Cybersecurity/Network and Information security

Standardised biometric data formats enable interoperability and exchanging system components like biometric capture devices, algorithms, storage systems

The standard promotes Biometric System-on-Card architecture, characteristics and interfaces. It is a technology that improves security and privacy for citizens in Europe and beyond, because personal data remains on a personal card.

Technology for Biometric System-on-Card (BSoC) has advanced significantly since the first publication of the ISO/IEC 17839 series from 2014-2016. This made an amendment of part 2 necessary in 2021 and a revision started 2022/2023. The major gaps are that the currently published standards partially refer to outdated technology and do not cover many recent industry developments in the field of BSoC. This includes enrolment methodologies, sensor and card manufacturing, but also processes and usage of biometric cards. The priority is to consider all inputs from national bodies, come to a consensus and progress the standard series according to the ISO business plan. Challenges are divers inputs from industry delegates targeting different solutions. It is important to include all contributions from national bodies while keeping the timeline mandated by the ISO business plan.

This activity impacts the societal challenges in three key areas:
Secure societies - protecting freedom and security of Europe and its citizens: Supporting standards on e-identity and e-privacy information management ensures identity information lifecycle, identification, bound proofed identity information and authentication of citizen and societies are in place before authorized accesses to services is provided without compromising their privacy;
Cybersecurity, network and identity information security: Standards on reference architectures around e-identity and e-privacy management ensure information infrastructure has the required controls in place to protect citizen and societies while accessing and using provided services;
ePrivacy protection: Data protection good practice ensures any risk on identity information is mitigate during the processing of the information.

This work has societal impact at least on three axes, including:
Secure societies - protecting freedom and security of Europe and its citizens: Supporting standards on e-identity and e-privacy information management ensures identity information lifecycle, identification, bound proofed identity information and authentication of citizens and societies are in place before authorized accesses to services is provided without compromising their privacy;
Cybersecurity, network and identity information security: Standards on reference architectures around e-identity and e-privacy management ensure information infrastructure has the required controls in place to protect citizens and societies while accessing and using provided services;
ePrivacy protection: Data protection good practice ensures any risk on identity information is mitigated during the processing of the information.