiration. The areas addressed are limited to the design and implementation of biometric technologies with respect to the following: — legal and societal constraints on the use of biometric data; — accessibility for the widest population; — health and safety, addressing the concerns of users regarding direct potential hazards as well as the possibility of the misuse of inferred data from biometric information. This document is intended for planners, implementers and system operators of biometric applications. Specification and assessment of government policy are not within the scope of this document. However, this document is intended to be beneficial to public authorities when deploying biometric systems.

This document builds upon the information provided in ISO/IEC TR 24714-1, ISO/IEC TR 29194 and ISO/IEC 29138-1 in order to highlight in a more detailed way the medical, physical and cognitive aspects that are specific for the use of biometrics by elderly persons.

This document introduces the effects of population demographics on biometric functions. It: — establishes terms and definitions relevant to the study of demographic factors in biometric recognition system performance; — identifies areas where biometric systems can exhibit different performances based on different demographic factors of the individuals submitting the biometric samples; — explains how different demographic factors can influence the biometric characteristics captured by different biometric modalities and how these influences can affect biometric performance measures; — presents a case study on existing scientific material that explores the impact of demographic factors on biometric system performance. Only biometric modalities where quantitative information is available on the impact of demographic factors are considered. Outside of the scope of this document are: — effects of disease and injury on biometric performance; and — how religious and cultural norms can affect biometric operations.

The ISO/IEC 24779 series of standards focuses on communication with the data capture subject. This document contains a set of pictograms, icons and symbols to help the general public understand the concepts and procedures for using electronic systems that collect and/or evaluate facial images. Operators can use this document, with the possibility of using additional symbols and information. This set of pictograms, icons and symbols is designed to be used to: — identify the type of biometric sensor; — provide supporting instructions related to facial image collection. To provide this functionality, the set of pictograms, icons and symbols includes both directional pictograms, icons and symbols and action or feedback pictograms, icons and symbols. The facial image pictograms, icons and symbols include: — facial image capture; — single person; — no hat; — no sunglasses; — neutral expression; — hair up; — view direction. Although the pictograms, icons and symbols are presented individually, the pictograms, icons and symbols are intended to be combined to fully illustrate the facial image capture interaction. For example, in a customs or immigration environment, procedures constructed from the individual pictograms, icons and symbols could be presented as: — a series of posters while passengers are in the queue; — a series of transitional frames in a biometric booth; — an animated video or series of transitional frames while passengers are in the queue; — instructional leaflets for passengers to read in the queue.

ISO/IEC 24779-4:2017 contains a set of symbols, icons and pictograms to help the general public understand the concepts and procedures for using electronic systems that collect and/or process fingerprints. This set of symbols, icons and pictograms is designed to be used to - identify the type of biometric device, - provide static instructions related to a fingerprint device, - display dynamic real-time information related to the fingerprint device, and - indicate the status of the fingerprint device. To provide this functionality, the set of symbols, icons and pictograms includes both directional symbols, icons and pictograms and real-time action or feedback symbols, icons and pictograms. The fingerprint device symbols, icons and pictograms can be categorized as - finger/hand general biometric, - kind of finger, four fingers or hand device, - finger/hand placement, - biometric position and impression which needs to be presented next, - hand orientation (switched hands), - finger/hand quality feedback, - press (more or less), - raise/lower angle, - finger/hand positioning, - hand/finger orientation, - necessary finger/hand movement (forward, backward, lateral), - rotation, - change angle, and - rolling finger(s). Although the symbols, icons and pictograms are presented individually, it is intended that the symbols, icons and pictograms be combined to fully illustrate the fingerprinting interaction. Alternative illustrations might be used; for example, in a customs or immigration environment, procedures constructed from the individual symbols, icons and pictograms could additionally be presented as - a series of posters while waiting to use the biometric system, - a series of transitional frames in a biometric booth, - an animated video or series of transitional frames while waiting to use the biometric system, and - instructional leaflets to read while waiting to use the biometric system. This multi-part International standard focuses on communication with the data capture subject. Operators could use this International standard, but they might need additional symbols and information.

ISO/IEC TR 24714-1:2008 gives guidelines for the stages in the life cycle of a system's biometric and associated elements. This covers the following: the capture and design of initial requirements, including legal frameworks; development and deployment; operations, including enrolment and subsequent usage; interrelationships with other systems; related data storage and security of data; data updates and maintenance; training and awareness; system evaluation and audit; controlled system expiration. The areas addressed are limited to the design and implementation of biometric technologies with respect to the following: legal and societal constraints on the use of biometric data; accessibility for the widest population; health and safety, addressing the concerns of users regarding direct potential hazards as well as the possibility of the misuse of inferred data from biometric information. The intended audiences for ISO/IEC TR 24714-1:2008 are planners, implementers and system operators of biometric systems.