ISO/IEC JTC 1/SC 17/WG 11 - Application of biometrics to cards and personal identification

This document establishes — architectures of biometric comparison using an ICC, — on-card biometric comparison, both in sensor-off-card systems and as part of biometric system-on-card, — work-sharing on-card biometric comparison, and — security policies for on-card biometric comparison. This document does not establish — requirements for off-card biometric comparison, — requirements for biometric system-on-card (as defined in ISO/IEC 17839), or — modality-specific requirements for storage and comparison.

ISO/IEC 7816-11:2017 specifies security-related interindustry commands to be used for personal verification through biometric methods in integrated circuit cards. It also defines the data structure and data access methods for use of the card as a carrier of the biometric reference and/or as the device to perform the verification of the cardholder's biometric probe (on-card biometric comparison). Identification of persons using biometric methods is outside the scope of this document.

ISO/IEC 17839-3:2016 - logical data structures for a BSoC, - enrolment procedures, and - usage of commands and data structures defined in other ISO standards for BSoC. ISO/IEC 17839-3.2016 does not define requirements for - commands and data structures that apply to devices external to a BSoC, and - commands and data structures that apply to logical interfaces inside a BSoC.

ISO 18584:2015 establishes - conformance test requirements for using general framework for on-card comparison applications, - conformance test requirements for using work-sharing mechanism for on-card comparison applications, and - conformance test requirements to check accomplishment of security policies for on-card biometric comparison that are specified in ISO/IEC 24787:2010. ISO 18584:2015 only covers the testing of APDU command and response pairs involved for the ICC that has the capability to perform on-card biometric comparison based on ISO/IEC 24787:2010. Measuring the performance of on-card biometric comparison algorithms in terms of error rates is not within the scope of this International Standard.

ISO 17839-2:2015 defines the following: - dimensions of a Biometric System-on-Card type S1 and type S2; - position and size of the biometric capture device; - minimum requirements to a Biometric System-on-Card with respect to - mechanical durability, and ? man-machine interface and ergonomics. The standardization of other on-card devices such as an electronic display or a keypad is outside the scope of this part of ISO/IEC 17839.