BSI PD ISO/IEC TR 29196:2015
$198.66
Guidance for biometric enrolment
Published By | Publication Date | Number of Pages |
BSI | 2015 | 58 |
This report consolidates information relating to successful, secure and usable implementation of biometric enrolment processes, while indicating areas of uncertainty that organisations proposing to use biometric technologies will need to address during procurement, design, deployment and operation. Much of the information is generic to many types of application e.g. from national scale commercial and government applications, through to closed user group systems for in-house operations, and to consumer applications where convenience rather than security is the primary driver for adoption of biometric technologies.
The report points out the differences in operation relating to specific types of application, e.g. where self-enrolment is more appropriate than attended operation. This report will focus in the main on fixed location enrolments at a number of sites in an organization, where there is an attendant who supports the biometric applicant in effecting a successful enrolment, and where enrolment is a mandatory requirement. In summary, this report consolidates information relating to better practice implementation of biometric enrolment capability in various business contexts including considerations of legislation, policy, process, function (system) and technology.
The report provides guidance as to the collection and storage of biometric enrolment data and the impact on dependent processes of verification and identification. This report will not aim to include material specific to forensic and law enforcement applications.
The recommendations contained in the report are not mandatory.
PDF Catalog
PDF Pages | PDF Title |
---|---|
7 | Foreword |
8 | Introduction |
9 | 1 Scope 2 Terms and definitions |
10 | 3 Abbreviated terms |
11 | 4 Role of Enrolment in a Biometric System |
13 | 5 Stakeholders and approaches for enrolment 5.1 Enrolment Stakeholders |
16 | 5.2 Enrolment Approaches |
17 | 6 Key Stakeholder perspectives 6.1 Summary of key observations |
18 | 6.2 Meeting the requirements of Stakeholders 6.2.1 Supporting the interests of the Subject |
19 | 6.2.2 Information provided to the Applicant 6.2.3 Legal implications of the enrolment service |
20 | 6.2.4 Issues related to inclusivity 6.2.5 Usability 6.2.6 Usability aspects — Effectiveness 6.2.7 Usability aspects — Efficiency 6.2.8 Usability aspects — Satisfaction with the enrolment process |
21 | 6.2.9 Supporting the interests of the Enrolment Authority 6.2.10 Establishing the legal framework for enrolment |
22 | 6.2.11 Independent review of the operation of the Service 6.2.12 Metrics of a successful biometric enrolment |
23 | 6.2.13 Failure to Enrol and related failure rates |
24 | 6.2.14 Analysis of enrolment failures |
26 | 6.2.15 Analysis of poor quality enrolments |
27 | 6.2.16 Strategy for corrective actions 6.2.17 Use of data for research 6.2.18 End-of-contract or contract reassignment actions 6.2.19 Supporting the interests of the Operator of the enrolment service |
28 | 6.2.20 Development and maintenance of training programmes for personnel |
29 | 6.2.21 System performance monitoring and correction actions 6.2.22 Service Improvement Actions |
30 | 6.2.24 Participation in end-of-service or contract reassignment activities 6.2.25 Supporting the interests of Relying Parties |
31 | 6.2.26 System Design and Developer’s perspective 6.2.27 Pre-enrolment and scheduling processes |
32 | 6.2.28 Confirmation of the biographic identity of the Applicant 6.2.29 Requirements of the verification system(s) which will depend on this enrolment 6.2.30 Selection of enrolment system 6.2.31 Physical design of the enrolment environment 6.2.32 Interfacing with the Applicant |
33 | 6.2.33 Appropriate training of the Enrolment Officer and Attendants 6.2.34 Support Staff Training 6.2.35 Security |
34 | 6.2.36 Number of attempts at collection of a biometric feature or maximum duration of collection time before timeout 6.2.37 Exception handling: enrolment and/or registration procedure for secure and effective fallback |
35 | 6.2.38 Post enrolment verification session 6.2.39 System maintenance procedures 6.2.40 Token production and secure delivery 6.2.41 System performance monitoring |
36 | 6.2.42 Effective system level performance through testing and piloting 6.3 Regulator’s perspective 6.3.1 Regulation 6.3.2 Completeness of the governance processes 6.3.3 Integrity of the logging and audit processes |
37 | 6.4 Auditor’s perspective 7 Process for the development of biometric enrolment capability 7.1 General 7.2 Architectural considerations in enrolment station design |
38 | 7.3 System definition 8 Guidance relating to specific modalities 8.1 General |
39 | 8.2 Facial Biometrics |
40 | 8.3 Fingerprint biometric systems 8.3.1 General |
41 | 8.3.2 Fingerprint image optimization 8.3.3 Single finger systems |
42 | 8.3.4 Tenprint systems |
44 | 8.4 Vascular (Vein) authentication systems 8.4.1 General 8.4.2 Palm vein technology |
45 | 8.4.3 Finger Vein technology 9 Guidance relating to enrolment for mobile biometric applications 9.1 Best practice guidelines |
46 | 9.2 Fingerprint systems |
47 | 9.3 Facial image Systems |
48 | 9.4 Iris systems |
50 | Annex A (informative) Checklist of Activities related to biometric enrolment |
54 | Bibliography |