GB/T 44404.1-2024Information technology - Biometric identity assurance services - Part 1: BIAS services (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document is part 1 of GB/T 44404 "Information Technology Biometric Identity Assurance Services". GB/T 44404 has been published the following parts.

--- Part 1: BIAS service.

This document is modified to adopt ISO/IEC 30108-1:2015 "Information technology biometric identity assurance services Part 1: BIAS services Service.

This document has made the following structural adjustments compared to ISO/IEC 30108-1:2015.

--- Chapter 2 corresponds to Chapter 3 of ISO/IEC 30108-1:2015;

--- Chapter 3 corresponds to Chapter 4 of ISO/IEC 30108-1:2015;

--- Chapter 4 corresponds to Chapter 5 of ISO/IEC 30108-1:2015;

--- Chapter 5 corresponds to Chapter 2 of ISO/IEC 30108-1:2015;

---7.2~7.4 correspond to 7.1~7.3 in ISO/IEC 30108-1:2015;

---8.2~8.8 correspond to 8.1~8.7 in ISO/IEC 30108-1:2015;

---A.2.2~A.2.8 correspond to A.2.1~A.2.7 in ISO/IEC 30108-1:2015;

--- Appendix B corresponds to Appendix C in ISO/IEC 30108-1:2015, where B.5.2~B.5.4 correspond to ISO/IEC 30108-1.

C.5.1~C.5.3, B.6.2.2~B.6.2.7 in 2015 correspond to C.6.2.1~C.6.2.6 in ISO/IEC 30108-1:2015;

--- Appendix C corresponds to Appendix D in ISO/IEC 30108-1:2015;

--- Appendix D corresponds to Appendix B in ISO/IEC 30108-1:2015.

The technical differences between this document and ISO/IEC 30108-1:2015 and their reasons are as follows.

--- Use the normative reference GB/T 1988 instead of ASCII encoding to adapt to my country's coded character standards (see 7.3.18 in

Table 1 and 8.3.1.1);

--- Deleted the abbreviations ESB and SOAP that were used only once to comply with the requirements of national standards (see Chapter 4).

The following editorial changes were made to this document.

--- Added introductory words (see Chapter 4, B.2.2, B.2.3, B.3.2, B.3.3, B.4.2, B.4.3, B.5.3, and B.6.2.7) to comply with national Requirements of national standards;

--- Added "Note 2" (see 7.3.2.1 and 8.7.1.2) to explain the registration of algorithm suppliers in my country.

Introduction

Part 1 of GB/T 44404 defines the architecture, operations, data elements and basic requirements of biometric identity assurance services.

A framework for implementing generic identity services based on biometrics in a service-oriented environment. Identity packages in the context of BIAS the other parts are intended to define the implementation (or binding) of a specific BIAS in a specific environment.

(defined), such as Simple Object Access Protocol (SOAP) web services.

BIAS services are generic in nature, modality neutral, and not targeted to any specific business application.

Services related to data management, conversion and biometric matching. Services are invoked by BIAS requesters and responded to by BIAS service providers (responders).

It does not specify the architecture or business logic of the requester or service provider.

This document defines two types of identity services. basic services and aggregate services. Basic services are more atomic and more clearly defined, while the higher level of aggregation service gives BIAS service providers greater flexibility.

This document also defines two identity models. person-centric and visit-based.

Whereas a visit-based system retains data about every interaction between a subject and the system.

The version of BIAS represented by this document is the version that has been standardized by the International Committee for Information Technology Standards (INCTS) and OASIS.

Therefore, this document represents the BIAS version 2.0.

GB/T 44404 "Information Technology Biometric Identity Assurance Services" is intended to consist of two parts.

--- Part 1: BIAS services. The purpose is to define biometric authentication for identity assurance invoked through a service-based framework.

It provides a common set of biometric and identity-related functions and related data definitions, suitable for remote access to biometric Design, development and application of feature identification services.

---Part 2: REST-based implementation. The purpose is to take biometric identification resources as the center and make full use of the HTTP protocol the Uniform Resource Identifier Protocol provides a unified interface definition and builds the binding of BIAS services with specific frameworks based on REST.

Information Technology Biometric Identity Assurance Services Part 1: BIAS Service

1 Scope

This document defines biometric services for identity assurance that are invoked through a service-based framework.

Biometric and identity-related functionality and associated data definitions to allow remote access to biometric services.

The binding of services to specific frameworks is outside the scope of this document, but will be the subject of a subsequent section.

Although this document focuses on biometrics, it is necessary to include support for other relevant identity assurance mechanisms, such as personal non-biometric BIAS is designed to be compatible with and used in conjunction with the other biometric standards listed in Chapter 2.

The specific requirements for biometric recognition functionality are limited to remote (backend) services.

services are outside the scope of this document.

The integration of biometric services as part of an authentication service or protocol is outside the scope of this document.

This document applies to the design, development and application of biometric identity assurance service systems based on service framework calls.

2 Normative references

The contents of the following documents constitute the essential clauses of this document through normative references in this document.

For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to this document.

GB/T 1988 Information technology - Seven-bit coded character set for information interchange (ISO/IEC 646:1991, NEQ) ISO/IEC 19785-1 Information technology - Common biometric exchange format framework - Part 1: Data element specifications (Infor-cation) Note. GB/T 28826.1-2012 Information technology common biometric identification exchange format framework Part 1: Data element specification (ISO/IEC 19785-1:2006,MOD) ISO/IEC 19785-3 Information technology - Common biometric exchange format framework - Part 3: Maintainer format specification (In-specifications) Note. GB/T 28826.3-2023 Information technology common biometric identification exchange format framework Part 3: Maintainer format specification (ISO/IEC 19785-3:2020,MOD)

3 Terms and definitions

The following terms and definitions apply to this document.

biometric sample

An analog or digital representation of a biometric characteristic prior to biometric extraction.

Example. A record containing an image of a fingerprint is a biometric sample.