Information technology -- Security techniques -- Biometric information protection
(Only available in English)
ISO/IEC 24745:2011 provides guidance for the protection of biometric information under various requirements for confidentiality, integrity and renewability/revocability during storage and transfer. Additionally, ISO/IEC 24745:2011 provides requirements and guidelines for the secure and privacy-compliant management and processing of biometric information.
ISO/IEC 24745:2011 specifies the following:
- analysis of the threats to and countermeasures inherent in a biometric and biometric system application models;
- security requirements for secure binding between a biometric reference and an identity reference;
- biometric system application models with different scenarios for the storage of biometric references and comparison; and
- guidance on the protection of an individual's privacy during the processing of biometric information.
ISO/IEC 24745:2011 does not include general management issues related to physical security, environmental security and key management for cryptographic techniques.
Document published on: 2011-06-15 Edition: 1 (Monolingual) ICS: 35.040 Status: Published Stage: 90.20 (2016-04-15) TC/SC: ISO/IEC JTC 1/SC 27 Number of Pages: 50
This standard has not been revised
No corrigenda or amendments available