信息技术 通用生物特征信息交换格式框架 第4部分：安全块格式规范

[中文适用范围]： 本文件规定了根据ISO/IEC 19785-2注册的安全块（SB）格式，这些格式由符合通用生物特征数据交换格式框架（CBEFF）的生物特征组织ISO/IEC JTC 1/SC 37定义（参见ISO/IEC 19785-1）。本文件还规定了已注册的SB格式标识符。注：SB格式标识符记录在客户格式的标准生物特征头（SBH）中（或由该客户格式定义为唯一的可用SB格式）。通用SB格式指明生物特征数据块（BDB）是否加密，或者SBH和BDB是否应用了完整性保护（或两者均适用）。通用SB格式可以包含ACBio实例（参见ISO/IEC 24761）。该SB格式提供了所有必要的安全参数，包括用于加密或完整性保护的参数。本文件不限制用于加密或完整性保护的算法和参数，但规定了记录这些算法和参数值的方式。本文件不涉及确定用于特定应用领域的SB生成器可以使用的算法和参数范围的配置分析，因此也不规定SB使用者必须支持的算法和参数范围。第二种SB格式较为有限但更简单，特别是不能包含ACBio实例，且不支持BDB的加密。以XML格式表示的通用SB格式用于指定BDB是否加密，或SBH和BDB是否应用了完整性保护（或两者均适用）。 [外文原描述]： This document specifies security block (SB) formats (see ISO/IEC 19785-1) registered in accordance with ISO/IEC 19785-2 as formats defined by the Common Biometric Exchange Formats Framework (CBEFF) biometric organization ISO/IEC JTC 1/SC 37. This document also specifies registered SB format identifiers. NOTE The SB format identifier is recorded in the standard biometric header (SBH) of a patron format (or defined by that patron format as the only available SB format). The general-purpose SB format specifies whether the biometric data block (BDB) is encrypted or the SBH and BDB have integrity applied (or both). The general-purpose SB format can include ACBio instances (see ISO/IEC 24761). This SB provides all necessary security parameters, including those used for encryption or integrity. This document does not restrict the algorithms and parameters used for encryption or integrity, but it provides for the recording of such algorithms and parameter values. This document does not cover profiling to determine what algorithms and parameter ranges can be used by the generator of an SB for a particular application area, and hence what algorithms and parameter ranges have to be supported by the user of an SB. The second SB format is more limited but simpler. In particular, it cannot contain ACBio instances and does not support encryption of the BDB. The general-purpose SB format in XML provides for specification of whether the BDB is encrypted or the SBH and BDB have integrity applied (or both).