Overview
ISO/IEC 24709-2:2007 specifies test assertions for conformance testing of Biometric Service Providers (BSPs) to the BioAPI standard (ISO/IEC 19784-1, BioAPI 2.0). Written in the assertion language defined in ISO/IEC 24709-1, these test assertions are designed to be executed by testing laboratories and other conformity assessment bodies to verify that a BSP implements BioAPI interfaces and behaviors correctly.
Key topics and requirements
- Test assertions for BSPs: A catalog of machine-interpretable assertions exercising individual BioAPI features; each assertion targets one or more implementation behaviors.
- Assertion organization: Assertions are grouped into packages and organized by conformance subclasses (e.g., Verification BSP, Identification BSP, Capture BSP, Verification Engine, Identification Engine) and by claimed optional features.
- Scope of conformance: The standard defines which subsets of assertions must be executed for each BSP subclass and for optional BioAPI features; passing these assertions supports a claim of conformance to the tested aspects of ISO/IEC 19784-1.
- Practical test coverage: Clause 8 lists assertions covering lifecycle and functional operations (examples from the document include BioSPI_BSPLoad, BioSPI_BSPUnload, BioSPI_Capture, BioSPI_CreateTemplate, BioSPI_VerifyMatch, and many DB-related assertions such as BioSPI_DbStoreBIR).
- Test methodology linkage: ISO/IEC 24709-2 relies on the methods and assertion language specified in ISO/IEC 24709-1 for execution semantics and reporting.
Applications and who uses it
- Testing laboratories and certification bodies use ISO/IEC 24709-2 to develop conformance test suites and produce reproducible test reports for BSP vendors.
- BSP developers and vendors use the assertions to validate and debug their implementations against BioAPI 2.0 before certification or deployment.
- System integrators and procurement teams reference conformance test outcomes to assess interoperability and compliance when selecting biometric components.
- Researchers and auditors apply the standard to evaluate implementation correctness, especially for security-sensitive biometric operations (capture, template creation, verification, identification and biometric database handling).
Related standards
- ISO/IEC 19784-1 (BioAPI 2.0) - Functional and interface requirements for BioAPI BSPs (target of the conformance tests).
- ISO/IEC 24709-1 - Methods, procedures and the assertion language used to express the test assertions in Part 2.
- Ongoing work: Parts 3 and 4 of ISO/IEC 24709 (test assertions for frameworks and applications) complement Part 2.
ISO/IEC 24709-2:2007 is essential for consistent, repeatable conformance testing of BioAPI BSPs, supporting interoperability and quality assurance in biometric systems. Keywords: ISO/IEC 24709-2:2007, BioAPI, BSP, conformance testing, test assertions, biometric service provider.