BS ISO-IEC 18584-2015 pdf free download – Information technology — Identification cards — Conformance test requirements for on-card biometric comparison applications.
7Conformance test requirements for standard processes for on-cardbiometric comparison
7.1Standard Processes
7.1.1Application identifier (AID) for on-card biometric comparison
lf biometric comparison is implemented as an independent application, the application identifier shallbe generated as per ISO/IEC 7816-4:2013,8.2.1.2 and Annex A.
NOTE1 The AID is derived from the standard’s object identifier according to lSO/IEC7816-4:2013,8.2.1.2 andAnnex A.
7.1.2 Read biometric reference data
This operation shall never be supported, no matter using specific APDU command or reading from file.7.1.3 Enrolment
This operation shall be supported. The biometric terminal shall be able to store biometric referenceinto the ICC using the mechanism specified in ISO/IEC7816-11.Test verification can be used to verifythe biometric reference is correctly stored inside the ICC.
7.1.4 Verification
This operation shall be supported.The biometric terminal shall be able to send biometric data to the ICCusing the mechanism specified in ISO/IEC 7816-11.The returned bytes shall not contain the biometriccomparison score.
7.1.5Termination of on-card comparison application
The on-card logical data structure containing biometric reference data pertaining only to suchapplication shall be made inaccessible and the data may be “zeroize” inside the card.
7.2Comparison process and result output7.2.1 Comparison process and result
The comparison process shall take place within the card.The follow checklist shall be used for testing:a) Test vectors of positive and negative verifications shall be used for testing.
b) lf the comparison result of a biometric data are successful, the Sw1 and sw2 in the VERIFY
response APDU shall be ’90 00″.
c)otherwise, sW1-sw2 shall comply with ISO/1EC 7816 error codes.
8Conformance test requirements for work-sharing mechanism using WSRprotocol
8.1 Biometric reference for work-sharing mechanism
ln work-sharing mechanism, the biometric data which is stored during enrolment can be divided intotwo portions: secured portion and open portion. The secured portion, which is a biometric reference,shall not be sent out to the biometric verification system/IFD.The auxiliary data (open) portion, whichcontains the biometric property, can be sent out using WSR protocol for processing by biometricinterfacing device to speed up the processing time. The secured portion and auxiliary data (open)portion shall be encoded inside the BIT as mandated portion and proprietary portion respectively asper respective part of ISO/IEC 19794-2 and ISO/IEC7816-11.See Annex A for the checklist to verify thebiometric data template for work-sharing mechanism.
8.2Command and response bytes for work-sharing
In order to support work-sharing using WSR protocol, the ICC shall support the APDU commands andresponses which are specified in iSO/IEC7816-4:2005,8.6“Card-originated byte strings”. The followingchecklist in Table 5 shall be used to check whether the ICC has the capability to perform WSR operation.BS ISO-IEC 18584 pdf download.