|
ISO/IEC 19792:2009 |
|---|---|
| SCOPE | This International Standard specifies the subjects to be addressed during a security evaluation of a biometric system. |
| LATEST PUBLICATION DATE | August 2009 |
| COMMITTEE / WG | |
| WIKI WATCH Insert here: activities, gaps, opportunities, and other user driven comments |
submit a comment |
Submitted by rsreillo on Sat, 07/20/2019 - 23:26
This standard was created with the objective to address security evaluations of systems which use biometric technology in compliance with Common Criteria (CC). It defines the major requirements to follow, but it neither states a concrete methodology, nor establishes a correspondence between those requirements and the testing activities addressed in the Common Criteria Evaluation Methodology (CEM). As it was published in 2009, it should have gone through a systematic review, in order to enhance the content of the standard, and adapt it to the latest works in CC. But unfortunately, the international community did not consider it necessary to go for such a revision, at least till now. One of the reasons behind this decision may be on the fact that trying to reach a generic methodology for all kind of biometric systems, seems to be a really tough work. So the strategy is to start focussing on particular scenarios and applications. This can be seen in the revision of ISO/IEC 24745 on Biometric Information Protection (currently on-going), the revision to ISO/IEC 24761 Authentication context for biometrics (close to be finished), the revision of the 3 parts of ISO/IEC 19989 Criteria and methodology for security evaluation of biometric systems (in process), and the future ISO/IEC 27553 Security requirements for authentication using biometrics on mobile devices (still in a very premature stage).
Submitted by jbringer on Fri, 09/27/2019 - 09:16
19792 is one of the key introduction to the various vulnerabilities that may concern a biometric system and gives a first level of guidance to tackle them. More details on the security evaluation methodology are developed into 19989 (on-going).