ISO 19092:2023 金融サービス - 生体認証 - セキュリティ フレームワーク | ページ 6

3.1

biometric authentication

authentication where biometric verification or biometric identification is applied and the identity is linked to the biometric reference

[SOURCE:ISO/IEC 24745:2022, 3.3]

3.2

biometric capture

obtaining and recording of, in a retrievable form, signal(s) of biometric characteristic(s) directly from individual(s), or from representation(s) of biometric characteristic(s)

[SOURCE:ISO/IEC 2382-37:2022, 37.06.03, modified — Notes to entry removed.]

3.3

biometric capture device

device that collects a signal from a biometric characteristic and converts it to a captured biometric sample

[SOURCE:ISO/IEC 2382-37:2022, 37.04.01, modified — Notes to entry removed.]

3.4

biometric data

biometric sample or aggregation of biometric samples at any stage of processing

[SOURCE:ISO/IEC 2382-37:2022, 37.03.06, modified — Notes to entry and example removed.]

3.5

biometric enrolment

act of creating and storing a biometric enrolment data record in accordance with an enrolment policy

[SOURCE:ISO/IEC 2382-37:2022, 37.05.03, modified — Notes to entry removed.]

3.6

biometric enrolment database

database of biometric enrolment data record(s)

[SOURCE:ISO/IEC 2382-37:2022, 37.03.09, modified — Notes to entry removed.]

3.7

biometric feature extraction

process applied to a biometric sample with the intent of isolating and outputting repeatable and distinctive numbers or labels which can be compared to those extracted from other biometric samples

[SOURCE:ISO/IEC 2382-37:2022, 37.05.04, modified — Notes to entry removed.]

3.8

biometric identification

process of searching against a biometric enrolment database to find and return the biometric reference identifier(s) attributable to a single individual

[SOURCE:ISO/IEC 2382-37:2022, 37.08.02, modified — Note to entry removed.]

3.9

biometric information

information conveyed or represented by biometric data

[SOURCE:ISO/IEC 24745:2022, 3.9, modified — Note to entry removed.]

3.10

biometric policy

set of rules that indicate the applicability of a biometric reference to some community or class of application having common security requirements

3.11

biometric presentation

interaction of the biometric capture subject and the biometric capture subsystem to obtain a signal from a biometric characteristic

[SOURCE:ISO/IEC 2382-37:2022, 37.06.07, modified — Note to entry removed.]

3.12

biometric reference

one or more stored biometric samples, biometric templates or biometric models attributed to a biometric data subject and used as the object of biometric comparison

[SOURCE:ISO/IEC 2382-37:2022, 37.03.16, modified — Notes to entry and example removed.]

3.13

biometric reference adaptation

automatic incremental updating of a biometric reference

[SOURCE:ISO/IEC 2382-37:2022, 37.05.05, modified — Notes to entry removed.]

3.14

biometric sample

analogue or digital representation of biometric characteristics prior to biometric feature extraction

[SOURCE:ISO/IEC 2382-37:2022, 37.03.21, modified — Example removed.]

3.15

biometric system

system for the purpose of the biometric recognition of individuals based on their behavioural and biological characteristics

[SOURCE:ISO/IEC 2382-37:2022, 37.02.03, modified — Notes to entry removed.]

3.16

biometric system-on-card

card-sized device including biometric acquisition, data processing, storage, comparison and decision to compose a complete biometric verification system

[SOURCE:ISO/IEC 24787:2018, 3.8]

3.17

biometric verification

process of confirming a biometric claim through comparison

[SOURCE:ISO/IEC 2382-37:2022, 37.08.03, modified — Notes to entry removed.]

3.18

biometrics

automated recognition of individuals based on their biological and behavioural characteristics

[SOURCE:ISO/IEC 2382-37:2022, 37.01.03, modified — Notes to entry removed.]

3.19

claimant

individual making a claim that can be authenticated in biometric authentication

[SOURCE:ISO/IEC 2382-37:2022, 37.07.10, modified — Note to entry removed and definition revised.]

3.20

comparison

estimation, calculation or measurement of similarity or dissimilarity between biometric probe(s) and biometric reference(s)

[SOURCE:ISO/IEC 2382-37:2022, 37.05.07]

3.21

comparison score

score

numerical value (or set of values) resulting from a comparison

[SOURCE:ISO/IEC 2382-37:2022, 37.03.27, modified — Note to entry removed.]

3.22

confidentiality

property that information is not available or disclosed to unauthorized individuals, entities or processes

[SOURCE:ISO/IEC 27000:2018, 3.10]

3.23

credential

representation of an identity for use in authentication

Note 1 to entry: Customary embodiments of a credential are very diverse. To accommodate this wide range, the definition adopted is very generic.

Note 2 to entry: A credential is typically made to facilitate data authentication of the identity information pertaining to the identity it represents. Data authentication is typically used in authorization.

Note 3 to entry: The identity information represented by a credential can, for example, be printed on human-readable media, or stored within a physical token. Typically, such information can be presented in a manner designed to reinforce its perceived validity.

[SOURCE:ISO/IEC 24760-1:2019, 3.3.5, modified — Note 4 to entry changed to examples.]

3.24

decision policy

Note 1 to entry: Serial, parallel, weighted or fusion decision models in biometric systems utilize more than one biometric reference in the comparison process for a given user (e.g. using biometric references from multiple fingerprints).

3.25

encryption

(reversible) transformation of data by an encryption algorithm to produce ciphertext, i.e. to hide the information content of the data

[SOURCE:ISO/IEC 18033-1:2021, 3.11]

3.26

false match rate

FMR

proportion of the completed biometric non-mated comparison trials that result in a false match

Note 1 to entry: The value computed for the FMR will depend on thresholds, other parameters of the comparison process and the protocol defining the biometric non-mated comparison trials.

Note 3 to entry: “completed” refers to the computational processes required to make a comparison decision, i.e. failures to decide are excluded.

Note 4 to entry: “non-mated” refers to cases when the compared biometrics come from different individuals.

[SOURCE:ISO/IEC 2382-37:2022, 37.09.09, modified — Note 4 to entry added.]

3.27

false-negative identification rate

FNIR

FNIR (N, R, T)

proportion of a specified set of identification transactions by capture subjects enrolled in the system for which the subject’s correct reference identifier is not among those returned

Note 1 to entry: The false-negative identification rate can be expressed as a function of N, the number of enrolees, and of parameters of the identification process where only candidates up to rank R and with a candidate score greater than threshold T are returned to the candidate list.

[SOURCE:ISO/IEC 19795-1:2021, 3.22]

3.28

false non-match rate

FNMR

proportion of the completed biometric matched comparison trials that result in a false non-match

[SOURCE:ISO/IEC 2382-37:2022, 37.09.11, modified — Notes to entry removed.]

3.29

false-positive identification rate

FPIR

FPIR (N, T)

proportion of identification transactions by capture subjects not enrolled in the system for which a reference identifier is returned

Note 1 to entry: The false-positive identification rate can be expressed as a function of N, the number of enrolees, and of parameters of the identification process where only candidates with a candidate score greater than threshold T are returned to the candidate list.

Note 2 to entry: For systems that always return a fixed number of candidates without applying a threshold on scores, FPIR is not a meaningful metric.

[SOURCE:ISO/IEC 19795-1:2021, 3.23]

3.30

initial enrolment

(biometric) enrolment that occurs after previous authentication of the subject, such as via a password

Note 1 to entry: See also biometric enrolment (3.5) and re-enrolment (3.38) .

3.31

integrated circuit card

card containing integrated circuits and interfaces, especially used for payment or similar

3.32

integrity

property of accuracy and completeness

[SOURCE:ISO/IEC 27000:2018, 3.36]

3.33

on-card biometric comparison

comparison and decision-making on an integrated circuit card where the biometric reference is retained on-card in order to enhance security and privacy

[SOURCE:ISO/IEC 24787:2018, 3.12]

3.34

payment token

value linked to and acting as a substitute for a primary account number

3.35

point of biometric presentation

PBP

human interface device to which an account holder presents biometric characteristics, typically in conjunction with a payment card, for the purposes of carrying out a financial transaction or for enrolling their credentials for future use in such a transaction

3.36

presentation attack

presentation to the biometric data capture subsystem with the goal of interfering with the operation of the biometric system

Note 1 to entry: Presentation attack can be implemented through a number of methods, e.g. artefact, mutilations, replay.

Note 2 to entry: Presentation attacks may have a number of goals, e.g. impersonation or not being recognized.

Note 3 to entry: Biometric systems may not be able to differentiate between biometric presentation attacks with the goal of interfering with the systems operation and non-conformant presentations.

[SOURCE:ISO/IEC 30107-1:2016, 3.5]

3.37

presentation attack detection

automated determination of a presentation attack

Note 1 to entry: Presentation attack detection cannot infer the subject’s intent. In fact, it could be impossible to derive that difference from the data capture process or acquired sample

[SOURCE:ISO/IEC 30107-1:2016, 3.6]

3.38

re-enrolment

process of establishing a new biometric reference replacing existing biometric data for a subject already enrolled

Note 1 to entry: Re-enrolment requires new captured biometric sample(s).

Note 2 to entry: See also biometric enrolment (3.5) and initial enrolment (3.30) .

[SOURCE:ISO/IEC 2382-37:2022, 37.05.13, modified — Definition revised and Note 2 to entry added.]

3.39

registration

process before enrolment in which a person is provided an electronic identifier and credential(s) with which he or she proves his or her identity for enrolment

Note 1 to entry: This is performed in conjunction with enrolment, such that it appears to be a single process.

3.40

secure biometric reader

SBR

secure cryptographic device embodying biometric capture device and associated biometric processing software

3.41

secure cryptographic device

SCD

device that provides physically and logically protected cryptographic services and storage (e.g. PIN entry device or hardware security module), and which can be integrated into a larger system, such as an automated teller machine (ATM) or point of sale (POS) terminal

[SOURCE:ISO 13491-1:2016, 3.28, modified — Definition revised.]

3.42

secure element

significantly tamper-resistant component providing secure storage, secure processing and confidentiality

3.43

threshold

numerical value (or set of values) at which a decision boundary exists

[SOURCE:ISO/IEC 2382-37:2022, 37.03.36]

3.44

token service provider

TSP

entity which translates primary account numbers into payment tokens and vice versa

3.45

trusted domain

TD

secure physical or logical area within a given technology providing confidentiality, integrity or authentication services to an application