1、BSI Standards Publication Information technology Cross jurisdictional and societal aspects of implementation of biometric technologies Biometrics and children PD ISO/IEC TR 30110:2015National foreword This Published Document is the UK implementation of ISO/IEC TR 30110:2015. The UK participation in
2、its preparation was entrusted to Technical Committee IST/44, Biometrics. A list of organizations represented on this committee can be obtained on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct a
3、pplication. The British Standards Institution 2015. Published by BSI Standards Limited 2015 ISBN 978 0 580 80798 5 ICS 35.040 Compliance with a British Standard cannot confer immunity from legal obligations. This Published Document was published under the authority of the Standards Policy and Strate
4、gy Committee on 30 November 2015. Amendments/corrigenda issued since publication Date Text affected PUBLISHED DOCUMENT PD ISO/IEC TR 30110:2015Information technology Cross jurisdictional and societal aspects of implementation of biometric technologies Biometrics and children Technologies de linforma
5、tion Aspects pangouvernementaux et pansocitaux de limplmentation des technologies biomtriques Biomtrie et enfants TECHNICAL REPORT ISO/IEC TR 30110 First edition 2015-11-01 Reference number ISO/IEC TR 30110:2015(E) ISO/IEC 2015 PD ISO/IEC TR 30110:2015ii ISO/IEC 2015 All rights reserved COPYRIGHT PR
6、OTECTED DOCUMENT ISO/IEC 2015, Published in Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, witho
7、ut prior written permission. Permission can be requested from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Ch. de Blandonnet 8 CP 401 CH-1214 Vernier, Geneva, Switzerland Te l . + 4 1 2 2 7 4 9 0 1 1 1 Fax +41 22 749 09 47 copyrightiso.org
8、 www.iso.org ISO/IEC TR 30110:2015(E) PD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E) Foreword v Introductionvi 1 Scope . 1 2 Normative references 1 3 Te r m s and definitions . 1 4 Symbols and abbreviated terms. 1 5 Background and rationale 2 5.1 Definition of “child” in terms of age 2 5.2 Ethical
9、 background 2 5.3 General considerations 2 6 Studies on biometrics for children 3 6.1 General . 3 6.2 Study on age estimation of children . 3 6.3 Fingerprints . 3 6.3.1 Physiology 3 6.3.2 Studies concerning the use of fingerprints for children 4 6.4 Face . 4 6.4.1 Physiology 4 6.4.2 Study concerning
10、 the use of face recognition for children 5 6.5 Iris 5 6.5.1 Physiology 5 6.5.2 Study concerning the use of iris recognition for children 5 6.6 Hand geometry . 5 6.6.1 Physiology 5 6.6.2 Studies concerning the use of hand geometry for children 6 7 Applications. 6 7.1 Identification and protection of
11、 newborns. 6 7.2 Fight against children trafficking 6 7.3 Missing children search . 6 7.3.1 National Missing and Unidentified Persons System (NamUs) 6 7.3.2 National Center for Missing and Exploited Children (NCMEC) . 6 7.3.3 Childrens Identification and Location Database (CHILD) . 7 7.3.4 Masonic Y
12、outh Child Identification Program (MYCHIP) 7 7.3.5 National Child Identification Program (NCIDP) . 7 7.4 Schools . 7 7.4.1 Registration 7 7.4.2 Library book borrowing 7 7.4.3 Cashless catering . 7 7.4.4 Count of children access to catering . 7 7.5 Children medical treatment history . 8 8 Protection
13、of children in using biometrics . 8 8.1 Data protection and privacy 8 8.1.1 Information to be provided to parents and legal representatives consent 8 8.1.2 Information to be provided to children 8 8.1.3 Enrolment procedures and environment 8 8.1.4 Enrolment right of an updated enrolment . 8 8.1.5 En
14、rolment right to watch 8 8.1.6 Opt-out 8 8.1.7 Biometric data security 8 8.1.8 Biometric data destruction transfer 9 8.2 Psychological protection. 9 ISO/IEC 2015 All rights reserved iii Contents Page PD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E) Bibliography .10 iv ISO/IEC 2015 All rights reserve
15、d PD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E) Foreword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the de
16、velopment of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-govern
17、mental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC D
18、irectives, Part 1. In particular the different approval criteria needed for the different types of document should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives). Attention is drawn to the possibility that som
19、e of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent
20、 declarations received (see www.iso.org/patents). Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement. For an explanation on the meaning of ISO specific terms and expressions related to conformity assessment, as well as inform
21、ation about ISOs adherence to the WTO principles in the Technical Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information The committee responsible for this document is ISO/IEC JTC 1, Information technology, SC 37, Biometrics. ISO/IEC 2015 All rights reserved v PD ISO/IEC
22、 TR 30110:2015ISO/IEC TR 30110:2015(E) Introduction In the growing involvement of children in biometric systems, several issues concerning their use of biometrics appear more critical than to adults. Most problems rely on the physical and psychological immaturity of children. The bodies of children
23、are still in a growing phase and this may cause difficulties in the biometric capture and comparison processes. For the children themselves, the usability of a biometric system becomes a crucial factor. On the other hand, their psychological immaturity implies that there could be situations where pa
24、rent(s) or legal representative(s) have to support them to use biometric systems, especially when data protection or privacy issues are involved. In this Technical Report, the definition of “child” is considered from the applicative point of view in Clause 5. In Clause 6, studies on biometrics for c
25、hildren are surveyed for certain modalities because the application of biometrics is heavily dependent on the modality. Clause 7 introduces examples of application of biometrics that are typical to children and present clear benefits. Finally, Clause 8 summarizes various elements concerning the prot
26、ection of children when using biometric systems with particular reference to data protection and psychological concerns. Examples of the benefits to be gained by using the Technical Report are the following: operational support in using biometrics applied to the context of children; enhanced accepta
27、nce by subjects of systems (children, parents and legal representatives, tutors,.) using biometric technology; improved public perception and understanding of these systems; smoother introduction and operation of these systems; adoption of commonly approved good privacy practice. The primary stakeho
28、lders are identified as follows: parents and legal representatives; users of the biometric data; developers of technical standards; subjects who provide the biometric sample; requirements analysts; system architects; IT designers; public policy makers. Any jurisdiction of the country for which the b
29、iometric system is intended to shall be considered. vi ISO/IEC 2015 All rights reserved PD ISO/IEC TR 30110:2015Information technology Cross jurisdictional and societal aspects of implementation of biometric technologies Biometrics and children 1 Scope This Technical Report builds upon the general r
30、ecommendations given in ISO/IEC TR 24714-1. It provides guidance for users (as defined in ISO/IEC 2382-37) of biometric recognition systems on specific requirements in relation to deployments when children are included as subjects in the biometric process. 2 Normative references The following docume
31、nts, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 2382-37, Informatio
32、n technology Vocabulary Part 37: Biometrics 3 T erms an d definiti ons For the purposes of this document, the terms and definitions given in ISO/IEC 2382-37 and the following apply. 3.1 child person below the age of 18, unless the laws of a particular country set the legal age for adulthood younger
33、1) 3.2 friction ridges ridges present on the skin of the fingers and toes, the palms and soles of the feet, which makes contact with an incident surface under normal touch 4 Symbols and abbreviated terms BIODEV Biometrics Data Experimented in Visa (European Commission funded experimenta- tion, 2005)
34、 BKA Bundeskriminalamt (Federal Criminal Police Office of Germany) dpi dots per inch EC European Commission EER Equal Error Rate JRC European Commission Joint Research Center MYCHIP The Masonic Youth Child Identification Program (MYCHIP) 1) http:/www.ohchr.org/en/professionalinterest/pages/crc.aspx
35、viewed 12 July 2015. TECHNICAL REPORT ISO/IEC TR 30110:2015(E) ISO/IEC 2015 All rights reserved 1 PD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E) NCMA National Center for Missing Adults NCMEC National Center for Missing and Exploited Children NIJ National Institute of Justice NIST National Institut
36、e of Standards and Technology (U.S. Department of Commerce) NMCO Nations Missing Children Organization TNO Nederlandse Organisatie voor Toegepast Natuurwetenschappelijk Onderzoek (Neth- erlands Organisation for Applied Scientific Research) UIDAI Unique IDentification Authority of India (UIDAI) UNICE
37、F United Nations Childrens Fund 5 Background and rationale 5.1 Definition of “child ” in te r m s of age The term “child” is generally considered to cover the period between birth and puberty and, from a legal point of view, may be substituted by the term “minor“. The concept itself of “minor” is no
38、t sharply defined in most jurisdictions. The ages of criminal responsibility and consent, the age at which attendance at school ceases to be obligatory, the age at which legally binding contracts can be entered into, and so on, can all be different. With regards to the age limit of childhood, the ab
39、ove mentioned convention on the Rights of the Child defines a child as a person below the age of 18, unless the laws of a particular country set the legal age for adulthood younger. In accordance with the above mentioned convention, for the purpose of this Technical Report, a “child” is an individua
40、l up to 18 years although, from a morphological point of view, all the biometrics characteristics can be considered stable at earlier ages. 5.2 Ethical background The 1959 United Nations Declaration of the Rights of the Child, 1approved by the United Nations General Assembly, clearly ratifies that,
41、by reason of their physical and mental immaturity, children need special safeguards and care, including appropriate legal protection. With specific reference to identity management, the principle three of the above mentioned declaration prescribes that “The child shall be entitled from his birth to
42、a name and a nationality”. The importance of the identity in the context of childhood is reinforced by the Articles 7 and 8 of the Convention on the Rights of the Child 2(20 November 1989, entry into force 2 September 1990), cited also by UNICEF. 3The articles highlight the obligation of the States
43、Parties to respect the right of the child to preserve his or her identity. The 1959 United Nations Declaration of the Rights of the Child and the Convention on the Rights of the Child, while ratifying that children shall be the object of special respect and protection, highlight the importance of id
44、entity and pave the way to the implementation of biometric recognition systems. 5.3 General considerations Due to the widespread diffusion of biometrics and to the growing involvement of children in the identity management processes, some concerns have been raised due to the legal, social and ethica
45、l aspects encompassed. 2 ISO/IEC 2015 All rights reserved PD ISO/IEC TR 30110:2015ISO/IEC TR 30110:2015(E) Apart from the apprehensions, it should be highlighted that biometrics can assume a straightforward importance for the safety and security itself of children. Biometrics is an important tool in
46、 fighting crimes, such as, human trafficking with a particular reference to children who are often the innocent victims of abuses and violence or even appreciated source of human body organs unscrupulously offered on the terror market. Other applications of biometrics for children have a different p
47、urpose. For example, some school canteens or libraries have introduced a biometric check to verify the identity of children in accessing the services offered. The target of these applications is the alleviation of potential frauds. In some national jurisdictions, the local Data Protection Commission
48、s can consider this purpose non-sufficient to satisfy the principle of “proportionality”. The proportionality principle refers to a general principle of law that requires in general a fair balance and reasonable relationship between the means requested or used, including the severity and the duratio
49、n of the means, and the objective sought. 4 6 Studies on biometrics for children 6.1 General This Clause analyses some aspects relative to the biometric technologies which have already found an application for children. The text justifies the selection of the biometric modalities in the section. 6.2 Study on age estimation of children Estimating the age of children in photographic images may be useful in determining whether a child has the same identity as a reported missing
