BS ISO/IEC 19795-5:2011

Foreword
Introduction
1 Scope
2 Conformance
3 Normative references
4 Terms and definitions
5 Definition of testing scenario
6 Testing approach and conduct
7 Grading and reporting
Annex A (informative) - Grading information
Annex B (normative) - Statistical methods for estimation of
        confidence bounds graded test metrics
Bibliography

Applies to performance testing of biometric systems without detailed knowledge of the comparison algorithms or of the underlying distribution of biometric characteristics in the population of interest.

This part of ISO/IEC19795:

• defines a common biometric access control scenario for use in scenario evaluation of biometric verification systems;

• provides a grading scheme for expressing quantitative biometric system requirements and performance levels;

• provides a common basis for conducting scenario evaluations to demonstrate that specified performance grades are being achieved which is adaptable to particular testing facilities and to specific biometric systems.

This part of ISO/IEC19795 is applicable to performance testing of biometric systems without detailed knowledge of the comparison algorithms or of the underlying distribution of biometric characteristics in the population of interest.

The minimum false accept rate (FAR) tested by this part of ISO/IEC19795 is 0.1%. If a lower FAR is required, customized testing (outside the scope of this part of ISO/IEC19795) might be appropriate, and needs to be fully compliant with ISO/IEC19795-2.

This part of ISO/IEC19795 addresses testing a biometric system for physical access control, and the suitability of the testing for logical access devices needs to be determined on a case-by-case basis.

Not within the scope of this part of ISO/IEC19795 is the measurement of error and throughput rates for people deliberately trying to circumvent correct recognition by the biometric system (i.e. active impostors). In addition, this part of ISO/IEC19795 does not assess the following:

• reliability, availability and maintainability;

• security, including vulnerability;

• human factors, including user acceptance;

• environmental impacts;

• safety;

• cost/benefit/suitability;

• privacy regulation compliance.

These assessments are the responsibility of the procuring authority.