信息技术 生物特征登记指南

[中文适用范围]： 本文件提供了关于成功、安全且可用地实施生物特征注册过程的指导，同时指出了采用生物特征技术的组织在采购、设计、部署和运行期间可以解决的风险因素。本文件的大部分内容为通用内容，适用于多种类型的应用，例如国家级商业和政府应用、用于内部操作的封闭系统以及消费者应用。然而，预期应用及其目的往往会影响所需的注册数据质量，并在指定注册系统和过程时予以考虑。本文件规定了与特定类型应用相关的操作差异，例如在自注册比 attended 注册更合适的情况下。本文件侧重于固定地点的强制性、现场注册。它最终整合了关于在各种商业背景下实施生物特征注册能力的最佳实践信息，包括流程、功能（系统）和技术方面的考虑，以及法律/隐私和政策方面。本文件提供了关于生物特征注册数据的收集和存储以及其对验证和识别等依赖过程的影响的指导。本文件不包括针对法证和执法应用的具体材料。 [外文原描述]： This document gives guidance relating to successful, secure and usable implementation of biometric enrolment processes, while indicating risk factors that organizations which use biometric technologies can address during procurement, design, deployment and operation. Much of this document is generic to many types of applications, e.g. from national scale commercial and government applications, to closed systems for in-house operations, and to consumer applications. However, the intended application and its purpose often have influence on the necessary enrolment data quality and are taken into account when specifying an enrolment system and process. This document specifies the differences in operation relating to specific types of application, e.g. where self-enrolment is more appropriate than attended enrolment. This document focuses on mandatory, attended enrolment at fixed locations. It ultimately consolidates information relating to better practices for the implementation of biometric enrolment capability in various business contexts including considerations of process, function (system), and technology, as well as legal/privacy and policy aspects. This document provides guidance on collection and storage of biometric enrolment data and the impact on dependent processes of verification and identification. This document does not include material specific to forensic and law enforcement applications.