International Organization for Standardization

Information technology - Security techniques - Security evaluation of biometrics - First Edition
 N ISO/IEC 19792

Annotation

This International Standard specifies the subjects to be addressed during a security evaluation of a biometric system.

It covers the biometric-specific aspects and principles to be considered during the security evaluation of a biometric system.It does not address the non-biometric aspects which might form part of the overall security evaluation of a system using biometric technology (e.g. requirements on databases or communication channels).

This International Standard does not aim to define any concrete methodology for the security evaluation of biometric systems but instead focuses on the principal requirements. As such, the requirements in this International Standard are independent of any evaluation or certification scheme and will need to be incorporated into and adapted before being used in the context of a concrete scheme.

This International Standard defines various areas that are important to be considered during a security evaluation of a biometric system. These areas are represented by the following clauses of this International Standard:

— Clauses 4 and 5 of this International Standard give an overview of all terms, definitions and acronyms used,

— Clause 6 introduces the overall concept for a security evaluation of a biometric system,

— Clause 7 describes statistical aspects of security-relevant error rates,

— Clause 8 deals with the vulnerability assessment of biometric systems and

— Clause 9 describes the evaluation of privacy aspects.