GB/T 26237.1-2022Information technology - Biometric data interchange formats - Part 1: Framework (English PDF)

foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1.Structure and Drafting Rules for Standardization Documents"

drafting.

This document is the first part of GB/T 26237 "Information Technology Biometric Data Interchange Format". GB/T 26237 has

The following parts were released.

--- Part 1.Framework;

--- Part 2.Fingerprint detail point data;

--- Part 3.Fingerprint spectral data;

--- Part 4.Fingerprint image data;

--- Part 5.Face image data;

--- Part 6.Iris image data;

--- Part 7.Signature/signature time series data;

--- Part 8.Fingerprint skeleton data;

--- Part 9.Vascular image data;

--- Part 10.Hand contour data;

--- Part 14.DNA data;

--- Part 15.Palmprint image data.

This document replaces GB/T 26237.1-2010 "Information Technology Biometric Data Interchange Format Part 1.Framework", and

Compared with GB/T 26237.1-2010, except for structural adjustment and editorial changes, the main technical changes are as follows.

a) Added the explanatory terms of conformity testing (see Chapter 1);

b) Added terms and definitions "biometric data block", "biometric data exchange record", "biometric modality", "detail

Node" "Signature/Signature" "Spatial Sampling Rate" "Transaction" "Assertion" "Authentication" "Conformity" "Conformity Requirement" "Conformity Test"

"Conformity Test Laboratory" "Conformity Test Specification" "Conformity Test Suite" "Data Format Specification" "Declaration" "Achieving Conformity

"Subject Implementation" "Input Biometric Data Record" "Level 1 Test" "Level 2 Test" "Level 3 Test" "Metadata Record"

"Type A Declaration of Conformity" and "Type B Declaration of Conformity" (see Chapter 3);

c) Removed terms and definitions "biometric identification(s)" "biometric identification" "biometric identification algorithm" "biometric data"

"Biometric Item" "Biometric Item Data Unit" "Biometric Item Extraction" "Biometric Identification" "Biometric Identity

Identification Data", "Biometric Information", "Biometric Template", "Biometric Sample", "Biometric Recognition System", "Biometric Identification

Type", "Biometric Verification", "Biometric Verification Data", "Enrollment", "Biometric Intermediate Sample", "Match", "Final Biometric

sample" and "raw biometric sample" (see Chapter 3 of the.2010 edition);

d) Added the abbreviations ABNF, BDIR, BIR, BMP, CTS, DNA, GIF, IBDR, ICS, IETF, IUT, JPEG,

JPEG-LS, JPEG2000, TIFF, UTC, W3C, XML (see Chapter 4);

e) Added "Conformity" (see Chapter 5), "Use Environment of Biometric Data Exchange Format" (see Chapter 7), "Format Class

"Binary encoding format for format type" (see Chapter 13) and "XML encoding scheme for format type" (see Chapter 14);

f) Changed the names of "system concept diagram of general biometric identification system" and "comparison subsystem" and "decision subsystem", and revised

Changed the relevant expressions of the corresponding subsystems (see 6.1, 6.2.5 and 6.2.6, 5.1, 5.2.5 and 5.2.6 of the.2010 edition);

g) Changed the name and related expressions of the "identification" function of the general biometric identification system (see 6.3.3,.2010 edition

5.3.3);

h) In the overview of the use of biometric data exchange, "acquisition device type identification" (see 7.7 of the.2010 edition) and "multiple

Schema Data Structure" (see 7.8 of the.2010 edition);

i) Changed the expression and conceptual diagram of "processing level of data exchange format" (see 9.1, 8.1 of the.2010 edition);

j) Two categories of "multi-sensor" and "multi-presentation" have been added to "multi-biometric identification" (see Chapter 10);

k) Changed the name and related expressions of "Requirements for Acquisition Equipment" (see Chapter 11, Chapter 10 of the.2010 edition);

l) Added "Relationship to CBEFF" in "Format Owner and Format Type" (see 12.1).

m) Added "Conformity Test Method" (see Appendix A) and "XML Schema Common Elements" (see Appendix C).

This document is modified to adopt ISO /IEC 19794-1.2011 "Information Technology Biometric Data Interchange Format - Part 1.Box

shelf".

Compared with ISO /IEC 19794-1.2011, this document has made the following structural adjustments.

--- Chapter 6 corresponds to Chapter 5 of ISO /IEC 19794-1.2011;

--- Chapter 7 corresponds to Chapter 6 of ISO /IEC 19794-1.2011;

--- Chapter 8 corresponds to Chapter 7 of ISO /IEC 19794-1.2011;

--- Chapter 9 corresponds to Chapter 8 of ISO /IEC 19794-1.2011;

--- Chapter 10 corresponds to Chapter 9 of ISO /IEC 19794-1.2011;

--- Chapter 11 corresponds to Chapter 10 of ISO /IEC 19794-1.2011;

--- Chapter 12 corresponds to Chapter 11 of ISO /IEC 19794-1.2011;

--- Chapter 13 corresponds to Chapter 12 of ISO /IEC 19794-1.2011.

The technical differences between this document and ISO /IEC 19794-1.2011 and their reasons are as follows.

a) The normative reference document GB/T 5271.37-2021 is added, because the terms of this document are cited (see Chapter 3);

b) In ISO /IEC 19794-1.2011, "biometrics", "biometrics recognition", "biometrics collection device" and "biological

Characteristics", "Biometric Data", "Biometric Data Record", "Biometric Reference", "Biometric Sample", "Biometric Identification

There are 12 terms in total, including "identification system", "candidate", "candidate list" and "comparison", because these terms have been included in GB/T 5271.37-

It is clearly defined in the 2021 "Information Technology Vocabulary Part 37.Biometric Identification" and is commonly used in the field of biometric identification

terms, no need to repeat definitions;

c) Deleted "Biometric Identification Algorithm", "Biometric Item" and "Biometric Item Data Sheet" in ISO /IEC 19794-1.2011

Meta, Biometric Item Extraction, Biometric Pattern, Biometric Template, Cell, Continuous Tone Image, Core, Triangle

Point", "Dimension", "Friction Ridge", "Biometric Intermediate Sample", "Latent Fingerprint", "Liveness Acquisition", "Pixel", "Pixel Depth", "Ridge Bifurcation"

There are 25 terms in total, including points, ridges, bones, fingerprint images, style lines, valleys, certification, and conformity assessment.

language not cited in this document;

d) Added 9 abbreviations of BMP, GIF, IETF, JPEG, JPEG-LS, JPEG2000, TIFF, UTC and W3CX

language, in order to facilitate the understanding of this document (see Chapter 4);

e) Changed the naming and diagram of the processing level in the data exchange format so as to be consistent with the definition of processing level in GB/T 28826.1

The division is consistent and facilitates systematic understanding (see 6.1);

f) Add an example in the description of "Format Identifier", and add a coding example in the description of "Version Number", so as to facilitate the coding of two elements.

code understanding (see Table 1);

g) Replaced ISO /IEC 7816-11 with the normative reference GB/T 16649.11, the degree of consistency between the two is modified (see Clause 7

chapter, 12.1);

h) Replaced ISO /IEC 19785-2.2006 with the normative referenced GB/T 28826.2, the degree of consistency between the two is non-equivalent

(see 12.1 and Table 5);

i) The relevant content of the ASCII code is replaced with the normatively quoted GB/T 1988 to meet the coding requirements of our country (see Table 1,

Table A.2);

j) The note in "Certification Record" in Table 4 is deleted, and its content is revised and incorporated into the table of its description, so as to facilitate the review of the content of the note

understand;

k) Incorporate the description of "Quality Score" below Table 5 into the description of "Quality Score" in the table to make the description clearer and easier to

understand.

The following editorial changes have been made to this document.

---This document amends ISO /IEC 19794-1.2011/AMD1.2013, ISO /IEC 19794-1.2011/AMD2.2015

The content is incorporated into the corresponding clauses, and the modified clauses and outer margins are marked with vertical double lines (||).

--- Replaced ISO /IEC 19784 with the informative referenced GB/T 30267;

--- Added GB/T 27000-2006 for informative references;

--- Replaced ISO /IEC TR24722 with the informative referenced GB/T 36460.

Please note that some contents of this document may refer to patents. The issuing agency of this document assumes no responsibility for identifying patents.

Introduction

GB/T 26237 "Information Technology Biometric Data Interchange Format" supports the exchange between biometric applications and systems

Interoperability and data exchange, specifying the biometric data exchange format for different biometric modes, in line with

The parties to the biometric data exchange format specified in GB/T 26237 can decode each other's biometric data to meet

meet the complex requirements of applying biometric technology to a variety of applications.

GB/T 26237 "Information Technology Biometric Data Exchange Format" is proposed to be composed of 15 parts.

--- Part 1.Framework. The purpose is to specify the general content, meaning, representation and compliance of the biometric data format

Test Methods.

--- Part 2.Fingerprint detail point data. The purpose is to specify a data record exchange format and compliance test for fingerprint minutiae points.

try method.

--- Part 3.Fingerprint spectral data. The purpose is to specify a data record exchange format and compliance test for fingerprint profiles

method.

--- Part 4.Fingerprint image data. The purpose is to specify a data record exchange format and compliance test for fingerprint images

method.

--- Part 5.Face image data. The purpose is to specify a data record exchange format and compliance test for face images

method.

--- Part 6.Iris image data. The purpose is to specify an iris image data record exchange format and compliance test

method.

--- Part 7.Signature/signature time series data. The purpose is to specify a data record exchange format for signature/signature data

and compliance testing methods.

--- Part 8.Fingerprint skeleton data. The purpose is to specify a fingerprint skeleton data record exchange format and compliance test

method.

--- Part 9.Vascular image data. The purpose is to specify a data record exchange format and compliance test for human blood vessel images.

try method.

--- Part 10.Hand contour data. The purpose is to specify a data record exchange format and conformity test for hand contour data.

try method.

--- Part 11.Processed signature/signature dynamic data. The purpose is to specify a type of processed signature/signature dynamic data

Data record exchange formats and compliance testing methods.

--- Part 12.Face characteristic data. The purpose is to specify a data record exchange format and compliance test for facial characteristics

method.

--- Part 13.Sound data. The purpose is to specify a voice data recording exchange format and compliance testing method.

--- Part 14.DNA data. The purpose is to specify a DNA data record exchange format and compliance testing method.

--- Part 15.Palmprint image data. The purpose is to specify a data record exchange format and compliance test for human palmprint images.

try method.

This document defines the general content of the biometric data format, that is, considers the biometric identification of the specific part of GB/T 26237

Standardization of common content, meaning, and representation of a modality's biometric data format.

GB/T 26237 supports interoperability and data exchange between biometric applications and systems. This series of standards stipulates

Complexity requirements for applying biometric technology to different classes of identification applications, whether in open system

system environment or consist of a single closed system. Open systems are built on standards-based, commonly defined data formats, interfaces, and protocols

on the basis of protocols to facilitate data exchange and interoperability with other systems, including components of different designs or manufactures. Closed systems are also available

can be built on publicly defined standards and can include components of different designs or manufactures, but need not be intrinsically linked to any other system

systems for data exchange and interoperability.

Biometric data exchange format standards and biometric interface standards are important for realizing biometric identification in an open system environment.

Both complete data exchange and interoperability are required. Biometric identification standards include different levels of standards, from biometric identification

Data exchange formats and biometric interfaces and biometric profiles describing the use of these standards in specific application areas

composition.

Figure 1 shows the interrelationships among the areas of standardization related to biometric identification. Comply with the biometrics specified in GB/T 26237

Biometric data in an identification data exchange format represents a core component of biometric interoperability. can be used such as

The biometric format framework specified in GB/T 28826 is used as a wrapper for biometric data. Since biometric data is sensitive

sensitive data and is vulnerable to attack, so encryption protection is required in the exchange environment. About Biometric Profiles, Security Assessments and Sexuality

Ability assessment also plays an important role. Biometric interfaces are critical to facilitate easy integration and use of biometric components. suggestion

Use an emerging unified vocabulary to describe biometric technologies. The application deployment of biometric verification or identification technology shall comply with social

Meeting and judicial requirements.

The Biometric Data Interchange Format standard specifies a biometric data exchange format for the different biometric modalities.

Parties conforming to the biometric data exchange format specified in GB/T 26237 should be able to conduct mutual biometric data

decoding.

Biometrics interface standards include GB/T 28826 (all parts) "Information Technology Common Biometrics Interchange Format Frame

Framework" and GB/T 30267 (all parts) "Information Technology Biometric Application Programming Interface". within these standard support systems or

Exchange of biometric data between systems. GB/T 28826 specifies the basic structure of a standardized biometric information record (BIR), where

Include biometric data exchange records with additional metadata, such as collection time, expiration date, encryption or not, etc.

GB/T 30267 specifies an open system API that supports communication between software applications and basic biometric technology services

Communication.

The biometric profile standard promotes basic standards for defining application domains (e.g., SAC/TC28/SC37 Biometric

implementation of specific data exchange formats and biometric interface standards, and possibly non-biometric standards). These profile standards define the

functionality of the application (e.g., physical access control for airport employees), and calls to objects are then regulated in base files to ensure that biological

Interoperability of signature recognition.

Figure 1 A general model of the interrelationships between areas of biometrics standardization

Users of biometric identification systems expect to use this document and other standards to ensure that biometric identification can be

Replacement of components of a system with other components from different suppliers and ensuring that biometric data produced by one system can be used by another system

use. In order to achieve this goal, it is crucial that systems claiming to be compliant are in fact compliant, so that for

Each biometric data exchange format described in GB/T 26237 requires a standardized compliance test method in order to comply with

Provide reasonable assurance that the declaration of conformity is valid. Although it is possible to determine whether the individual elements in the data exchange record comply with the relevant requirements, there is no

Is there any test that can demonstrate absolutely comprehensively that the systems that generate or use biometric data exchange records in all possible cases

All fit the bill, especially when there are optional components in the standard. However, well-designed compliance tests can ensure

Under the premise of the requirements, the most likely source of the problem is tested to ensure compliance.

There are many different types of compliance tests that may apply to various parts of GB/T 26237, some of which are for each data type.

It is highly specific to the exchange format, while other tests target common elements in all formats. This document also describes compliance testing for

different types, and provides details on common elements used to define test assertions. It also provides for conducting tests and reporting test results

guide. This document specifies most or all of the biometric data exchange formats (for example, generic elements for generic headers and

Generic Elements) Generic tests and assertions. Specific tests and assertions for each biometric data exchange format are documented in

In the subsequent part of GB/T 26237.

Information Technology Biometric Data Interchange Format

Part 1.Framework

1 Scope

This document describes.

--- Usage of biometric data records;

--- processing level and type of biometric data structure;

---Naming conventions for biometric data structures;

--- The encoding scheme of the format type.

This document also describes computer algorithms for testing biometric data exchange records or creating biometric data exchange records

concepts, test types and compliance testing methods. This document defines two types (Type A, Biometric Data Exchange Record and

The system that generates this record; Category B, i.e. the system that exchanges the record using biometric data) and the three levels of compliance testing (1

Level 2, check the internal content of each field; Level 2, check the internal consistency of the entire record; Level 3, check whether the data record is a compliance test

true representation of raw biometric data). But it only provides a detailed description and method for the three levels of testing in Category A. This document stipulates

The test requirements, assertions, and test execution and reporting processes that are common to most or all biometric data exchange formats. this document

The following areas are specifically excluded.

---Description of detailed test elements, assertions, and any mandatory standard data sets for specific modes required for testing, which are in

Subsequent parts of GB/T 26237 provide;

--- The implementation under test (IUT) claims to be able to correctly process these biometrics using consistent biometric data exchange records

Data exchange record (type B test);

---Conformity testing required by CBEFF;

--- Testing of other characteristics of biometric products or other types of biometric product testing (i.e. acceptability, performance,

robustness, security).

This document is applicable to the exchange of biometric identification data by biometric identification manufacturers in the links of storage, recording and transmission. Applicable at the same time

Conformity testing is carried out by testing agencies, end users and biometric manufacturers.

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references

For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to

this document.

GB/T 1988 Seven-bit coded character set for information exchange in information technology (GB/T 1988-1998, eqvISO /IEC 646.1991)

GB/T 5271.37-2021 Information Technology Vocabulary Part 37.Biometric Identification (ISO /IEC 8232-37.2017, MOD)

GB/T 16649.11 Identification card integrated circuit card Part 11.Authentication by biometric method

(GB/T 16649.11-2019, ISO /IEC 7816-11.2017, MOD)

GB/T 28826.2 Information technology public biometric identification exchange format framework - Part 2.Biometric identification registration authority

Operating procedures (GB/T 28826.2-2014, ISO /IEC 19785-2.2006, NEQ)

GB/T 33767.1-2017 Information Technology Biometric Sample Quality Part 1.Framework (ISO /IEC 29794-1.