信息技术.公用生物特征识别交换格式框架.第4部分:安全块格式规范

[中文适用范围]： 本部分ISO/IEC 19785规定了根据ISO/IEC 19785-2注册的生物识别组织ISO/IEC JTC 1/SC 37定义的格式的安全块格式，并规定了其注册的安全块格式标识符。通用安全块格式提供了指定生物识别数据块（BDB）是否加密或SBH和BDB是否应用完整性（或两者都应用）的说明，并可包含ACBio实例（见ISO/IEC 24761）。该安全块提供所有必要的安全参数，包括用于加密或完整性的参数。它不限制用于加密或完整性的算法和参数，但提供了记录这些算法和参数值的方法。确定特定应用领域中安全块生成器可以使用哪些算法和参数范围，以及安全块用户必须支持哪些算法和参数范围，是配置文件的问题，这不在本部分ISO/IEC 19785的范围内。第二个安全块更有限，但更简单（特别是不能包含ACBio实例，也不支持BDB的加密）。 [外文原描述]： ISO/IEC 19785-4:2010 specifies security block formats (see ISO/IEC 19785-1) registered in accordance with ISO/IEC 19785-2 as formats defined by the CBEFF biometric organization ISO/IEC JTC 1/SC 37, and specifies their registered security block format identifiers. [The security block format identifier is recorded in the standard biometric header (SBH) of a patron format (or defined by that patron format as the only available security block format).] The general-purpose security block format provides for specification of whether the biometric data block (BDB) is encrypted or the SBH and BDB have integrity applied (or both), and can include ACBio instances (see ISO/IEC 24761). This security block provides all necessary security parameters, including those used for encryption or integrity. It does not restrict the algorithms and parameters used for encryption or integrity, but provides for the recording of such algorithms and parameter values. It is a matter for profiling to determine, for a particular application area, what algorithms and parameter ranges can be used by the generator of a security block, and hence what algorithms and parameter ranges have to be supported by the user of a security block. This is out of the scope of ISO/IEC 19785-4:2010. The second security block is more limited, but simpler (and in particular cannot contain ACBio instances, and does not support encryption of the BDB).