International Organization for Standardization

Information technology - Guidance for specifying performance requirements to meet security and usability needs in applications using biometrics - First Edition
 N ISO/IEC TR 29156

Annotation

This Technical Report provides guidance on specifying performance requirements for authentication using biometric recognition in order to achieve desired levels of security and usability for the authentication mechanism.

Guidance addresses issues such as the following:

— the biometric performance metrics that impact security and usability;

— comparing and quantifying the security and usability of biometrics and other authentication mechanisms, when used alone or in combination;

— how to combine performance of individual authentication elements in order to meet an overall security and usability requirement;

— the trade-off between security and usability in applications using biometric recognition;

— considerations in maintaining security and usability in systems incorporating biometrics. The guidance is targeted towards applications that

— use biometrics for the authentication of individuals, and — are of small to medium size (in terms of the number of enrolled individuals).

The guidance does not address the following:

— surveillance systems;

— systems whose primary aim is to detect and prevent attempts by individuals to create multiple enrolments under different identities;