BS PD ISO IEC TR 30110-2015 Information technology Cross jurisdictional and societal aspects of implementation of biometric technologies Biometrics and children《信息技术 生物识别技术实施的跨司法和社.pdf

1、BSI Standards PublicationInformation technology Cross jurisdictional and societalaspects of implementation of biometric technologies Biometrics and childrenPD ISO/IEC TR 30110:2015National forewordThis Published Document is the UK implementation of ISO/IEC TR30110:2015.The UK participation in its pr

2、eparation was entrusted to TechnicalCommittee IST/44, Biometrics.A list of organizations represented on this committee can be obtained onrequest to its secretary.This publication does not purport to include all the necessary provisions ofa contract. Users are responsible for its correct application.

3、 The British Standards Institution 2015.Published by BSI Standards Limited 2015ISBN 978 0 580 80798 5ICS 35.040Compliance with a British Standard cannot confer immunity fromlegal obligations.This Published Document was published under the authority of theStandards Policy and Strategy Committee on 30

4、 November 2015.Amendments/corrigenda issued since publicationDate Text affectedPUBLISHED DOCUMENTPD ISO/IEC TR 30110:2015Information technology Cross jurisdictional and societal aspects of implementation of biometric technologies Biometrics and childrenTechnologies de linformation Aspects pangouvern

5、ementaux et pansocitaux de limplmentation des technologies biomtriques Biomtrie et enfantsTECHNICAL REPORTISO/IEC TR30110First edition2015-11-01Reference numberISO/IEC TR 30110:2015(E) ISO/IEC 2015PD ISO/IEC TR 30110:2015ii ISO/IEC 2015 All rights reservedCOPYRIGHT PROTECTED DOCUMENT ISO/IEC 2015, P

6、ublished in SwitzerlandAll rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Perm

7、ission can be requested from either ISO at the address below or ISOs member body in the country of the requester.ISO copyright officeCh. de Blandonnet 8 CP 401CH-1214 Vernier, Geneva, SwitzerlandTel. +41 22 749 01 11Fax +41 22 749 09 47copyrightiso.orgwww.iso.orgISO/IEC TR 30110:2015(E)PD ISO/IEC TR

8、 30110:2015ISO/IEC TR 30110:2015(E)Foreword vIntroductionvi1 Scope. 12 Normative references 13 Terms and definitions. 14 Symbols and abbreviated terms. 15 Background and rationale 25.1 Definition of “child” in terms of age 25.2 Ethical background 25.3 General considerations 26 Studies on biometrics

9、for children 36.1 General . 36.2 Study on age estimation of children . 36.3 Fingerprints . 36.3.1 Physiology 36.3.2 Studies concerning the use of fingerprints for children 46.4 Face . 46.4.1 Physiology 46.4.2 Study concerning the use of face recognition for children 56.5 Iris 56.5.1 Physiology 56.5.

10、2 Study concerning the use of iris recognition for children 56.6 Hand geometry . 56.6.1 Physiology 56.6.2 Studies concerning the use of hand geometry for children 67 Applications. 67.1 Identification and protection of newborns. 67.2 Fight against children trafficking 67.3 Missing children search . 6

11、7.3.1 National Missing and Unidentified Persons System (NamUs) 67.3.2 National Center for Missing and Exploited Children (NCMEC) . 67.3.3 Childrens Identification and Location Database (CHILD) . 77.3.4 Masonic Youth Child Identification Program (MYCHIP) 77.3.5 National Child Identification Program (

12、NCIDP) . 77.4 Schools . 77.4.1 Registration 77.4.2 Library book borrowing 77.4.3 Cashless catering . 77.4.4 Count of children access to catering . 77.5 Children medical treatment history . 88 Protection of children in using biometrics . 88.1 Data protection and privacy 88.1.1 Information to be provi

13、ded to parents and legal representatives consent 88.1.2 Information to be provided to children 88.1.3 Enrolment procedures and environment 88.1.4 Enrolment right of an updated enrolment . 88.1.5 Enrolment right to watch 88.1.6 Opt-out 88.1.7 Biometric data security 88.1.8 Biometric data destruction

14、transfer 98.2 Psychological protection. 9 ISO/IEC 2015 All rights reserved iiiContents PagePD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E)Bibliography.10iv ISO/IEC 2015 All rights reservedPD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E)ForewordISO (the International Organization for Standardization

15、) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to dea

16、l with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IE

17、C have established a joint technical committee, ISO/IEC JTC 1.The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the different types of document should b

18、e noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives). Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible fo

19、r identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents). Any trade name used in this document is information given for the

20、convenience of users and does not constitute an endorsement.For an explanation on the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISOs adherence to the WTO principles in the Technical Barriers to Trade (TBT) see the following URL: Fore

21、word - Supplementary informationThe committee responsible for this document is ISO/IEC JTC 1, Information technology, SC 37, Biometrics. ISO/IEC 2015 All rights reserved vPD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E)IntroductionIn the growing involvement of children in biometric systems, several

22、issues concerning their use of biometrics appear more critical than to adults.Most problems rely on the physical and psychological immaturity of children. The bodies of children are still in a growing phase and this may cause difficulties in the biometric capture and comparison processes. For the ch

23、ildren themselves, the usability of a biometric system becomes a crucial factor.On the other hand, their psychological immaturity implies that there could be situations where parent(s) or legal representative(s) have to support them to use biometric systems, especially when data protection or privac

24、y issues are involved.In this Technical Report, the definition of “child” is considered from the applicative point of view in Clause 5. In Clause 6, studies on biometrics for children are surveyed for certain modalities because the application of biometrics is heavily dependent on the modality. Clau

25、se 7 introduces examples of application of biometrics that are typical to children and present clear benefits. Finally, Clause 8summarizes various elements concerning the protection of children when using biometric systems with particular reference to data protection and psychological concerns.Examp

26、les of the benefits to be gained by using the Technical Report are the following: operational support in using biometrics applied to the context of children; enhanced acceptance by subjects of systems (children, parents and legal representatives, tutors,.) using biometric technology; improved public

27、 perception and understanding of these systems; smoother introduction and operation of these systems; adoption of commonly approved good privacy practice.The primary stakeholders are identified as follows: parents and legal representatives; users of the biometric data; developers of technical standa

28、rds; subjects who provide the biometric sample; requirements analysts; system architects; IT designers; public policy makers.Any jurisdiction of the country for which the biometric system is intended to shall be considered.vi ISO/IEC 2015 All rights reservedPD ISO/IEC TR 30110:2015Information techno

29、logy Cross jurisdictional and societal aspects of implementation of biometric technologies Biometrics and children1 ScopeThis Technical Report builds upon the general recommendations given in ISO/IEC TR 24714-1.It provides guidance for users (as defined in ISO/IEC 2382-37) of biometric recognition s

30、ystems on specific requirements in relation to deployments when children are included as subjects in the biometric process.2 Normative referencesThe following documents, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references,

31、only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.ISO/IEC 2382-37, Information technology Vocabulary Part 37: Biometrics3 Terms and definitionsFor the purposes of this document, the terms and definitions given in

32、ISO/IEC 2382-37 and the following apply.3.1childperson below the age of 18, unless the laws of a particular country set the legal age for adulthood younger1)3.2friction ridgesridges present on the skin of the fingers and toes, the palms and soles of the feet, which makes contact with an incident sur

33、face under normal touch4 Symbols and abbreviated termsBIODEV Biometrics Data Experimented in Visa (European Commission funded experimenta-tion, 2005)BKA Bundeskriminalamt (Federal Criminal Police Office of Germany)dpi dots per inchEC European CommissionEER Equal Error RateJRC European Commission Joi

34、nt Research CenterMYCHIP The Masonic Youth Child Identification Program (MYCHIP)1) http:/www.ohchr.org/en/professionalinterest/pages/crc.aspx viewed 12 July 2015.TECHNICAL REPORT ISO/IEC TR 30110:2015(E) ISO/IEC 2015 All rights reserved 1PD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E)NCMA National

35、Center for Missing AdultsNCMEC National Center for Missing and Exploited ChildrenNIJ National Institute of JusticeNIST National Institute of Standards and Technology (U.S. Department of Commerce)NMCO Nations Missing Children OrganizationTNO Nederlandse Organisatie voor Toegepast Natuurwetenschappeli

36、jk Onderzoek (Neth-erlands Organisation for Applied Scientific Research)UIDAI Unique IDentification Authority of India (UIDAI)UNICEF United Nations Childrens Fund5 Background and rationale5.1 Definition of “child” in terms of ageThe term “child” is generally considered to cover the period between bi

37、rth and puberty and, from a legal point of view, may be substituted by the term “minor“. The concept itself of “minor” is not sharply defined in most jurisdictions. The ages of criminal responsibility and consent, the age at which attendance at school ceases to be obligatory, the age at which legall

38、y binding contracts can be entered into, and so on, can all be different.With regards to the age limit of childhood, the above mentioned convention on the Rights of the Child defines a child as a person below the age of 18, unless the laws of a particular country set the legal age for adulthood youn

39、ger.In accordance with the above mentioned convention, for the purpose of this Technical Report, a “child” is an individual up to 18 years although, from a morphological point of view, all the biometrics characteristics can be considered stable at earlier ages.5.2 Ethical backgroundThe 1959 United N

40、ations Declaration of the Rights of the Child,1approved by the United Nations General Assembly, clearly ratifies that, by reason of their physical and mental immaturity, children need special safeguards and care, including appropriate legal protection.With specific reference to identity management,

41、the principle three of the above mentioned declaration prescribes that “The child shall be entitled from his birth to a name and a nationality”.The importance of the identity in the context of childhood is reinforced by the Articles 7 and 8 of the Convention on the Rights of the Child2(20 November 1

42、989, entry into force 2 September 1990), cited also by UNICEF.3The articles highlight the obligation of the States Parties to respect the right of the child to preserve his or her identity.The 1959 United Nations Declaration of the Rights of the Child and the Convention on the Rights of the Child, w

43、hile ratifying that children shall be the object of special respect and protection, highlight the importance of identity and pave the way to the implementation of biometric recognition systems.5.3 General considerationsDue to the widespread diffusion of biometrics and to the growing involvement of c

44、hildren in the identity management processes, some concerns have been raised due to the legal, social and ethical aspects encompassed.2 ISO/IEC 2015 All rights reservedPD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E)Apart from the apprehensions, it should be highlighted that biometrics can assume a

45、straightforward importance for the safety and security itself of children.Biometrics is an important tool in fighting crimes, such as, human trafficking with a particular reference to children who are often the innocent victims of abuses and violence or even appreciated source of human body organs u

46、nscrupulously offered on the terror market.Other applications of biometrics for children have a different purpose. For example, some school canteens or libraries have introduced a biometric check to verify the identity of children in accessing the services offered.The target of these applications is

47、 the alleviation of potential frauds. In some national jurisdictions, the local Data Protection Commissions can consider this purpose non-sufficient to satisfy the principle of “proportionality”.The proportionality principle refers to a general principle of law that requires in general a fair balanc

48、e and reasonable relationship between the means requested or used, including the severity and the duration of the means, and the objective sought.46 Studies on biometrics for children6.1 GeneralThis Clause analyses some aspects relative to the biometric technologies which have already found an appli

49、cation for children. The text justifies the selection of the biometric modalities in the section.6.2 Study on age estimation of childrenEstimating the age of children in photographic images may be useful in determining whether a child has the same identity as a reported missing child. It may also be of assistance in determining the relative age of exploited children from photographs and videos.NIST has published a study “Face Recognition Vendor Test (FRVT) Performance of Automated Age Estim