ISO/IEC 24745:2022 情報セキュリティ、サイバーセキュリティ、プライバシー保護—生体認証情報保護 | ページ 6

3.1

authentication

provision of assurance in the identity (3.22) of an individual

[SOURCE:ISO/IEC 29115:2013, 3.2, modified —"entity" replaced by"individual".]

3.2

auxiliary data

AD

subject-dependent data that are part of a renewable biometric reference (3.34) and may be required to reconstruct pseudonymous identifiers (3.29) during verification, or for verification in general

Note 1 to entry: If auxiliary data are part of a renewable biometric reference, it is not necessarily stored in the same place as the corresponding pseudonymous identifiers.

Note 2 to entry:Auxiliary data may contain data elements for diversification (3.19) .

Note 3 to entry:Auxiliary data are not the element for comparison during biometric reference verification.

Note 4 to entry:Auxiliary data are generated by the biometric system (3.13) during enrolment.

3.3

biometric authentication

authentication (3.1) where biometric verification (3.16) or biometric identification (3.8) is applied and the identity (3.22) is linked to the biometric reference (3.11)

3.4

biometric characteristic

biological and behavioural characteristic of an individual from which distinguishing, repeatable biometric features (3.7) can be extracted for the purpose of biometric recognition

[SOURCE:ISO/IEC 2382-37:2017, 3.1.2, modified — The EXAMPLE was removed.]

3.5

biometric data

biometric sample (3.12) or aggregation of biometric samples at any stage of processing, e.g. biometric reference (3.11) , biometric probe, biometric feature (3.7) or biometric property

Note 1 to entry: As defined in ISO/IEC 2382-37:2017, 3.3.15, biometric property is a descriptive attribute of the biometric data (3.5) subject estimated or derived from the biometric sample (3.12) by automated means.

[SOURCE:ISO/IEC 2382-37:2017, 3.3.6, modified — Note 1 to entry was removed and replaced by a new Note 1 to entry.]

3.6

biometric data subject

subject

individual whose individualized biometric data (3.5) is within the biometric system (3.13)

[SOURCE:ISO/IEC 2382-37:2017, 3.7.5, modified — Note 1 to entry was removed.]

3.7

biometric feature

numbers or labels extracted from biometric samples (3.12) and used for comparison

[SOURCE:ISO/IEC 2382-37:2017, 3.3.11, modified — Notes 1 to 5 to entry were removed.]

3.8

biometric identification

process of searching against a biometric enrolment database to find and return the biometric reference (3.11) identifier(s) (3.21) attributable to a single individual

[SOURCE:ISO/IEC 2382-37:2017, 3.8.2, modified — Note 1 to entry was removed.]

3.9

biometric information

information conveyed or represented by biometric data (3.5)

Note 1 to entry: Biometric data include for instance data derived or transformed from biometric data which are handled in connection with biometric data within a biometric system (3.13) .

3.10

biometric model

stored function generated from biometric data (3.5)

[SOURCE:ISO/IEC 2382-37:2017, 3.3.13, modified — Notes 1 to 3 to entry were removed.]

3.11

biometric reference

br

one or more stored biometric samples (3.12) , biometric templates (3.14) or biometric models (3.10) attributed to a biometric data subject (3.6) and used as the object of biometric comparison

Note 1 to entry: A biometric reference that can be renewed is referred to as a renewable biometric reference (3.34) .

Note 2 to entry: BR can be used as a factor in multi-factor authentication, that is, something a person is.

[SOURCE:ISO/IEC 2382-37:2017, 3.3.16, modified — Notes 1 and 2 to entry were removed and replaced by new Notes 1 and 2 to entry.]

3.12

biometric sample

analog or digital representation of biometric characteristics (3.4) prior to biometric feature (3.7) extraction

[SOURCE:ISO/IEC 2382-37:2017, 3.3.21, modified — The EXAMPLE was removed.]

3.13

biometric system

system for the purpose of the biometric recognition of individuals based on their behavioural and biological characteristics

[SOURCE:ISO/IEC 2382-37:2017, 3.2.3, modified — Note 1 to entry was removed.]

3.14

biometric template

set of stored biometric features (3.7) comparable directly to probe biometric features

[SOURCE:ISO/IEC 2382-37:2017, 3.3.22, modified — The EXAMPLE and Notes 1 and 2 to entry were removed.]

3.15

biometric template protection

protection of biometric references (3.11) under various requirements for secrecy, irreversibility (3.26) , and renewability (3.33) during storage and transfer

Note 1 to entry: A biometric template protection scheme is one example of biometric information (3.9) protection scheme.

[SOURCE:ISO/IEC 30136:2018, 3.3, modified — Added Note 1 to entry.]

3.16

biometric verification

process of confirming a biometric claim (3.17) through biometric comparison

[SOURCE:ISO/IEC 2382-37:2017, 3.8.3, modified — Note 1 to entry was removed.]

3.17

claim

assertion of identity (3.22)

3.18

common identifier

CI

identifier (3.21) for correlating identity references (3.24) and biometric references (3.11) in physically or logically separated databases

3.19

diversification

deliberate creation of multiple, unlinkable, transformed biometric references (3.11) from one or more biometric samples (3.12) obtained from one subject for the purposes of security and privacy enhancement

Note 1 to entry: Renewability (3.33) is provided by performing diversification for biometric reference(s).

3.20

generative biometric data

biometric data (3.5) (sample(s) or features) used as primary input to the biometric template protection (3.15) scheme

[SOURCE:ISO/IEC 30136:2018, 3.4]

3.21

identifier

one or more attributes that uniquely characterize an individual in a specific domain

3.22

identity

set of properties or characteristics of an individual that can be used to describe its state, appearance or other qualities

3.23

identity management system

IdMS

system controlling individual identity information throughout the information lifecycle in one domain

3.24

identity reference

IR

non-biometric attribute that is an identifier (3.21) with a value that remains the same for the duration of the existence of the individual in a domain

3.25

IR claimant

identity reference claimant

individual making an identity reference (3.24) claim (3.17)

Note 1 to entry:Claims can be verified in a number of ways, some of which may be based on biometrics.

3.26

irreversibility

property of a transform that creates a biometric reference (3.11) from generative biometric data (3.20) such that knowledge of the transformed biometric reference cannot be used to determine any information about the generative biometric data

[SOURCE:ISO/IEC 30136:2018, 3.5, modified — Note 1 to entry was removed.]

3.27

personally identifiable information

PII

any information that a) can be used to identify the PII principal to whom such information relates, or b) is or might be directly or indirectly linked to a PII principal

[SOURCE:ISO/IEC 29100:2011, 2.9, modified — Note 1 to entry was removed.]

3.28

privacy compromise

event in which an adversary discovers part of the generative biometric data (3.20) of an individual enrolled in the database of a biometric verification (3.16) or identification system

[SOURCE:ISO/IEC 30136:2018, 3.6, modified — Note 1 to entry was removed.]

3.29

pseudonymous identifier

pi

part of a renewable biometric reference (3.34) that represents an individual or data subject within a domain by means of a protected identity (3.22) that can be verified by means of a captured biometric sample (3.12) and the auxiliary data (3.2) (if any)

Note 1 to entry: A pseudonymous identifier should not contain any information that allows retrieval of the original biometric sample, the original biometric features (3.7) , or the true identity of its owner.

Note 2 to entry: The pseudonymous identifier has no meaning outside the service domain.

Note 3 to entry: Encrypted biometric data (3.5) with a cipher that allows retrieval of the plain-text data before comparison is not a pseudonymous identifier.

Note 4 to entry: A pseudonymous identifier may be the element for comparison during biometric reference verification.

Note 5 to entry: See Table C.1 for examples of PI and auxiliary data (AD) (3.2).

3.30

pseudonymous identifier comparator

PIC

system, process or algorithm that compares the pseudonymous identifier (3.29) generated during enrolment by the pseudonymous identifier encoder (3.31) and the pseudonymous identifier reconstructed during verification by the pseudonymous identifier recoder (3.32) , and returns a similarity score representing the similarity between the two

[SOURCE:ISO/IEC 30136:2018, 3.8]

3.31

pseudonymous identifier encoder

PIE

system, process or algorithm that generates a renewable biometric reference (3.34) consisting of a pseudonymous identifier (3.29) and possibly auxiliary data (3.2) based on a biometric reference

3.32

pseudonymous identifier recoder

PIR

system, process or algorithm that reconstructs a pseudonymous identifier (3.29) based on the provided auxiliary data (3.2) and the extracted features

[SOURCE:ISO/IEC 30136:2018, 3.9]

3.33

renewability

property of a transform or process to create multiple, unlinkable transformed biometric references (3.11) derived from one or more biometric samples (3.12) obtained from the same data subject and which can be used to recognize the individual while not revealing information about the original reference

3.34

renewable biometric reference

RBR

renewable identifier (3.21) that represents an individual or data subject within a domain by means of a protected binary identity (3.22) (re)constructed from the captured biometric sample (3.12) , and fulfilling irreversibility (3.26) requirements

Note 1 to entry: A renewable biometric reference fulfilling irreversibility requirement provides additional security property.

Note 2 to entry: An example of a renewable biometric reference is a pseudonymous identifier (3.29) and additional data elements required for biometric verification (3.16) or identification such as auxiliary data (3.2) .

3.35

revocability

ability to prevent future successful verification of a specific biometric reference (3.11) and the corresponding identity reference (3.24)

Note 1 to entry: Rejection of a subject may occur on the grounds of its appearance on a revocation list.

3.36

secure channel

communication channel providing the confidentiality and authenticity of exchanged messages

3.37

token

physical device storing biometric reference (3.11) and in some cases performing on-board biometric comparison

3.38

unlinkability

property of two or more biometric references (3.11) that they cannot be linked to each other or to the subject(s) from whom they were derived