1、 INCITS/ISO/IEC 24708:2008 2009 ISO/IEC 24708:2008 Information technology Biometrics BioAPI Interworking Protocol INCITS/ISO/IEC 24708:2008 2009 PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, this file may be printed or viewed but shall not b
2、e edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In downloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secretariat accepts no liability in this area. Adobe i
3、s a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO memb
4、er bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below. Adopted by INCITS (InterNational Committee for Information Technology Standards) as an American National Standard. Date of ANSI Approval: 9/14/2009 Published by
5、American National Standards Institute, 25 West 43rd Street, New York, New York 10036 Copyright 2009 by Information Technology Industry Council (ITI). All rights reserved. These materials are subject to copyright claims of International Standardization Organization (ISO), International Electrotechnic
6、al Commission (IEC), American National Standards Institute (ANSI), and Information Technology Industry Council (ITI). Not for resale. No part of this publication may be reproduced in any form, including an electronic retrieval system, without the prior written permission of ITI. All requests pertain
7、ing to this standard should be submitted to ITI, 1250 Eye Street NW, Washington, DC 20005. Printed in the United States of America ii ITIC 2009 All rights reserved ISO/IEC 24708:2008(E) ISO/IEC 2008 All rights reserved iiiCONTENTS Page 1 Scope . 1 2 Normative references 2 2.1 Identical Recommendatio
8、ns | International Standards . 2 2.2 Paired Recommendations | International Standards equivalent in technical content. 2 2.3 Additional references. 2 3 Conformance . 3 4 Abbreviations 4 5 Conventions 5 6 Conformance . 5 7 BIP architecture . 7 7.1 BIP-enabled frameworks 7 7.2 BIP messages . 8 7.3 BIP
9、 endpoints. 8 7.4 BIP links . 9 7.5 Transport protocol bindings 10 7.6 Creation and destruction of BIP links 10 8 Remote GUI event notifications 11 9 Examples of possible system configurations 12 10 BIR format 15 11 Identification of BIP endpoints, applications, and BSPs . 15 12 Overview of BIP exch
10、anges 16 12.1 Security and privacy provisions . 16 12.2 Application invocation of functions on a remote BSP. 16 12.3 Application invocation of functions with no associated BIP message. 18 12.4 Event notifications 18 13 General provisions 18 14 BIP message syntax 21 15 BioAPI and BIP types . 24 15.1
11、Integers. 24 15.2 Character strings . 25 15.3 Uniform resource identifiers designating BIP endpoints 25 15.4 Type BioAPI_BFP_LIST_ELEMENT 26 15.5 Type BioAPI_BFP_SCHEMA . 26 15.6 Type BioAPI_BIR 28 15.7 Type BioAPI_BIR_ARRAY_POPULATION . 28 15.8 Type BioAPI_BIR_BIOMETRIC_DATA_FORMAT 29 15.9 Type Bio
12、API_BIR_BIOMETRIC_PRODUCT_ID . 29 15.10 Type BioAPI_BIR_BIOMETRIC_TYPE. 29 15.11 Type BioAPI_BIR_DATA_TYPE . 30 15.12 Type BioAPI_BIR_HANDLE 31 15.13 Type BioAPI_BIR_HEADER 31 15.14 Type BioAPI_BIR_PURPOSE 32 15.15 Type BioAPI_BIR_SECURITY_BLOCK_FORMAT 33 15.16 Type BioAPI_BIR_SUBTYPE. 33 15.17 Type
13、 BioAPI_BIR_SUBTYPE_MASK. 34 15.18 Type BioAPI_BOOL. 35 15.19 Type BioAPI_BSP_SCHEMA. 35 15.20 Type BioAPI_CANDIDATE 37 15.21 Type BioAPI_CATEGORY 38 ISO/IEC 24708:2008(E) iv ISO/IEC 2008 All rights reservedPage 15.22 Type BioAPI_DATA . 38 15.23 Type BioAPI_DATE . 39 15.24 Type BioAPI_DB_ACCESS_TYPE
14、 39 15.25 Type BioAPI_DB_MARKER_HANDLE. 40 15.26 Type BioAPI_DB_HANDLE . 40 15.27 Type BioAPI_DBBIR_ID . 40 15.28 Type BioAPI_DTG. 41 15.29 Type BioAPI_ERROR_INFO 41 15.30 Type BioAPI_EVENT . 41 15.31 Type BioAPI_EVENT_MASK . 42 15.32 Type BioAPI_FMR. 42 15.33 Type BioAPI_FRAMEWORK_SCHEMA . 42 15.34
15、 Type BioAPI_GUI_BITMAP . 43 15.35 Type BioAPI_GUI_BITMAP_ARRAY . 44 15.36 Type BioAPI_GUI_EVENT_SUBSCRIPTION 44 15.37 Type BioAPI_GUI_MOMENT . 45 15.38 Type BioAPI_GUI_ENROLL_TYPE. 45 15.39 Type BioAPI_GUI_OPERATION. 45 15.40 Type BioAPI_GUI_RESPONSE 46 15.41 Type BioAPI_GUI_SUBOPERATION. 47 15.42
16、Type BioAPI_HANDLE . 48 15.43 Type BioAPI_IDENTIFY_POPULATION. 48 15.44 Type BioAPI_IDENTIFY_POPULATION_TYPE . 49 15.45 Type BioAPI_INDICATOR_STATUS . 49 15.46 Type BioAPI_INPUT_BIR 50 15.47 Type BioAPI_INPUT_BIR_FORM . 50 15.48 Type BioAPI_OPERATIONS_MASK 51 15.49 Type BioAPI_OPTIONS_MASK 52 15.50
17、Type BioAPI_POWER_MODE . 53 15.51 Type BioAPI_QUALITY 53 15.52 Type BioAPI_RETURN. 53 15.53 Type BioAPI_STRING 53 15.54 Type BioAPI_TIME 54 15.55 Type BioAPI_UNIT_ID 54 15.56 Type BioAPI_UNIT_LIST_ELEMENT. 55 15.57 Type BioAPI_UNIT_SCHEMA 55 15.58 Type BioAPI_UUID 56 15.59 Type BioAPI_VERSION 56 16
18、Functions defined in BioAPI and corresponding BIP messages 57 16.1 Function BioAPI_Init. 57 16.2 Function BioAPI_InitEndpoint. 58 16.3 Function BioAPI_Terminate . 58 16.4 Function BioAPI_LinkToEndpoint 59 16.5 Function BioAPI_UnlinkFromEndpoint 62 16.6 Function BioAPI_EnumFrameworks. 63 16.7 Functio
19、n BioAPI_EnumBSPs . 63 16.8 Function BioAPI_EnumBFPs 64 16.9 Function BioAPI_BSPLoad 65 16.10 Function BioAPI_BSPUnload . 67 16.11 Function BioAPI_QueryUnits 69 16.12 Function BioAPI_QueryBFPs . 70 16.13 Function BioAPI_BSPAttach 72 16.14 Function BioAPI_BSPDetach . 75 ISO/IEC 24708:2008(E) ISO/IEC
20、2008 All rights reserved vPage 16.15 Function BioAPI_EnableEvents 76 16.16 Function BioAPI_EnableEventNotifications 77 16.17 Function BioAPI_ControlUnit 79 16.18 Function BioAPI_Control . 80 16.19 Function BioAPI_FreeBIRHandle 81 16.20 Function BioAPI_GetBIRFromHandle. 82 16.21 Function BioAPI_GetHe
21、aderFromHandle 83 16.22 Function BioAPI_SubscribeToGUIEvents 84 16.23 Function BioAPI_UnsubscribeFromGUIEvents. 88 16.24 Function BioAPI_QueryGUIEventSubscriptions 92 16.25 Function BioAPI_NotifyGUISelectEvent 94 16.26 Function BioAPI_NotifyGUIStateEvent . 96 16.27 Function BioAPI_NotifyGUIProgressE
22、vent 99 16.28 Function BioAPI_RedirectGUIEvents . 101 16.29 Function BioAPI_UnredirectGUIEvents. 102 16.30 Function BioAPI_Capture 104 16.31 Function BioAPI_CreateTemplate . 105 16.32 Function BioAPI_Process 106 16.33 Function BioAPI_ProcessWithAuxBIR 107 16.34 Function BioAPI_VerifyMatch. 109 16.35
23、 Function BioAPI_IdentifyMatch . 110 16.36 Function BioAPI_Enroll . 112 16.37 Function BioAPI_Verify . 113 16.38 Function BioAPI_Identify . 115 16.39 Function BioAPI_Import 116 16.40 Function BioAPI_PresetIdentifyPopulation 118 16.41 Function BioAPI_Transform . 118 16.42 Function BioAPI_DbOpen 120 1
24、6.43 Function BioAPI_DbClose . 121 16.44 Function BioAPI_DbCreate 122 16.45 Function BioAPI_DbDelete 123 16.46 Function BioAPI_DbSetMarker . 124 16.47 Function BioAPI_DbFreeMarker . 124 16.48 Function BioAPI_DbStoreBIR. 125 16.49 Function BioAPI_DbGetBIR . 126 16.50 Function BioAPI_DbGetNextBIR . 12
25、7 16.51 Function BioAPI_DbDeleteBIR . 128 16.52 Function BioAPI_CalibrateSensor . 129 16.53 Function BioAPI_SetPowerMode 130 16.54 Function BioAPI_SetIndicatorStatus 131 16.55 Function BioAPI_GetIndicatorStatus 132 16.56 Function BioAPI_GetLastErrorInfo. 133 16.57 Function BioAPI_Cancel . 133 16.58
26、Function BioAPI_Free. 134 16.59 Function BioAPI_RegisterBSP 134 16.60 Function BioAPI_UnregisterBSP . 136 16.61 Function BioAPI_RegisterBFP 138 16.62 Function BioAPI_UnregisterBFP . 140 17 Callback functions defined in BioAPI and corresponding BIP messages 142 17.1 Callback function BioAPI_EVENT_HAN
27、DLER 142 17.2 Callback function BioAPI_GUI_SELECT_EVENT_HANDLER 144 17.3 Callback function BioAPI_GUI_STATE_EVENT_HANDLER 148 17.4 Callback function BioAPI_GUI_PROGRESS_EVENT_HANDLER. 152 ISO/IEC 24708:2008(E) vi ISO/IEC 2008 All rights reservedPage 18 Conceptual tables . 156 18.1 The MasterEndpoint
28、s conceptual table 156 18.2 The VisibleEndpoints conceptual table 158 18.3 The VisibleBSPRegistrations conceptual table . 158 18.4 The VisibleBFPRegistrations conceptual table . 161 18.5 The RunningBSPLocalReferences conceptual table . 163 18.6 The RunningBSPRemoteReferences conceptual table . 164 1
29、8.7 The UnitEventNotificationDisablers conceptual table 165 18.8 The AttachSessionLocalReferences conceptual table. 166 18.9 The AttachSessionRemoteReferences conceptual table . 168 18.10 The GUIEventLocalSubscriptions conceptual table. 169 18.11 The GUIEventRemoteSubscriptions conceptual table . 17
30、1 18.12 The GUIEventRedirectors conceptual table 172 18.13 The ApplicationOwnedMemoryBlocks conceptual table 173 19 Converting between a C pointer variable and a corresponding ASN.1 component (1). 174 20 Converting between a C pointer variable and a corresponding ASN.1 component (2). 174 21 Converti
31、ng between a C pointer variable and a corresponding ASN.1 component (3). 175 22 Initializing and checking a C pointer variable having no corresponding ASN.1 component . 175 23 Determining a hosting endpoint and a BSP product UUID from a BSP UUID 175 24 Determining a hosting endpoint and an original
32、BSP handle from a local BSP handle 176 25 Converting BSP UUIDs. 176 26 Converting BSP handles 176 27 Processing an incoming function call by exchanging a request/response BIP message pair with a slave endpoint . 176 28 Processing an incoming request BIP message via an internal BioAPI function call 1
33、77 29 Notifying a unit event to zero or more subscribers. 177 30 Notifying a GUI select event to a subscriber 178 31 Notifying a GUI state event to a subscriber 180 32 Notifying a GUI progress event to a subscriber. 181 33 Handling unconvertible C values . 183 Annex A Specification of the TCP/IP bin
34、ding . 184 A.1 General . 184 A.2 Transport-level message . 184 A.3 TCP/IP connection between two BIP endpoints. 185 A.4 Role of endpoint . 185 A.5 Closing the connection on errors 186 A.6 Transport of BIP messages 186 A.7 Usage of IRIs . 186 Annex B Specification of discovery and announcement in TCP
35、/IP binding . 187 B.1 General . 187 B.2 The PnP mechanisms . 187 B.3 Address and name setting in IPv4. 187 B.4 The network configuration function in IPv4 . 188 B.5 Address and name setting in IPv6. 189 B.6 The network configuration function in IPv6 . 189 B.7 Discovery and announcement 190 B.8 Servic
36、e discovery 191 B.9 Service requests via broadcast (IPv4) 191 B.10 Service requests via multicast (IPv4 or IPv6) 191 B.11 Receiving service announcement packets. 192 ISO/IEC 24708:2008(E) ISO/IEC 2008 All rights reserved viiPage B.12 Format of discovery and announcement messages . 193 B.13 Service a
37、nnouncement . 194 B.14 Reset and restart . 194 B.15 Timing of the exchange of messages over a link channel. 194 B.16 Security of the exchange of messages over a link channel . 194 Annex C Specification of the SOAP/HTTP binding 195 C.1 General provisions 195 C.2 Security considerations with SOAP/HTTP
38、 binding (tutorial) . 195 C.3 Schema header . 196 C.4 Global elements 196 C.5 Types 200 C.6 Parameters of request BIP messages . 212 C.7 Parameters of response BIP messages . 223 C.8 Parameters of notification BIP messages 231 C.9 Parameters of acknowledgement BIP messages. 233 C.10 Closure of the s
39、chema 233 C.11 Example 233 Annex D Clarification of minimal requirements for simple systems. 244 D.1 A simple system with a single fixed biometric device. 244 D.2 A simple system with a single database of BIRs 244 Annex E Possible scenarios involving the use of the BioAPI interworking protocol 245 E
40、.1 Access to a central national database for security and health administration 245 E.2 Registration of individuals at a point of entry, or a local registration centre. 245 E.3 Theme-park access 245 Annex F Formal ASN.1 modules 246 Annex G Bibliography 270 ISO/IEC 24708:2008(E) viii ISO/IEC 2008 All
41、 rights reservedForeword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standard
42、s through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC
43、, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is t
44、o prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibi
45、lity that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 24708 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 37, Biometrics,
46、 in collaboration with ITU-T. The identical text is published as ITU-T Rec. X.1083. ISO/IEC 24708:2008(E) ISO/IEC 2008 All rights reserved ixIntroduction This Recommendation | International Standard, the BioAPI interworking protocol (BIP), specifies the syntax, semantics, and encodings of a set of m
47、essages (“BIP messages“) that enable a BioAPI-conforming application to request biometric operations in BioAPI-conforming biometric service providers (BSPs) across node or process boundaries, and to be notified of events originating in those remote BSPs. It also specifies extensions to the architect
48、ure and behaviour of the BioAPI framework (specified in ISO/IEC 19784-1) that support the creation, processing, sending, and reception of BIP messages. A scenario where this Recommendation | International Standard would be applicable is where a national government decides to establish a system of bi
49、ometric enrolment and authentication that will involve a central database of all enrolled persons in the country, with access to that database from biometric devices in health-care, social services, immigration, and security services. This is one of several applications where the BIP would be of use. The BIP protocol is designed so that a conforming implementation does not have to support the whole functionality
