ISO/IEC TECHNICAL REPORT TR 29144 First edition 2014-07-01 Information technology Biometrics The use of biometric technology in commercial Identity Management applications and processes Technologies de I'informationBiométrique-Utilisation de la technologiebiométrique dans les processus et les applications de gestion de I'identité dans le commerce Referencenumber IS0/IECTR29144:2014(E) @IS0/IFC.2.014 IS0/IECTR29144:2014(E) COPYRIGHTPROTECTEDDOCUMENT IS0/IEC2014 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying,or posting on the internet or an intranet,without prior written permission. Permission can be requested from either IsO at the address below or ISO's member body in the country of the requester. IsO copyright office Case postale 56.CH-1211Geneva20 Tel.+4122749 0111 Fax+41227490947 E-mail [email protected] Webwww.iso.org Published in Switzerland @IS0/IEC2014-Allrightsreserved IS0/IECTR29144:2014(E) Contents Page Foreword .iv Introduction. ..V 1 Scope. ..1 1.1 In scope. .1 1.2 Exclusions .1 2 Normativereferences .1 3 Terms and definitions .1 4 Symbols and abbreviated terms .2 5 Biometricsand IdentityManagementSystems .2 5.1 General .2 5.2 Biometrics and identity .2 5.3 Identity and biometric identification 2 5.4 Biometric identifiers. .3 5.5 Human roleinbiometrics 4 5.6 Assuring the integrity of the database. .4 6 Biometric considerations in Identity Management Systems .4 6.1 General 4 6.2 Capturing and recording biometric characteristics 4 6.3 Adhesion of biometric characteristics.. .5 6.4 Changes to name, alias and identification data .7 6.5 Changes of condition 6.6 Biometric spoofing 7 6.7 Legitimateuse of anotheridentity 7 6.8 Other exceptions. .8 6.9 Otherissues of importance .8 7 Implementation issues. .8 7.1 General. 8 7.2 Aggregation of databases. .8 7.3 Strengthening of token and knowledge based identity systems .9 7.4 Restrictions to accessing data. .9 7.5 Privacy .9 7.6 Mechanisms for preventing abuse of systems .11 7.7 Multinational commercial organizations. ..11 Bibliography .12 @Is.Ec.2014.-All rights reserved ili