Overview
ISO/IEC TS 19795-9:2019 provides practical guidance for biometric performance testing and reporting on mobile devices. It focuses on full‑system evaluations of local biometric authentication (e.g., fingerprint, face, voice) intended to improve authentication assurance for verification use cases such as secure transactions. The technical specification emphasizes cost‑efficient, repeatable methods - including offline evaluation of false accept rate (FAR) claims - and sets out modality‑specific considerations for testing sensors and end‑to‑end systems embedded in mobile devices.
Key topics and requirements
- Full‑system evaluation: Guidance for end‑to‑end testing that includes capture sensors, on‑device processing and template/reference handling rather than isolated sub‑systems.
- Offline FAR evaluation: Methods to assess and report False Accept Rate claims in a reproducible, offline testing environment.
- Modality‑specific considerations: Recommendations tailored to different biometric modalities and to whether sensors are embedded (e.g., cameras, microphones) or dedicated (e.g., fingerprint readers).
- Data collection and test design: Procedures for test crew size and characteristics, subject interaction, enrolment methods (including iterative and multi‑session enrolment) and verification workflows.
- Practical constraints and efficiency: Strategies to reduce time and cost (reducing recognition transactions, test conditions and visits) while retaining statistically meaningful results.
- Environmental and ergonomic factors: Guidance on handling uncontrolled mobile capture environments and reporting ambient conditions that affect performance.
- Performance metrics and reporting: Instructions on metrics to measure, optional technology evaluation for lower FAR claims, and structured reporting (including sample report templates).
- Third‑party evaluation: Considerations for independent testing, system specification requirements, and checking vendor self‑attestation and online/offline consistency.
Note: the specification explicitly excludes privacy, server‑side authentication, presentation attack detection (PAD) testing, sub‑system (acquisition/comparison) performance testing and continuous authentication.
Applications and users
ISO/IEC TS 19795-9 is most useful for:
- Mobile device manufacturers and OEMs validating on‑device biometric systems.
- Biometric algorithm and sensor vendors preparing FAR claims.
- Independent test labs and QA teams conducting scenario evaluations.
- Security architects, procurement officers and regulators assessing device suitability for secure transaction verification.
- App developers and service providers designing local biometric authentication workflows.
Related standards
Keywords: ISO/IEC TS 19795-9:2019, biometric performance testing, mobile devices, local biometric authentication, false accept rate, FAR, full‑system evaluation, testing and reporting.