Biometrics refers to the automated identification of individuals based on their behavioural and physiological characteristics. It includes recognition technologies based on face, iris or palms image, voice patterns and the like e.g. fingerprint scans used to access a computer, or iris scans to cross border control.
Mr. Myung Geun Chun, Project Editor of ISO/IEC 24745 explains "As the Internet is increasingly used to access services with highly sensitive information, such as eBanking and remote healthcare, the reliability and strength of authentication mechanisms is critical. Biometrics is regarded as a powerful solution because of its unique link to an individual that is nearly or absolutely impossible to fake.
"And the technology has come of age. The cost of biometric techniques has been decreasing, while their reliability and popularity have been growing. But biometric identification raises unique privacy concerns."While the unchanging and distinct association with an individual on the one hand, provides strong assurance of authentication, this binding which links biometrics with personally identifiable information on the other hand, carries some risks, including the unlawful processing and use of data. ISO/IEC 24745 is an invaluable tool for addressing those risks."
With biometrics, if the authentication information is compromised, usual solutions such as issuing a new password or token are not available because biometric characteristics are difficult or impossible to change. Moreover, as more and more personal identifiable information is linked with biometric references, and this data is shared across international borders, it is crucial to safeguard the security of a biometric system and the privacy of data subjects with solid countermeasures as outlined in ISO/IEC 24745.
The standard specifies:
ISO/IEC 24745:2011, Information technology - Security techniques - Biometric information protection, was prepared by joint technical committee ISO/IEC JTC 1, Information technology, subcommittee SC 27, IT Security techniques.