ISO/IEC 24787-1:2024 PDF

Information technology — On-card biometric comparison — Part 1: General principles and specifications

Первая страница стандарта ISO/IEC 24787-1:2024

Открыть превью (PDF)

Название (английский):

ISO/IEC 24787-1:2024

Information technology — On-card biometric comparison — Part 1: General principles and specifications

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 35
Дата публикации:: 4 июня 2024 г.
Издание:: ISO/IEC IS 24787 edition 1 version 1
ICS:: 35.240.15

Язык документа:

ruen

Срок поставки:6 раб. дн. (перевод)

Цена:525 €

Описание (английский):

This document provides requirements and general principles and specifications for a biometric comparison methodology suitable for the on-card environment. This document establishes — architectures of biometric comparison using an ICC, — on-card biometric comparison, both in sensor-off-card systems and as part of biometric system-on-card, and — security policies for on-card biometric comparison. This document does not establish — requirements for off-card biometric comparison, — requirements for biometric system-on-card (defined in the ISO/IEC 17839 series), — work-sharing on-card biometric comparison (defined in ISO/IEC 24787-2), or — modality-specific requirements for storage and comparison.

Технические детали

Технический комитет: ISO/IEC JTC 1/SC 17 - Cards and security devices for personal identification
SKU: ISO/IEC 24787-1:2024

Abstract

Overview

ISO/IEC 24787-1:2024 - Information technology - On-card biometric comparison - Part 1: General principles and specifications - defines requirements, principles and specifications for performing on-card biometric comparison inside an integrated circuit card (ICC). The standard specifies architectures for biometric comparison using an ICC, covers sensor‑off‑card on‑card comparison as well as on‑card comparison as part of a biometric system‑on‑card, and establishes security policies for on‑card biometric comparison. It is the first part of a split revision (replacing ISO/IEC 24787:2018) and focuses on general rules rather than modality‑specific or off‑card comparison requirements.

Key topics and technical requirements

Architectures and operational models
- Definitions of on‑card comparison, off‑card comparison, sensor‑off‑card and biometric system‑on‑card concepts.
- Framework for biometric verification using an ICC.
Biometric data handling and encoding
- Requirements for storage formats, biometric information templates, and encoding suitable for use on ICCs.
- Guidance on use of a biometric reference for multiple applications.
Processes and lifecycle
- Enrolment/re‑enrolment, verification, comparison/decision processes and termination (permanent deactivation).
Security policies
- Minimum security policy requirements for on‑card biometric comparison, retry counter management, and policies for multiple applications (taxonomies and SP1/SP2/SP3 models).
Interoperability artefacts
- Application selection (AID), APDU examples, and data object formats to support vendor and system interoperability.
Informative annexes
- Examples for APDU usage, global biometric reference implementation, security status transitions, and CBEFF‑3 style biometric information templates.

Applications and who uses this standard

ISO/IEC 24787-1 is intended for organizations implementing secure biometric verification on smart cards and similar ICC devices, including:

Card manufacturers and secure element designers
Biometric system integrators and solution vendors
Government agencies issuing eIDs, national ID cards, or border‑control credentials
Financial and enterprise security architects deploying card-based authentication
Test and certification labs assessing on‑card biometric implementations

Practical benefits include enhanced privacy (biometric references remain on‑card), reduced risk of biometric data leakage, and standardized approaches for secure on‑card verification in sensor‑off‑card deployments.

Related standards

ISO/IEC 7816‑11 (personal verification through biometric methods)
ISO/IEC 19785‑3 (CBEFF patron format)
ISO/IEC 19794, 29794, 39794 (biometric data interchange/quality/extension formats)
ISO/IEC 17839 series (biometric system‑on‑card specifics)
ISO/IEC 24787‑2 (work‑sharing on‑card biometric comparison)

Keywords: ISO/IEC 24787-1:2024, on-card biometric comparison, ICC, sensor-off-card, biometric reference, security policies, biometric verification.

Overview

Key topics and technical requirements

Architectures and operational models
- Definitions of on‑card comparison, off‑card comparison, sensor‑off‑card and biometric system‑on‑card concepts.
- Framework for biometric verification using an ICC.
Biometric data handling and encoding
- Requirements for storage formats, biometric information templates, and encoding suitable for use on ICCs.
- Guidance on use of a biometric reference for multiple applications.
Processes and lifecycle
- Enrolment/re‑enrolment, verification, comparison/decision processes and termination (permanent deactivation).
Security policies
- Minimum security policy requirements for on‑card biometric comparison, retry counter management, and policies for multiple applications (taxonomies and SP1/SP2/SP3 models).
Interoperability artefacts
- Application selection (AID), APDU examples, and data object formats to support vendor and system interoperability.
Informative annexes
- Examples for APDU usage, global biometric reference implementation, security status transitions, and CBEFF‑3 style biometric information templates.

Applications and who uses this standard

ISO/IEC 24787-1 is intended for organizations implementing secure biometric verification on smart cards and similar ICC devices, including:

Card manufacturers and secure element designers
Biometric system integrators and solution vendors
Government agencies issuing eIDs, national ID cards, or border‑control credentials
Financial and enterprise security architects deploying card-based authentication
Test and certification labs assessing on‑card biometric implementations

Related standards

ISO/IEC 7816‑11 (personal verification through biometric methods)
ISO/IEC 19785‑3 (CBEFF patron format)
ISO/IEC 19794, 29794, 39794 (biometric data interchange/quality/extension formats)
ISO/IEC 17839 series (biometric system‑on‑card specifics)
ISO/IEC 24787‑2 (work‑sharing on‑card biometric comparison)

Keywords: ISO/IEC 24787-1:2024, on-card biometric comparison, ICC, sensor-off-card, biometric reference, security policies, biometric verification.

ISO/IEC 24787-1:2024 PDF

Технические детали

Abstract

Overview

Key topics and technical requirements

Applications and who uses this standard

Related standards

Похожие стандарты

Abstract

Overview

Key topics and technical requirements

Applications and who uses this standard

Related standards

Похожие стандарты

Information technology — Identification cards — On-card biometric comparison

Information technology. On-card biometric comparison. General principles and specifications.

Identification cards — Integrated circuit cards — Part 11: Personal verification through biometric methods

Information technology — Common Biometric Exchange Formats Framework — Part 3: Patron format specifications —…

Information technology. Biometric data interchange formats. Finger image data.

Tracked Changes. Information technology. Biometric system-on-card. Core requirements.

Information technology. Identification cards. On-card biometric comparison