1、BSI Standards PublicationPersonal identification Borders and law enforcementapplication profiles for mobile biometric identification systemsPD CEN/TS 16921:2016National forewordThis Published Document is the UK implementation of CEN/TS 16921:2016.The UK participation in its preparation was entrusted
2、 to TechnicalCommittee IST/44, Biometrics.A list of organizations represented on this committee can be obtained onrequest to its secretary.This publication does not purport to include all the necessary provisions ofa contract. Users are responsible for its correct application. The British Standards
3、Institution 2016.Published by BSI Standards Limited 2016ISBN 978 0 580 91181 1ICS 35.240.15Compliance with a British Standard cannot confer immunity fromlegal obligations.This Published Document was published under the authority of theStandards Policy and Strategy Committee on 30 April 2016.Amendmen
4、ts/corrigenda issued since publicationDate Text affectedPUBLISHED DOCUMENTPD CEN/TS 16921:2016TECHNICAL SPECIFICATION SPCIFICATION TECHNIQUE TECHNISCHE SPEZIFIKATION CEN/TS 16921 March 2016 ICS 35.240.15 English Version Personal identification - Borders and law enforcement application profiles for m
5、obile biometric identification systems Personenidentifikation - Biometrische Anwendungsprofile fr Ordnungskrfte und Grenzbergangsverantwortliche, die tragbare Identifizierungssysteme einsetzen This Technical Specification (CEN/TS) was approved by CEN on 25 January 2016 for provisional application. T
6、he period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their comments, particularly on the question whether the CEN/TS can be converted into a European Standard. CEN members are required to announce the existence of th
7、is CEN/TS in the same way as for an EN and to make the CEN/TS available promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS) until the final decision about the possible conversion of the CEN/TS into an EN is
8、reached. CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norwa
9、y, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey andUnited Kingdom. EUROPEAN COMMITTEE FOR STANDARDIZATION COMIT EUROPEN DE NORMALISATION EUROPISCHES KOMITEE FR NORMUNG CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels 2016 CEN All rights of exploit
10、ation in any form and by any means reserved worldwide for CEN national Members. Ref. No. CEN/TS 16921:2016 EPD CEN/TS 16921:2016CEN/TS 16921:2016 (E) 2 Contents Page European foreword . 3 Introduction 4 1 Scope 5 2 Terms and definitions . 5 3 Symbols and abbreviations . 6 4 Portable identity verific
11、ation systems 6 4.1 Introduction 6 4.2 Typology of portable identity verification systems 7 4.3 Portable identity verification systems in border control environment . 7 5 General recommendations for portable identity verification systems . 8 5.1 Biometric modalities . 8 5.2 Usability and accessibili
12、ty 8 5.3 European data protection regulation 8 5.4 Architecture 8 5.4.1 General aspects of architecture . 8 5.4.2 Physical and logical structure 9 5.5 Biometric security functions 11 5.6 Biometric sensors 11 5.6.1 General . 11 5.6.2 Fingerprint sensors . 12 5.6.3 Face image sensors 13 5.6.4 Iris sen
13、sors . 13 5.7 Biometric algorithms 13 5.8 Network performance 14 6 Application profiles . 14 6.1 Introduction . 14 6.2 Transportable systems 14 6.2.1 Profile description . 14 6.2.2 Environment description 14 6.2.3 Biometric security description evaluation . 14 6.3 Hand-held systems 15 6.3.1 Profile
14、description . 15 6.3.2 Environment description 15 6.4 Workstation systems 16 Bibliography . 17 PD CEN/TS 16921:2016CEN/TS 16921:2016 (E) 3 European foreword This document (CEN/TS 16921:2016) has been prepared by Technical Committee CEN/TC 224 “Personal identification and related personal devices wit
15、h secure element, systems, operations and privacy in a multi sectorial environment”, the secretariat of which is held by AFNOR. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CEN shall not be held responsible for identifying any
16、or all such patent rights. According to the CEN-CENELEC Internal Regulations, the national standards organizations of the following countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Re
17、public of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. PD CEN/TS 16921:2016CEN/TS 16921:2016 (E) 4 Introductio
18、n Most countries around the world are provided with identification systems for law enforcement and border control. To be consistent in such deployments and processes, technical documents, guidelines and best practice recommendations are being developed by different groups. However, these documents a
19、re primarily focused on Automated Border Control (ABC) systems and the technical and operational issues to be considered when planning and deploying such systems in Europe. There is little guidance covering the circumstances in which identification is not done in a fixed point, or for other purposes
20、 that cover any law enforcement application besides fixed ABC. There is a need for guidance for the use of mobile or portable identification capabilities as such systems have special biometrics characteristics: calibration problems, uncontrolled environment, specific biometric security aspects, that
21、 have to be considered differently for fixed point solutions. Law enforcement authorities can use mobile and especially hand-held systems to check persons identity under numerous circumstances, on borders as identity check for border control purposes as well as inside the national borders for standa
22、rd law enforcement purposes like suspect identity check, police check point control, police swoop, etc. In any of these applications, the mobile system may be able to use identity document, or if not present, to check persons identity using his/her biometrics against date base (local or remote). PD
23、CEN/TS 16921:2016CEN/TS 16921:2016 (E) 5 1 Scope This Technical Specification primarily focuses on biometric aspects of portable verification and identification systems for law enforcement and border control authorities. The recommendations given here will balance the needs of security, ease of acce
24、ss and data protection. ISO/IEC has published a series of standards dealing with biometric data coding, interfaces, performance tests as well as compliance tests. It is essential for interoperability that all these standards are applied in European deployments. However, ISO/IEC standards do not cons
25、ider national or regional characteristics; in particular, they do not consider European Union privacy and data protection regulation as well as accessibility and usability requirements. This Technical Specification extends the ISO standards by emphasizing specific European needs (for example EU data
26、 Protection Directive 95/46/EC and European databases access). The Technical Specification systematically discusses issues to be considered when planning, deploying and using portable identity verification systems and gives recommendations for those types of systems that are or will be in use in Eur
27、ope. Communication, infrastructure scalability, and security aspects other than those related to biometrics are not considered. This document also does not consider hardware and security requirements of biometric equipment and does not recommend general identification procedures. 2 Terms and definit
28、ions For the purposes of this document, the following terms and definitions apply. 2.1 biometric verification (1:1) process of confirming a biometric claim through biometric comparison SOURCE: ISO/IEC 2382-37 2.2 biometric identification (1:N) process of searching against a biometric enrolment datab
29、ase to find and return the biometric reference identifier(s) attributable to a single individual SOURCE: ISO/IEC 2382-37 2.3 transportable system capable of being carried or moved about. Moving this system may require some specialized procedures 2.4 workstation system that can be carried by one pers
30、on from place to place (typically size = suitcase; weight 15 kg). Usually, once the system is in place subject shall move to it 2.5 hand-held system that can be operated by handling in one hand (typically size 30 cm; weight 1 kg). Usually, controller can move to subject with the system PD CEN/TS 169
31、21:2016CEN/TS 16921:2016 (E) 6 3 Symbols and abbreviations For the purposes of this document, the following symbols and abbreviations apply. ABC Automated Border Control CEN European Committee for Standardization eMRTD electronic Machine Readable Travel Documents EU European Union ICAO International
32、 Civil Aviation Organization IEC International Electrotechnical Commission ISO International Organization for Standardization JTC Joint Technical Committee NIST National Institute of Standards and Technology RFID Radio-frequency identification TS Technical Specification VIS Visa Information System W
33、G Working Group 4 Portable identity verification systems 4.1 Introduction A portable identity verification system for law enforcement applications allows performing the identity verification of a citizen in contexts such as a police road block, foot or car patrol, etc. by comparing (1:1) a biometric
34、 sample captured live using the portable system with a reference sample (stored in an electronic document or in a remote database) or by performing a 1:N search in a database. Different functionalities can be made available by the system, depending on the availability of an electronic document and r
35、emote alphanumeric or biometric databases. If an electronic document, containing biometric fingerprint data is available (i.e. eMRTD or electronic National Identity document), the portable identity verification system allows to: perform a biometric verification (1:1) by comparing a biometric fingerp
36、rint sample captured live with the portable system with the reference sample stored in the electronic document. Once it is established that the citizen is the rightful holder of the document, national or international databases can then be searched to find out if the citizen is present in any releva
37、nt databases; if the verification does not return a positive match or if the law enforcement officer has doubts about the citizen identity, a biometric identification (1:N) can also be performed, by sending the captured biometric (fingerprint) sample to an AFIS system for matching, followed by a sea
38、rch in the alphanumeric databases using the identity returned by the AFIS system (that can be different from the one written in the document). If the document only contains a facial image (no fingerprints) or an iris, it is also possible to perform a search in a remote face or iris recognition syste
39、m, if available. If the citizen does not have an electronic document (or has no document at all) the portable identity verification system allows to: perform a biometric verification (1:1) by comparing a biometric fingerprint sample captured live with the portable system with a reference sample stor
40、ed in a remote database and identified by using information such as a national unique identity number or code (in the case where the citizen PD CEN/TS 16921:2016CEN/TS 16921:2016 (E) 7 has a non-electronic document) It is possible to perform this kind of verification if a National Biometric registry
41、 exists in the country and if every citizen is assigned a national unique identity number or code. In case of a positive match, the information stored in the National Biometric registry can be returned to the user of the system. Additional national or international databases can then be searched to
42、find out if the citizen is present in any relevant databases; perform a biometric identification (1:N) by capturing a biometric fingerprint sample with the portable system and sending it for matching to an AFIS system, where the 1:N search is performed. Additional national or international databases
43、 can then be searched to find out if the citizen is present in any relevant databases. If the system allows capturing a facial image or an iris, it is also possible to perform a search in a remote face or iris recognition system, if available. NOTE In the case of EU eMRTD, the biometric authenticati
44、on consists in capturing the live biometric data of the user fingerprint, iris or facial image and comparing it with the biometric information stored in the eMRTD chip. The fingerprint and iris data are protected, and the portable identification system accesses this information through EAC protocol,
45、 whereas SAC or BAC only protocol is sufficient to access the facial image. 4.2 Typology of portable identity verification systems Mobile ID devices have been employed for a variety of applications where a stationary collection environment is not possible or easily attainable. Applications include:
46、the officer on the street or at a checkpoint who needs to perform a quick check against biometric data stored in a card or to biometric databases and/or watch-lists; security at high profile, major public events, where fixed ID systems may not be practical or appropriate; issuance of a citation that
47、 requires registration of the biometric with the incident; verification of the identity of subjects at court appearances; access control for buildings, or Critical Infrastructure buildings; security involving prisoner transport and release tracking; immigration and border control; entitlement progra
48、ms and job applications. These applications and others are being accomplished with on-the-spot acquisitions of biometric data for comparison with samples stored in key databases or in ID cards. NOTE In this document, the biometric data refers to fingerprint, face, vein or iris, biometrics stored in
49、central databases and/or ID documents. 4.3 Portable identity verification systems in border control environment A portable border control system “authenticates the eMRTD, establishes that the traveller is the rightful holder of the document, queries border control records, then automatically determines eligibility for border crossing according to pre-defined rules” 1. The use of biometric data are the key for ensuring a close binding between the person and the document. The elements in a portable identification system are basically th
