ISO/IEC 30107-3:2023
Information technology — Biometric presentation attack detection — Part 3: Testing and reporting
This document establishes:
— principles and methods for the performance assessment of presentation attack detection (PAD) mechanisms;
— reporting of testing results from evaluations of PAD mechanisms; and
— a classification of known attack types (Annex A).
Outside the scope are:
— standardization of specific PAD mechanisms;
— detailed information about countermeasures (i.e. anti-spoofing techniques), algorithms or sensors; and
— overall system-level security or vulnerability assessment.
The attacks considered in this document take place at the biometric capture device during presentation. Any other attacks are considered outside the scope of this document.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$385.88 NZD
|
|
| HardCopy |
$437.63 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
3.1 Attack elements
3.2 Metrics
3.3 Test roles
4 Abbreviated terms
5 Conformance
6 Presentation attack detection (PAD) overview
7 Levels of evaluation of PAD mechanisms
7.1 Overview
7.2 General principles of evaluation of PAD mechanisms
7.3 PAD subsystem evaluation
7.4 Data capture subsystem evaluation
7.5 Full system evaluation
8 Artefact properties
8.1 Properties of PAIs in biometric impostor attacks
8.2 Properties of PAIs in biometric concealer attacks
8.3 Properties of synthesized biometric samples with abnormal characteristics
9 Considerations in non-conformant capture attempts of biometric characteristics
9.1 Methods of presentation
9.2 Methods of assessment
10 Artefact creation and usage in evaluations of PAD mechanisms
10.1 General
10.2 Artefact creation and preparation
10.3 Artefact usage
10.4 Iterative testing to identity effective artefacts
11 Process-dependent evaluation factors
11.1 Overview
11.2 Evaluating the enrolment process
11.3 Evaluating the verification process
11.4 Evaluating the identification process
11.5 Evaluating offline PAD mechanisms
12 Evaluation using Common Criteria framework
12.1 General
12.2 Common Criteria and biometrics
12.2.1 Overview
12.2.2 General evaluation aspects
12.2.3 Error rates in testing
12.2.4 PAD evaluation
12.2.5 Vulnerability assessment
13 Metrics for the evaluation of biometric systems with PAD mechanisms
13.1 General
13.2 Metrics for PAD subsystem evaluation
13.2.1 General
13.2.2 Classification metrics
13.2.3 Non-response metrics
13.2.4 Efficiency metrics
13.2.5 Summary
13.3 Metrics for data capture subsystem evaluation
13.3.1 General
13.3.2 Acquisition metrics
13.3.3 Non-response metrics
13.3.4 Efficiency metrics
13.3.5 Summary
13.4 Metrics for full system evaluation
13.4.1 General
13.4.2 Accuracy metrics
13.4.3 Efficiency metrics
13.4.4 Generalized full-system evaluation performance
13.4.5 Summary
Annex A (informative) Classification of attack types
Annex B (informative) Examples of artefact species used in a PAD subsystem evaluation for fingerprint capture devices
Annex C (informative) Roles in PAD testing
Bibliography
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
BS 7227:1990
Procedures for the application of ISO 7812 to allocate UK Issuer Identification Numbers (UK IINs) for use on identification cards
-
BS EN 1038:1996
Identification card systems. Telecommunications applications. Integrated circuit(s) card payphone
-
BS EN 1332-1:2009
Identification card systems. Human-machine interface, Design principles for the user interface
-
BS EN 1332-2:1998
Identification card systems. Man-machine interface, Dimensions and location of a tactile identifier for ID-1 cards
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
3.1 Attack elements
3.2 Metrics
3.3 Test roles
4 Abbreviated terms
5 Conformance
6 Presentation attack detection (PAD) overview
7 Levels of evaluation of PAD mechanisms
7.1 Overview
7.2 General principles of evaluation of PAD mechanisms
7.3 PAD subsystem evaluation
7.4 Data capture subsystem evaluation
7.5 Full system evaluation
8 Artefact properties
8.1 Properties of PAIs in biometric impostor attacks
8.2 Properties of PAIs in biometric concealer attacks
8.3 Properties of synthesized biometric samples with abnormal characteristics
9 Considerations in non-conformant capture attempts of biometric characteristics
9.1 Methods of presentation
9.2 Methods of assessment
10 Artefact creation and usage in evaluations of PAD mechanisms
10.1 General
10.2 Artefact creation and preparation
10.3 Artefact usage
10.4 Iterative testing to identity effective artefacts
11 Process-dependent evaluation factors
11.1 Overview
11.2 Evaluating the enrolment process
11.3 Evaluating the verification process
11.4 Evaluating the identification process
11.5 Evaluating offline PAD mechanisms
12 Evaluation using Common Criteria framework
12.1 General
12.2 Common Criteria and biometrics
12.2.1 Overview
12.2.2 General evaluation aspects
12.2.3 Error rates in testing
12.2.4 PAD evaluation
12.2.5 Vulnerability assessment
13 Metrics for the evaluation of biometric systems with PAD mechanisms
13.1 General
13.2 Metrics for PAD subsystem evaluation
13.2.1 General
13.2.2 Classification metrics
13.2.3 Non-response metrics
13.2.4 Efficiency metrics
13.2.5 Summary
13.3 Metrics for data capture subsystem evaluation
13.3.1 General
13.3.2 Acquisition metrics
13.3.3 Non-response metrics
13.3.4 Efficiency metrics
13.3.5 Summary
13.4 Metrics for full system evaluation
13.4.1 General
13.4.2 Accuracy metrics
13.4.3 Efficiency metrics
13.4.4 Generalized full-system evaluation performance
13.4.5 Summary
Annex A (informative) Classification of attack types
Annex B (informative) Examples of artefact species used in a PAD subsystem evaluation for fingerprint capture devices
Annex C (informative) Roles in PAD testing
Bibliography