GB/T 16649.11-2019Identification cards -- Integrated circuit cards -- Part 11: Personal verification through biometric methods (English PDF)

Foreword

GB/T 16649 is divided into the following parts.

--- Identification of integrated circuit cards with cassette contacts - Part 1. Physical characteristics (GB/T 16649.1);

--- Identification of IC card contacts with card contacts - Part 2. Dimensions and locations of contacts (GB/T 16649.2);

--- Identification of integrated circuit cards with cassette contacts - Part 3. Electrical signals and transmission protocols (GB/T 16649.3);

--- Identification card IC card Part 4. Structure, security and command for exchange (GB/T 16649.4);

--- Integrated circuit cards with identification of card contacts - Part 5. National numbering systems and registration procedures for application identifiers

(GB/T 16649.5);

--- IC card for identifying card contacts - Part 6. Inter-industry data elements (GB/T 16649.6);

--- Integrated circuit cards with identification of card contacts - Part 7. Inter-industry command for structured card query language (SCQL)

(GB/T 16649.7);

--- Identification of integrated circuit cards with card contacts - Part 8. Inter-industry-to-industry-related (GB/T 16649.8);

--- Identification card IC card Part 9. Commands for card management (GB/T 16649.9);

--- IC card for identifying the contact with the card - Part 10. Electrical signals and reset response of the synchronization card (GB/T 16649.10);

--- Identification card IC card Part 11. Authentication by biometric method (GB/T 16649.11);

--- Identification card IC card part 12. Card USB electrical interface with contacts and operating procedures (GB/T 16649.12);

--- Identification card IC card Part 13. Application management commands in a multi-application environment (GB/T 16649.13);

--- Identification card IC card Part 15. Password information application (GB/T 16649.15).

This part is the 11th part of GB/T 16649.

This part is drafted in accordance with the rules given in GB/T 1.1-2009.

This section uses the redrafting method to modify the use of ISO /IEC 7816-11.2017 "Identification Card IC Card Part 11. Passed

Authentication of biometric methods.

This section makes the following structural adjustments compared to ISO /IEC 7816-11.2017.

--- Removed Chapter 6;

--- Change Chapter 7 to Chapter 6.

The technical differences between this part and ISO /IEC 7816-11.2017 and their reasons are as follows.

---About the normative reference documents, this part has made technical adjustments to adapt to China's technical conditions, adjustments

The situation is reflected in Chapter 2, "Regulatory Citations", and the specific adjustments are as follows.

* Added reference to GB/T 15694.1 (see Table 6, Table 7 and Table C.1);

* Added reference to GB/T 16649.4-2010 (see 5.1, 5.2, 5.3, 5.4.1, 6.3.1, Table 1, Table 6, Table 7, Table C.1 and

Appendix B);

* Added reference to GB/T 30266-2013 (see 5.2, A.1, Table 3, Table 5 and Table 7);

* Added reference to ISO /IEC 7816-6 (see 6.2 and Table 6);

* Added reference to ISO /IEC 17839-3 (see 5.2 and 5.4.6);

* Added reference to ISO /IEC 19785-3 (see Table 6, Table B.1 and Appendix B);

--- Chapter 3 removed the terms "biometric information", "biometric data subject" and "raw data";

--- Chapter 4 removed the acronyms ACBio, BRTcertificate, BDB, BPU, CCT, CT, DST, FCI, MAC, SM,

SMT and symbol I/O, L;

--5.4.2 removed SETINITIALVALUES, GENERATEBIOMETRICVALIDATIONCER-

TIFICATE, GENERATECONTROLVALUE, and STOREBIOMETRICINFORMATION

command;

--- Change the title of 6.1 to "biometric information template";

--- Tables 6 and 7, the default label allocation mechanism is modified to the corresponding National Standardization Technical Standardization Committee SAC/TC28/SC17.

This section also made the following editorial changes.

--- In Table 6, Table 7 and Table C.1, replace the referenced ISO /IEC 8825-1 with GB/T 26231-2017;

--- Revised references.

Introduction

GB/T 16649 is a national standard that specifies the parameters of integrated circuit cards and the use of integrated circuit cards in exchange. IC card is used for letter

The exchange of information (the exchange of information is agreed between the outside world and the integrated circuit on the card). As a result of the exchange of information, the card transmits information

Calculate results, stored data), and/or change its contents (data storage, result memory).

There are five sections that specify cards with contacts, three of which specify the electrical interface.

---GB/T 16649.1 specifies the physical characteristics of the card with contacts;

---GB/T 16649.2 specifies the size and position of the contacts;

---GB/T 16649.3 specifies the electrical interface and transmission protocol of the asynchronous card;

---GB/T 16649.10 specifies the electrical interface and reset response of the synchronization card;

---GB/T 16649.12 specifies the electrical interface and operating procedures of the USB card.

The rest of GB/T 16649 is independent of physical interface technology. They are used for cards accessed via contacts and/or radio.

---GB/T 16649.4 specifies the structure, security and commands for exchange;

---GB/T 16649.5 specifies the registration of the application provider;

---GB/T 16649.6 specifies inter-industry data elements for exchange;

---GB/T 16649.7 specifies the commands for the structured card query language;

---GB/T 16649.8 specifies the commands for safe operation;

---GB/T 16649.9 specifies the commands for card management;

---GB/T 16649.11 specifies the authentication by biometric identification method;

---GB/T 16649.13 specifies the commands used to manage the life cycle of the application;

---GB/T 16649.15 specifies the application of password information.

Identification card IC card

Part 11. Biometric identification

Method authentication

1 Scope

This part of GB/T 16649 specifies safety-related inter-industry commands for biometric identification in integrated circuit cards.

Act for personal identification. Cards for biometric reference for cards and/or biometric probes for cardholders

For comparison, the device used for verification, this section also gives the data structure and data access method used.

This section applies to the design, production, verification and testing of biometric identification technology cards. Identity through biometric methods

Identification is not within the scope of this section.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 15694.1 Identification card issuer identification Part 1. Numbering system (GB/T 15694.1-1995, ISO /IEC 7812-1.

1993, IDT)

GB/T 16649.4-2010 Identification card integrated circuit cards - Part 4. Structures, safety and commands for exchange

(ISO /IEC 7816-4.2005, IDT)

GB/T 30266-2013 Information technology identification card biometric comparison (ISO /IEC 24787.2010, IDT)

ISO /IEC 2382-37.2017 Information technology vocabulary Part 37. Biometrics (Information technology-

Vocabulary-Part 37. Biometrics)

ISO /IEC 7816-4.2013 Identification cards - Integrated circuit cards - Part 4. Structures, safety and commands for exchange (Identifi-

cationcards-Integratedcircuitcards-Part 4.Organization,securityandcommandsforinterchange)

ISO /IEC 7816-6 Identification Card IC Cards Part 6. Inter-industry data elements for exchange (Identification

cards-Integratedcircuitcards-Part 6.Interindustrydataelementsforinterchange)

Information technology - Identification of biometric systems on cards - Part 3. Logic information exchange

(Informationtechnology-Identificationcards-Biometricsystem-on-card-Part 3. Logicalinformationinter-

Changemechanism)

ISO /IEC 19785-3 Information technology - Common biometric identification exchange format framework Part 3. Entity format specification (Infor-

mationtechnology-Commonbiometricexchangeformatsframework-Part 3.Patronformatspecifi-

Cation)

3 Terms and definitions

GB/T 16649.4-2010, ISO /IEC 2382-37.2017 and ISO /IEC 7816-4.2013 as defined by the following terms and conditions

The meaning applies to this document.

GB/T 16649.11-2019

(Identification cards - Integrated circuit cards - Part 11. Authentication by biometric method)

ICS 35.240.15

L64

National Standards of People's Republic of China

Identification card IC card

Part 11. Biometric identification

Method authentication

Identificationcards-Integratedcircuitcards-

Part 11. Personalverificationthroughbiometricmethods

(ISO /IEC 7816-11.2017, MOD)

Published on.2019-08-30

2020-03-01 implementation

State market supervision and administration

China National Standardization Administration issued

Content

Foreword III

Introduction V

1 Scope 1

2 Normative references 1

3 Terms and Definitions 1

4 symbols and abbreviations 3

5 Commands for biometric verification and related processes 4

6 data elements 9

Appendix A (informative) Biometric Verification Process 16

Appendix B (informative) Biometric information data object example 19

Appendix C (informative) List of tags for data objects in biometric information templates 21

Reference 22

Foreword

GB/T 16649 is divided into the following parts.

--- Identification of integrated circuit cards with cassette contacts - Part 1. Physical characteristics (GB/T 16649.1);

--- Identification of IC card contacts with card contacts - Part 2. Dimensions and locations of contacts (GB/T 16649.2);

--- Identification of integrated circuit cards with cassette contacts - Part 3. Electrical signals and transmission protocols (GB/T 16649.3);

--- Identification card IC card Part 4. Structure, security and command for exchange (GB/T 16649.4);

--- Integrated circuit cards with identification of card contacts - Part 5. National numbering systems and registration procedures for application identifiers

(GB/T 16649.5);

--- IC card for identifying card contacts - Part 6. Inter-industry data elements (GB/T 16649.6);

--- Integrated circuit cards with identification of card contacts - Part 7. Inter-industry command for structured card query language (SCQL)

(GB/T 16649.7);

--- Identification of integrated circuit cards with card contacts - Part 8. Inter-industry-to-industry-related (GB/T 16649.8);

--- Identification card IC card Part 9. Commands for card management (GB/T 16649.9);

--- IC card for identifying the contact with the card - Part 10. Electrical signals and reset response of the synchronization card (GB/T 16649.10);

--- Identification card IC card Part 11. Authentication by biometric method (GB/T 16649.11);

--- Identification card IC card part 12. Card USB electrical interface with contacts and operating procedures (GB/T 16649.12);

--- Identification card IC card Part 13. Application management commands in a multi-application environment (GB/T 16649.13);

--- Identification card IC card Part 15. Password information application (GB/T 16649.15).

This part is the 11th part of GB/T 16649.

This part is drafted in accordance with the rules given in GB/T 1.1-2009.

This section uses the redrafting method to modify the use of ISO /IEC 7816-11.2017 "Identification Card IC Card Part 11. Passed

Authentication of biometric methods.

This section makes the following structural adjustments compared to ISO /IEC 7816-11.2017.

--- Removed Chapter 6;

--- Change Chapter 7 to Chapter 6.

The technical differences between this part and ISO /IEC 7816-11.2017 and their reasons are as follows.

---About the normative reference documents, this part has made technical adjustments to adapt to China's technical conditions, adjustments

The situation is reflected in Chapter 2, "Regulatory Citations", and the specific adjustments are as follows.

* Added reference to GB/T 15694.1 (see Table 6, Table 7 and Table C.1);

* Added reference to GB/T 16649.4-2010 (see 5.1, 5.2, 5.3, 5.4.1, 6.3.1, Table 1, Table 6, Table 7, Table C.1 and

Appendix B);

* Added reference to GB/T 30266-2013 (see 5.2, A.1, Table 3, Table 5 and Table 7);

* Added reference to ISO /IEC 7816-6 (see 6.2 and Table 6);

* Added reference to ISO /IEC 17839-3 (see 5.2 and 5.4.6);

* Added reference to ISO /IEC 19785-3 (see Table 6, Table B.1 and Appendix B);

--- Chapter 3 removed the terms "biometric information", "biometric data subject" and "raw data";

--- Chapter 4 removed the acronyms ACBio, BRTcertificate, BDB, BPU, CCT, CT, DST, FCI, MAC, SM,

SMT and symbol I/O, L;

--5.4.2 removed SETINITIALVALUES, GENERATEBIOMETRICVALIDATIONCER-

TIFICATE, GENERATECONTROLVALUE, and STOREBIOMETRICINFORMATION

command;

--- Change the title of 6.1 to "biometric information template";

--- Tables 6 and 7, the default label allocation mechanism is modified to the corresponding National Standardization Technical Standardization Committee SAC/TC28/SC17.

This section also made the following editorial changes.

--- In Table 6, Table 7 and Table C.1, replace the referenced ISO /IEC 8825-1 with GB/T 26231-2017;

--- Revised references.

Introduction

GB/T 16649 is a national standard that specifies the parameters of integrated circuit cards and the use of integrated circuit cards in exchange. IC card is used for letter

The exchange of information (the exchange of information is agreed between the outside world and the integrated circuit on the card). As a result of the exchange of information, the card transmits information

Calculate results, stored data), and/or change its contents (data storage, result memory).

There are five sections that specify cards with contacts, three of which specify the electrical interface.

---GB/T 16649.1 specifies the physical characteristics of the card with contacts;

---GB/T 16649.2 specifies the size and position of the contacts;

---GB/T 16649.3 specifies the electrical interface and transmission protocol of the asynchronous card;

---GB/T 16649.10 specifies the electrical interface and reset response of the synchronization card;

---GB/T 16649.12 specifies the electrical interface and operating procedures of the USB card.

The rest of GB/T 16649 is independent of physical interface technology. They are used for cards accessed via contacts and/or radio.

---GB/T 16649.4 specifies the structure, security and commands for exchange;

---GB/T 16649.5 specifies the registration of the application provider;

---GB/T 16649.6 specifies inter-industry data elements for exchange;

---GB/T 16649.7 specifies the commands for the structured card query language;

---GB/T 16649.8 specifies the commands for safe operation;

---GB/T 16649.9 specifies the commands for card management;

---GB/T 16649.11 specifies the authentication by biometric identification method;

---GB/T 16649.13 specifies the commands used to manage the life cycle of the application;

---GB/T 16649.15 specifies the application of password information.

Identification card IC card

Part 11. Biometric identification

Method authentication

1 Scope

This part of GB/T 16649 specifies safety-related inter-industry commands for biometric identification in integrated circuit cards.

Act for personal identification. Cards for biometric reference for cards and/or biometric probes for cardholders

For comparison, the device used for verification, this section also gives the data structure and data access method used.

This section applies to the design, production, verification and testing of biometric identification technology cards. Identity through biometric methods

Identification is not within the scope of this section.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 15694.1 Identification card issuer identification Part 1. Numbering system (GB/T 15694.1-1995, ISO /IEC 7812-1.

1993, IDT)

GB/T 16649.4-2010 Identification card integrated circuit cards - Part 4. Structures, safety and commands for exchange

(ISO /IEC 7816-4.2005, IDT)

GB/T 30266-2013 Information technology identification card biometric comparison (ISO /IEC 24787.2010, IDT)

ISO /IEC 2382-37.2017 Information technology vocabulary Part 37. Biometrics (Information technology-

Vocabulary-Part 37. Biometrics)

ISO /IEC 7816-4.2013 Identification cards - Integrated circuit cards - Part 4. Structures, safety and commands for exchange (Identifi-

cationcards-Integratedcircuitcards-Part 4.Organization,securityandcommandsforinterchange)

ISO /IEC 7816-6 Identification Card IC Cards Part 6. Inter-industry data elements for exchange (Identification

cards-Integratedcircuitcards-Part 6.Interindustrydataelementsforinterchange)

Information technology - Identification of biometric systems on cards - Part 3. Logic information exchange

(Informationtechnology-Identificationcards-Biometricsystem-on-card-Part 3. Logicalinformationinter-

Changemechanism)

ISO /IEC 19785-3 Information technology - Common biometric identification exchange format framework Part 3. Entity format specification (Infor-

mationtechnology-Commonbiometricexchangeformatsframework-Part 3.Patronformatspecifi-

Cation)

3 Terms and definitions

GB/T 16649.4-2010, ISO /IEC 2382-37.2017 and ISO /IEC 7816-4.2013 as defined by the following terms and conditions

The meaning applies to this document.