What is ISO/IEC 30107-4 about?
ISO/IEC 30107-4 is the fourth part of the multi-series standard that provides requirements for testing biometric presentation attack detection (PAD) mechanisms on mobile devices with local biometric recognition.
ISO/IEC 30107-4 lists requirements from ISO/IEC 301073 specific to mobile devices that establish new requirements not present in ISO/IEC 301073. For each requirement, the profile defines an Approach in Presentation Attack Detection (PAD) Testing for Mobile Devices. For some requirements, numerical values or ranges are provided in the form of best practices.
This profile is applicable to mobile devices that operate as closed systems with no access to internal results, including mobile devices with local biometric recognition as well as biometric modules for mobile devices.
Who is ISO/IEC 30107-4 for?
ISO/IEC 30107-4 on biometric presentation attack detection profile for testing of mobile devices is useful for:
- Cyber security department
- Mobile companies
- IT companies
- Biometric device manufacturers
Why should you use ISO/IEC 30107-4?
The presentation of an artifact or of human characteristics to a biometric capture subsystem in a fashion intended to interfere with system policy is referred to as a presentation attack.
ISO/IEC 30107-4 series deals with techniques for the automated detection of presentation attacks. These techniques are called Presentation Attack Detection (PAD) mechanisms.
PAD subsystems are commonly integrated into mobile devices. The following characteristics of mobile devices necessitate the development of a profile of ISO/IEC 301073 specific to PAD testing:
- Mobile devices often have accelerated product development timelines, such that time and resources for PAD testing may be limited.
- A single type of biometric subsystem is often integrated into a wide range of mobile devices, so results from a single test may be applicable to multiple types of mobile devices.
- Biometric subsystems integrated into mobile devices are typically closed systems, such that performance testing takes place through a full-system evaluation.
ISO/IEC 30107-4 provides requirements for assessing the performance of PAD mechanisms on mobile devices with local biometric recognition.