ISO/IEC 24787-1:2024 PDF

Information technology — On-card biometric comparison — Part 1: General principles and specifications

First page of standard ISO/IEC 24787-1:2024

Open preview (PDF)

Title (English):

ISO/IEC 24787-1:2024

Information technology — On-card biometric comparison — Part 1: General principles and specifications

Document status:: Active
Format:: Electronic (PDF)
Number of pages:: 35
Publication date:: June 4, 2024
Edition:: ISO/IEC IS 24787 edition 1 version 1
ICS:: 35.240.15

Delivery type:

Full version25 €Read online 24h10 €Read online 72h15 €

Document language:

enru

Delivery time:Immediate download

Price:25 €

Description (English):

This document provides requirements and general principles and specifications for a biometric comparison methodology suitable for the on-card environment. This document establishes — architectures of biometric comparison using an ICC, — on-card biometric comparison, both in sensor-off-card systems and as part of biometric system-on-card, and — security policies for on-card biometric comparison. This document does not establish — requirements for off-card biometric comparison, — requirements for biometric system-on-card (defined in the ISO/IEC 17839 series), — work-sharing on-card biometric comparison (defined in ISO/IEC 24787-2), or — modality-specific requirements for storage and comparison.

Technical details

Technical committee: ISO/IEC JTC 1/SC 17 - Cards and security devices for personal identification
SKU: ISO/IEC 24787-1:2024

Abstract

Overview

ISO/IEC 24787-1:2024 - Information technology - On-card biometric comparison - Part 1: General principles and specifications - defines requirements, principles and specifications for performing on-card biometric comparison inside an integrated circuit card (ICC). The standard specifies architectures for biometric comparison using an ICC, covers sensor‑off‑card on‑card comparison as well as on‑card comparison as part of a biometric system‑on‑card, and establishes security policies for on‑card biometric comparison. It is the first part of a split revision (replacing ISO/IEC 24787:2018) and focuses on general rules rather than modality‑specific or off‑card comparison requirements.

Key topics and technical requirements

Architectures and operational models
- Definitions of on‑card comparison, off‑card comparison, sensor‑off‑card and biometric system‑on‑card concepts.
- Framework for biometric verification using an ICC.
Biometric data handling and encoding
- Requirements for storage formats, biometric information templates, and encoding suitable for use on ICCs.
- Guidance on use of a biometric reference for multiple applications.
Processes and lifecycle
- Enrolment/re‑enrolment, verification, comparison/decision processes and termination (permanent deactivation).
Security policies
- Minimum security policy requirements for on‑card biometric comparison, retry counter management, and policies for multiple applications (taxonomies and SP1/SP2/SP3 models).
Interoperability artefacts
- Application selection (AID), APDU examples, and data object formats to support vendor and system interoperability.
Informative annexes
- Examples for APDU usage, global biometric reference implementation, security status transitions, and CBEFF‑3 style biometric information templates.

Applications and who uses this standard

ISO/IEC 24787-1 is intended for organizations implementing secure biometric verification on smart cards and similar ICC devices, including:

Card manufacturers and secure element designers
Biometric system integrators and solution vendors
Government agencies issuing eIDs, national ID cards, or border‑control credentials
Financial and enterprise security architects deploying card-based authentication
Test and certification labs assessing on‑card biometric implementations

Practical benefits include enhanced privacy (biometric references remain on‑card), reduced risk of biometric data leakage, and standardized approaches for secure on‑card verification in sensor‑off‑card deployments.

Related standards

ISO/IEC 7816‑11 (personal verification through biometric methods)
ISO/IEC 19785‑3 (CBEFF patron format)
ISO/IEC 19794, 29794, 39794 (biometric data interchange/quality/extension formats)
ISO/IEC 17839 series (biometric system‑on‑card specifics)
ISO/IEC 24787‑2 (work‑sharing on‑card biometric comparison)

Keywords: ISO/IEC 24787-1:2024, on-card biometric comparison, ICC, sensor-off-card, biometric reference, security policies, biometric verification.

Related standards

Standards mentioned in the description

Abstract

Overview

Key topics and technical requirements

Architectures and operational models
- Definitions of on‑card comparison, off‑card comparison, sensor‑off‑card and biometric system‑on‑card concepts.
- Framework for biometric verification using an ICC.
Biometric data handling and encoding
- Requirements for storage formats, biometric information templates, and encoding suitable for use on ICCs.
- Guidance on use of a biometric reference for multiple applications.
Processes and lifecycle
- Enrolment/re‑enrolment, verification, comparison/decision processes and termination (permanent deactivation).
Security policies
- Minimum security policy requirements for on‑card biometric comparison, retry counter management, and policies for multiple applications (taxonomies and SP1/SP2/SP3 models).
Interoperability artefacts
- Application selection (AID), APDU examples, and data object formats to support vendor and system interoperability.
Informative annexes
- Examples for APDU usage, global biometric reference implementation, security status transitions, and CBEFF‑3 style biometric information templates.

Applications and who uses this standard

ISO/IEC 24787-1 is intended for organizations implementing secure biometric verification on smart cards and similar ICC devices, including:

Card manufacturers and secure element designers
Biometric system integrators and solution vendors
Government agencies issuing eIDs, national ID cards, or border‑control credentials
Financial and enterprise security architects deploying card-based authentication
Test and certification labs assessing on‑card biometric implementations

Related standards

ISO/IEC 7816‑11 (personal verification through biometric methods)
ISO/IEC 19785‑3 (CBEFF patron format)
ISO/IEC 19794, 29794, 39794 (biometric data interchange/quality/extension formats)
ISO/IEC 17839 series (biometric system‑on‑card specifics)
ISO/IEC 24787‑2 (work‑sharing on‑card biometric comparison)

Keywords: ISO/IEC 24787-1:2024, on-card biometric comparison, ICC, sensor-off-card, biometric reference, security policies, biometric verification.

ISO/IEC 24787-1:2024 PDF

Technical details

Abstract

Overview

Key topics and technical requirements

Applications and who uses this standard

Related standards

Related standards

Abstract

Overview

Key topics and technical requirements

Applications and who uses this standard

Related standards

Related standards

Information technology — Identification cards — On-card biometric comparison

Information technology. On-card biometric comparison. General principles and specifications.

Identification cards — Integrated circuit cards — Part 11: Personal verification through biometric methods

Information technology — Common Biometric Exchange Formats Framework — Part 3: Patron format specifications —…

Information technology. Biometric data interchange formats. Finger image data.

Tracked Changes. Information technology. Biometric system-on-card. Core requirements.

Information technology. Identification cards. On-card biometric comparison