INCITS/ISO/IEC 19795-5

Description / Abstract: This part of ISO/IEC 19795:

— defines a common biometric access control scenario for use in scenario evaluation of biometric verification systems;

— provides a grading scheme for expressing quantitative biometric system requirements and performance levels;

— provides a common basis for conducting scenario evaluations to demonstrate that specified performance grades are being achieved which is adaptable to particular testing facilities and to specific biometric systems.

This part of ISO/IEC 19795 is applicable to performance testing of biometric systems without detailed knowledge of the comparison algorithms or of the underlying distribution of biometric characteristics in the population of interest.

The minimum false accept rate (FAR) tested by this part of ISO/IEC 19795 is 0.1%. If a lower FAR is required, customized testing (outside the scope of this part of ISO/IEC 19795) might be appropriate, and needs to be fully compliant with ISO/IEC 19795-2.

This part of ISO/IEC 19795 addresses testing a biometric system for physical access control, and the suitability of the testing for logical access devices needs to be determined on a case-by-case basis.

Not within the scope of this part of ISO/IEC 19795 is the measurement of error and throughput rates for people deliberately trying to circumvent correct recognition by the biometric system (i.e. active impostors). In addition, this part of ISO/IEC 19795 does not assess the following:

— reliability, availability and maintainability;

— security, including vulnerability;

— human factors, including user acceptance;

— environmental impacts;

— safety;

— cost/benefit/suitability;

— privacy regulation compliance.

These assessments are the responsibility of the procuring authority.