Overview
ISO/IEC 18584:2015 specifies conformance test requirements for on‑card biometric comparison applications on identification cards (ICC). It defines how to test APDU command/response pairs and system behavior for ICCs that perform biometric comparison on‑card (per ISO/IEC 24787:2010). The standard covers both full on‑card comparison and the work‑sharing variant (pre‑comparison computations split between card and terminal). It does not cover biometric algorithm performance metrics (error rates).
Key Topics and Requirements
- Test methodology: structured test assertions and pass/fail criteria for each requirement; consolidation of test outcomes into reports.
- APDU testing scope: verification of command and response pairs used by on‑card biometric comparison applications.
- Data handling:
- Biometric reference object handling and auxiliary data management.
- Configuration data for biometric verification, including algorithm parameters and biometric product identifiers.
- Sharable interfaces for multiple applications (file control parameters, access rules).
- Retry counter management and secure lifecycle actions (e.g., zeroize).
- Standard processes: conformance tests for AID registration, read biometric reference data, enrolment, verification, termination, and comparison result output.
- Work‑sharing (WSR) protocol: tests for work‑sharing request/response bytes, biometric reference templates for work‑sharing, procedure discovery and management.
- Security policies: conformance requirements to validate Common Security Policies (CSP) and specific policies for global/local comparison configuration data.
- Supporting material: normative Annex A (checklist for biometric data templates for work‑sharing) and informative Annex B (testing framework).
Applications and Who Uses It
ISO/IEC 18584:2015 is essential for:
- Smart card and ICC manufacturers validating on‑card biometric capabilities.
- Card OS and application developers implementing biometric verification per ISO/IEC 24787.
- Biometric system integrators and terminal vendors implementing work‑sharing and APDU interfaces.
- Conformity assessment bodies and test laboratories producing certification reports.
- Government ID, e‑passport, access control and secure authentication programs ensuring on‑card biometric implementations meet interoperability and security expectations.
Practical applications include secure identity verification in national ID schemes, e‑passports, access control smart cards, and multi‑factor authentication tokens where biometric reference data must not leave the card.
Related Standards
Keywords: ISO/IEC 18584:2015, on‑card biometric comparison, conformance test requirements, APDU testing, work‑sharing, ICC, ISO/IEC 24787.