ITU-T X 1081-2004 The telebiometric multimodal model C A framework for the specification of security and safety Aspects of telebiometrics SERIES X DATA NETWORKS AND OPEN SYSTEM COM Gr.pdf

1、 International Telecommunication Union ITU-T X.1081TELECOMMUNICATION STANDARDIZATION SECTOR OF ITU (10/2011) SERIES X: DATA NETWORKS, OPEN SYSTEM COMMUNICATIONS AND SECURITY Information and network security Telebiometrics The telebiometric multimodal model A framework for the specification of securi

2、ty and safety aspects of telebiometrics Recommendation ITU-T X.1081 ITU-T X-SERIES RECOMMENDATIONS DATA NETWORKS, OPEN SYSTEM COMMUNICATIONS AND SECURITY PUBLIC DATA NETWORKS X.1X.199 OPEN SYSTEMS INTERCONNECTION X.200X.299 INTERWORKING BETWEEN NETWORKS X.300X.399 MESSAGE HANDLING SYSTEMS X.400X.499

3、 DIRECTORY X.500X.599 OSI NETWORKING AND SYSTEM ASPECTS X.600X.699 OSI MANAGEMENT X.700X.799 SECURITY X.800X.849 OSI APPLICATIONS X.850X.899 OPEN DISTRIBUTED PROCESSING X.900X.999 INFORMATION AND NETWORK SECURITY General security aspects X.1000X.1029 Network security X.1030X.1049 Security management

4、 X.1050X.1069 Telebiometrics X.1080X.1099 SECURE APPLICATIONS AND SERVICES Multicast security X.1100X.1109 Home network security X.1110X.1119 Mobile security X.1120X.1139 Web security X.1140X.1149 Security protocols X.1150X.1159 Peer-to-peer security X.1160X.1169 Networked ID security X.1170X.1179 I

5、PTV security X.1180X.1199 CYBERSPACE SECURITY Cybersecurity X.1200X.1229 Countering spam X.1230X.1249 Identity management X.1250X.1279 SECURE APPLICATIONS AND SERVICES Emergency communications X.1300X.1309 Ubiquitous sensor network security X.1310X.1339 CYBERSECURITY INFORMATION EXCHANGE Overview of

6、 cybersecurity X.1500X.1519 Vulnerability/state exchange X.1520X.1539 Event/incident/heuristics exchange X.1540X.1549 Exchange of policies X.1550X.1559 Heuristics and information request X.1560X.1569 Identification and discovery X.1570X.1579 Assured exchange X.1580X.1589 For further details, please

7、refer to the list of ITU-T Recommendations. Rec. ITU-T X.1081 (10/2011) i Recommendation ITU-T X.1081 The telebiometric multimodal model A framework for the specification of security and safety aspects of telebiometrics Summary The telebiometric multimodal model has been developed from two main sour

8、ces that provide the solid foundation for the model. The first is a considerable body of theoretical work on systems, scale propinquity, hierarchies and modalities of interaction between a human being and the environment. The second comes from the specifications in the ISO/IEC 80000-series of quanti

9、ties and units, for all known forms of measurement of the magnitude of physical interactions between a person and its environment. The telebiometric multimodal model is not limited to consideration of purely physical interactions, but also recognizes behavioural interactions. Such interactions are c

10、urrently not quantified by standard units. It also recognizes the importance of examining all possible interactions using the insights provided by a number of different fields of academic study. The model itself consists of a specification of a number of dimensions related to interactions in a set o

11、f specified modalities, in both directions, at various intensities, using the complete range of quantities and units specified in the ISO/IEC 80000-series. This provides a taxonomy of all possible interactions, which contains more than 1600 combinations of measurement units, modalities and fields of

12、 study. History Edition Recommendation Approval Study Group 1.0 ITU-T X.1081 2004-04-29 17 1.1 ITU-T X.1081 (2004) Cor. 1 2007-02-13 17 1.2 ITU-T X.1081 (2004) Amd.1 2009-10-29 17 1.3 ITU-T X.1081 (2004) Amd.2 2010-05-29 17 1.4 ITU-T X.1081 (2004) Amd.3 2011-10-14 17 2.0 ITU-T X.1081 2011-10-14 17 i

13、i Rec. ITU-T X.1081 (10/2011) FOREWORD The International Telecommunication Union (ITU) is the United Nations specialized agency in the field of telecommunications, information and communication technologies (ICTs). The ITU Telecommunication Standardization Sector (ITU-T) is a permanent organ of ITU.

14、 ITU-T is responsible for studying technical, operating and tariff questions and issuing Recommendations on them with a view to standardizing telecommunications on a worldwide basis. The World Telecommunication Standardization Assembly (WTSA), which meets every four years, establishes the topics for

15、 study by the ITU-T study groups which, in turn, produce Recommendations on these topics. The approval of ITU-T Recommendations is covered by the procedure laid down in WTSA Resolution 1. In some areas of information technology which fall within ITU-Ts purview, the necessary standards are prepared o

16、n a collaborative basis with ISO and IEC. NOTE In this Recommendation, the expression “Administration“ is used for conciseness to indicate both a telecommunication administration and a recognized operating agency. Compliance with this Recommendation is voluntary. However, the Recommendation may cont

17、ain certain mandatory provisions (to ensure, e.g., interoperability or applicability) and compliance with the Recommendation is achieved when all of these mandatory provisions are met. The words “shall“ or some other obligatory language such as “must“ and the negative equivalents are used to express

18、 requirements. The use of such words does not suggest that compliance with the Recommendation is required of any party. INTELLECTUAL PROPERTY RIGHTS ITU draws attention to the possibility that the practice or implementation of this Recommendation may involve the use of a claimed Intellectual Propert

19、y Right. ITU takes no position concerning the evidence, validity or applicability of claimed Intellectual Property Rights, whether asserted by ITU members or others outside of the Recommendation development process. As of the date of approval of this Recommendation, ITU had not received notice of in

20、tellectual property, protected by patents, which may be required to implement this Recommendation. However, implementers are cautioned that this may not represent the latest information and are therefore strongly urged to consult the TSB patent database at http:/www.itu.int/ITU-T/ipr/. ITU 2012 All

21、rights reserved. No part of this publication may be reproduced, by any means whatsoever, without the prior written permission of ITU. Rec. ITU-T X.1081 (10/2011) iii Table of Contents Page 1 Scope 1 2 References. 1 3 Definitions 2 3.1 Terms defined elsewhere 2 3.2 Terms defined in this Recommendatio

22、n . 2 4 Abbreviations and acronyms 3 5 Overview of the telebiometric multimodal model 3 6 The 1-m radius biosphere and the personal privacy sphere 5 6.7 Summary of this component of the model . 5 7 Modalities of interactions . 5 7.11 Relation to biometric device standardization . 8 8 Fields of study

23、 8 8.4 Summary of this component of the model . 9 9 Measurable entities . 9 9.1 Units employed in measurements, calculations and threshold specifications 9 9.2 Specification of thresholds for security and safety . 9 10 Scale hierarchies and particle and wave interactions . 10 10.7 Summary of this co

24、mponent of the model . 11 11 The telebiometric multimodal model: a three-layer model 11 11.11 Summary of this component of the model . 13 12 Object identifier assignments . 13 Annex A Formal ASN.1 OID allocations . 15 A.1 General . 15 A.2 ASN.1 module 15 Appendix I ISO/IEC 80000-series specification

25、 of SI units . 17 Appendix II Use of the telebiometric multimodal model . 19 II.1 Privacy 19 II.2 Biometric authentication 19 II.3 Ecological liability 19 II.4 Acceptable biometric authentication schema . 19 Appendix III Theory of organizations and levels . 20 III.1 Introduction 20 III.2 Theory of o

26、rganizations 20 III.3 The Theory of Integrative Levels . 21 III.4 Hierarchy Theory 22 Appendix IV Tables illustrating scale hierarchy . 23 iv Rec. ITU-T X.1081 (10/2011) Page Appendix V Hierarchy theory principles 25 V.1 Hierarchies have two known logical forms 25 V.2 General properties 25 V.3 Forma

27、l relations between levels . 26 V.4 Style of growth of the hierarchy . 26 V.5 Criteria 27 V.6 Complexity . 27 V.7 Dynamical relations 27 V.8 Informational relations and semiotics 29 Bibliography. 30 Rec. ITU-T X.1081 (10/2011) v Introduction This Recommendation provides a multimodal model to assist

28、in the standardization of the telecommunication domain referred to as “telebiometrics“. This telebiometric multimodal model provides a framework for the identification of safety aspects of biometric devices, and for the specification of limits related to their safety, by analysing and categorizing t

29、he interactions between a person and its environment. It also provides a framework for the identification of new biometric approaches to security, based on the same analysis and categorization of the interactions between a person and its environment (it can be sensed, measured, and hence potentially

30、 identified). Thus, this Recommendation provides a common framework for the specification of both security applications and safety aspects of telebiometrics. Telebiometric data is recorded by a measurement instrument recording some bio-phenomenon. A taxonomy is presented of the interactions that can

31、 occur at the multimodal layer where the human body meets electronic or photonic or chemical or material devices capturing biometric parameters, or impacting on that body. Authentication of a human being, with preservation of his privacy and safety, can be specified in terms of interactions between

32、devices and the personal privacy sphere, which models and encapsulates the interactions of a human being with its environment, making discussion of such interactions explicit and engineerable. This Recommendation provides a structure for categorizing the interaction of human beings with telecommunic

33、ation terminals based on scale propinquity, using the International System of Units as it appears in ISO/IEC 80000, with standardized descriptors for units of physical phenomena (such as the bel, candela, and becquerel units for sound, light, and the intensity of radio-activity). The telebiometric m

34、ultimodal model specified in this Recommendation can: a) assist with the derivation of safe limits for the operation of telecommunication systems and biometric devices; b) provide a framework for developing a taxonomy of biometric devices; and c) facilitate the development of authentication mechanis

35、ms, based on both static (for example finger-prints) and dynamic (for example gait, or signature pressure variation) attributes of a human being. Many issues of safe levels in telecommunication systems in debate today (for example, privacy, biometric authentication and radiation protection) can be r

36、esolved using tables based on the model developed in this Recommendation, and applying the best current scientific knowledge. Telecommunication equipment manufacturers require solid foundations for their specifications, accepting liabilities only to the levels of the best of current knowledge. The t

37、elebiometric multimodal model defined here can be used to provide specifications related to: safety issues; security issues; biometric authentication issues; and privacy issues. Appendix I, “ISO/IEC 80000-series specification of SI units“, contains a copy of a table from ISO/IEC 80000 for convenienc

38、e, as it is fundamental to the use of the telebiometric multimodal model. Appendix II, “Use of the telebiometric multimodal model“, addresses in more detail the areas in which the model may be useful. Appendix III, “Theory of organizations and levels“, summarizes some of the theoretical work that un

39、derpins the telebiometric multimodal model. This is supplemented by the extensive Bibliography that references most of the major papers in this area for those requiring further background. vi Rec. ITU-T X.1081 (10/2011) Appendix IV, “Tables illustrating scale hierarchy“, provides illustrations of sc

40、ale hierarchy with respect to time. Appendix V, “Hierarchy theory principles“, summarizes the hierarchy theory and is supplemented by the extensive Bibliography that references most of the major papers in this area. Rec. ITU-T X.1081 (10/2011) 1 Recommendation ITU-T X.1081 The telebiometric multimod

41、al model A framework for the specification of security and safety aspects of telebiometrics 1 Scope 1.1 This Recommendation defines a telebiometric multimodal model that provides a common framework for the specification of four interconnected security issues: privacy, authentication, safety and secu

42、rity with, for example “acceptable biometric authentication schema“ (see Appendix II). 1.2 This telebiometric multimodal model covers all the possibilities for safe and secure multimodal man-machine interactions, and is derived in part from ISO/IEC 80000. The cognitive, perceptual and behavioural mo

43、dalities of a human being are also relevant in the field of telecommunication, and are likely to be used by a biometric sensor or effector in the future, for authentication purposes. These are also covered by this telebiometric multimodal model. 1.3 This Recommendation includes specification of the

44、personal privacy sphere, categorization of modalities of interaction across that sphere, base and derived units for measuring and specifying (in a quantitative manner) such interactions, and a scale hierarchy for relative propinquity. It also includes some discussion of the differences between parti

45、cle and wave interactions. 2 References The following ITU-T Recommendations and other references contain provisions which, through reference in this text, constitute provisions of this Recommendation. At the time of publication, the editions indicated were valid. All Recommendations and other refere

46、nces are subject to revision; users of this Recommendation are therefore encouraged to investigate the possibility of applying the most recent edition of the Recommendations and other references listed below. A list of the currently valid ITU-T Recommendations is regularly published. The reference t

47、o a document within this Recommendation does not give it, as a stand-alone document, the status of a Recommendation. ITU-T X.660 Recommendation ITU-T X.660 (2008) | ISO/IEC 9834-1:2008, Information technology Open Systems Interconnection Procedures for the operation of OSI Registration Authorities:

48、General procedures and top arcs of the International Object Identifier tree. ITU-T X.68x Recommendation ITU-T X.68x-series (2008) | ISO/IEC 8824-x:2008, Information technology Abstract Syntax Notation One (ASN.1). ITU-T X.810 Recommendation ITU-T X.810 (1995) | ISO/IEC 10181-1:1996, Information tech

49、nology Open Systems Interconnection Security frameworks for open systems: Overview. ISO/IEC 80000 ISO/IEC 80000-series (in force), Quantities and units. ISO 80000-1 Part 1: General. ISO 80000-2 Part 2: Mathematical signs and symbols to be used in the natural sciences and technology. ISO 80000-3 Part 3: Space and time. ISO 80000-4 Part 4: Mechanics. ISO 80000-5 Part 5: Thermodynamics. IEC 80000-6 Part 6: Electromagnetism. 2 Rec. ITU-T X.1081 (10/2011) ISO 80000-7 Part 7: