ДСТУ ISO/IEC 24745:2023 Информационные технологии. Кибербезопасность и защита конфиденциальности. Защита биометрической информации (ISO/IEC 24745:2022, IDT)
ДСТУ ISO/IEC 24745:2023
(ISO/IEC 24745:2022, IDT)
Інформаційні технології. Кібербезпека та захист
конфіденційності. Захист
біометричної інформації
Не є офіційним виданням.
Офіційне видання розповсюджує національний орган стандартизації
(ДП «УкрНДНЦ» http://uas.gov.ua)
Contents
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviated terms
5 Biometric systems
5.1 General
5.2 Biometric system operations
5.3 Biometric references and identity references (IRs)
5.4 Biometric systems and identity management systems
5.5 Personally identifiable information (PII) and privacy
5.6 Societal considerations
6 Security aspects of a biometric system
6.1 Security requirements for biometric systems to protect biometric information
6.2 Security threats and countermeasures in biometric systems
6.3 Security of data records containing biometric information
7 Biometric information privacy management
7.1 Biometric information privacy threats
7.2 Biometric information privacy requirements and guidelines
7.3 Biometric information lifecycle privacy management
7.4 Responsibilities of a biometric system owner
8 Biometric system application models and security
8.1 Biometric system application models
8.2 Security in each biometric application model
Annex A (informative) Secure binding and use of separated DBIR and DBBR
Annex В (informative) Framework for renewable biometric references (RBRs)
Annex C (informative) Technology examples for biometric information protection
Annex D (informative) Biometric watermarking
Annex E (informative) Biometric information protection using information splitting
Annex F (informative) Selection of biometric application models
Bibliography
Полная версия документа доступна в тарифе «ВСЕ ВКЛЮЧЕНО».