ISO 19092 Financial Services - Biometrics, released as ISO 19092 Financial Services - Biometrics - Part 1: Security framework, is an

ISO standard The International Organization for Standardization (ISO ; ; ) is an independent, non-governmental, international standard development organization composed of representatives from the national standards organizations of member countries. Me ...

and describes the adequate information management security controls and the proper procedures for using

biometrics Biometrics are body measurements and calculations related to human characteristics and features. Biometric authentication (or realistic authentication) is used in computer science as a form of identification and access control. It is also used t ...

as an authentication mechanism for secure remote electronic access or local physical access controls for the

financial Finance refers to monetary resources and to the study and Academic discipline, discipline of money, currency, assets and Liability (financial accounting), liabilities. As a subject of study, is a field of Business administration, Business Admin ...

and other critical infrastructure industries. The standard also provides a useful tutorial on biometric systems and technology, describes the physical security requirements of biometric devices, the minimal content for Biometric Policy (BP) and Biometric Practice Statements (BPS), and secure event journal content for review and audit of biometric systems.

Unpublished Part 2

There was to be an ISO 19092 Financial Services - Biometrics - Part 2: Message syntax and cryptographic requirements to describes the techniques, protocols, cryptographic requirements, and syntax for using

as an identification and verification mechanism in a wide variety of security applications in the

industry. However, consensus was never reached on this part. The standard was to provide support for policy based matching decisions for remote authentication and allows biometrics to be used securely with the

ISO 8583 ISO 8583 is an international standard for ''financial transaction card originated'' interchange messaging. It is the International Organization for Standardization standard for systems that exchange electronic transactions initiated by cardholde ...

retail transaction messaging standard. A secure review and audit event journal syntax was to allow many of the security controls specified in Part 1 to be implemented.

References

#19092-1 {{Standard-stub