BS ISO/IEC 24713-2:2008

Foreword
Introduction
1 Scope
2 Conformance
3 Normative references
4 Terms and definitions
5 Environment
  5.1 Employees in the targeted environment
  5.2 Architecture
  5.3 Token
  5.4 Token management system
  5.5 Command and control system
  5.6 Command and control administration system
  5.7 Infrastructure system
6 Process
  6.1 General
  6.2 Proofing
  6.3 Registration
  6.4 Issuance
  6.5 Activation to a local access control system
  6.6 Usage
7 Security Considerations
Annex A (normative) - Requirements List
      A.1 General
      A.2 Relationship between RL and corresponding
          ICS proformas
      A.3 Profile Specific Implementation Conformance
          Statement
      A.4 Instruction for completing the ICS proforma
          A.4.1 General structure of the ICS proforma
          A.4.2 Additional Information
          A.4.3 Exception Information
      A.5 ICS proforma
      A.6 Interchange Formats
          A.6.1 Finger Image Data (ISO/IEC 19794-4:2005)
          A.6.2 Finger Minutiae Data (ISO/IEC 19794-2:2005)
          A.6.3 Finger Pattern Spectral Data
                (ISO/IEC 19794-3:2006)
          A.6.4 Face Image Data (ISO/IEC19794-5:2005)
          A.6.5 Iris Image Data (ISO/IEC 19794-6:2005)
          A.6.6 Signature/Sign Time Series Data
                (ISO/IEC 19794-7:2007)
          A.6.7 Finger Pattern Skeletal Data
                (ISO/IEC 19794-7:2007)
          A.6.7 Finger Pattern Skeletal Data
                (ISO/IEC 19794-8:2006)
          A.6.8 Vascular Image Data (ISO/IEC 19794-9:2007)
          A.6.9 Hand Geometry Silhouette Data
                (ISO/IEC 19794-10:2007)
      A.7 Technical Interface Standards
          A.7.1 BioAPI (ISO/IEC 19784-1:2006)
          A.7.2 CBEFF (ISO/IEC 19785-1:2006)
Annex B (informative) - Additional information
Annex C (informative) - Security Considerations
      C.1 Approaches
      C.2 Representative threat list
Bibliography

Describes the application profile including necessary parameters and interfaces between function modules (i.e. BioAPI based modules and an external interface) in support of token-based biometric identification and verification of employees, at local access points (i.e. doors or other controlled entrances) and across local boundaries within the defined area of control in an airport.

This part of ISO/IEC 24713 specifies the biometric profile including necessary parameters and interfaces between function modules (i.e. BioAPI based modules and an external interface) in support of token-based biometric identification and verification of employees, at local access points (i.e. doors or other controlled entrances) and across local boundaries within the defined area of control in an airport. The token is expected to contain one or more biometric references.

This part of ISO/IEC 24713 does not specify a complete Access Control System for deployment at access points within the secure area of an airport. It is assumed that such systems exist and that a biometric component that is the subject of this part of ISO/IEC 24713 is being added to an existing system. It therefore excludes such things as device features, and exception and incident reporting and handling. This information is contained in Annex C for information only.

This part of ISO/IEC 24713 includes recommended practices for enrolment, watch list checking, duplicate issuance prevention, and verification of the identity of employees at airports. It also describes architectures and business processes appropriate to the support of token-based identity management in the secure environment of an airport.

It is recommended that the confidentiality, integrity, and availability of biometric data be safeguarded in accordance with local, regional, or national policy considerations.

This part of ISO/IEC 24713 does not preclude users building applications based on this part of ISO/IEC 24713 from being able to meet such privacy/data protection requirements as may apply to their application. The specification of privacy/data protection requirements that may apply is outside the scope of this part of ISO/IEC 24713.