CEN/TR 18030:2023

SLOVENSKI STANDARD
01-junij-2024
Osebna identifikacija - Biometrija - Pregled sistemov biometričnega preverjanja, ki
se izvajajo po Evropi
Personal identification - Biometrics - Overview of biometric verification systems
implemented across Europe
Persönliche Identifikation - Verwendung biometrischer Verifikationsdaten in allen EU-
Ländern und Szenarien
Ta slovenski standard je istoveten z: CEN/TR 18030:2023
ICS:
35.240.15 Identifikacijske kartice. Čipne Identification cards. Chip
kartice. Biometrija cards. Biometrics
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

CEN/TR 18030
TECHNICAL REPORT
RAPPORT TECHNIQUE
December 2023
TECHNISCHER REPORT
ICS 35.240.15
English Version
Personal identification - Biometrics - Overview of
biometric verification systems implemented across Europe
Persönliche Identifikation - Verwendung biometrischer
Verifikationsdaten in allen EU-Ländern und Szenarien

This Technical Report was approved by CEN on 24 December 2023. It has been drawn up by the Technical Committee CEN/TC
224.
CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and
United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2023 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 18030 E
worldwide for CEN national Members.

Contents Page
European foreword . 4
Introduction . 5
1 Scope . 6
2 Normative references . 6
3 Terms and definition s . 6
4 Symbols and abbreviated terms . 7
5 State of the art using biometrics in interoperable scenarios. 8
5.1 General. 8
5.2 Standardization applied to the enrolment . 8
5.3 Standardization applied to the storage . 8
5.4 Standardization applied to the communication between nodes of a biometric network
..................................................................................................................................................................... 9
5.5 Standardization applied to the use of biometrics . 9
5.6 Standardization applied to the environment . 10
5.7 Standardization applied to the quality assurance . 11
5.8 Standardization applied to the data security assurance . 11
5.9 Use of biometrics in border control . 13
6 Technical challenges of a biometric system with interoperability. 14
7 Challenges related to the acquisition of biometric data . 15
7.1 General. 15
7.2 Acquisition requirements during the recognition phase . 16
7.3 Acquisition requirements during the enrolment phase . 17
7.4 Examples of acquisition challenges . 17
7.4.1 General. 17
7.4.2 Fingerprint images: comparison among semiconductor sensors and quality
algorithms . 17
Table 1 — Main characteristics of the sensors used . 18
Figure 1 — Distribution of Quality Scores for Acquisition accepted samples in sensor 1 . 18
Figure 2 — Distribution of Quality Scores for Acquisition accepted samples in sensor 2 . 19
Figure 3 — Distribution of Quality Scores for Acquisition accepted samples in sensor 3 . 19
Figure 4 — Distribution of Quality Scores for Acquisition accepted samples in sensor 4 . 20
Figure 5 — Distribution of Quality Scores for Acquisition accepted samples in sensor 5 . 20
Figure 6 — Distribution of Quality Scores for Acquisition Errors in sensor 1 . 21
Figure 7 — Distribution of Quality Scores for Acquisition Errors in sensor 2 . 22
Figure 8 — Distribution of Quality Scores for Acquisition Errors in sensor 3 . 22
Figure 9 — Distribution of Quality Scores for Acquisition Errors in sensor 4 . 23
Figure 10 — Distribution of Quality Scores for Acquisition Errors in sensor 5 . 23
8 Challenges in the recognition process . 24
8.1 General . 24
8.2 Examples of recognition challenges. 24
8.2.1 General . 24
8.2.2 Face recognition in Spanish ABC points . 24
Table 2 — EER values obtained by the different algorithms/versions used . 25
Table 3 — FRR values obtained by the different algorithms/versions used . 26
8.2.3 Face verification results in NIST FRVT 1:1 on-going evaluation . 26
Figure 11 — FRVT 1:1 Verification results for products 1 to 6 . 28
Figure 12 — FRVT 1:1 Verification results for products 121 to 126 . 29
Figure 13 — FRVT 1:1 Verification results for products 391 to 396 . 29
8.2.4 Fingerprint verification results in public evaluations/competitions . 30
Table 4 — Excerpt of some results from FVC 2006 . 31
9 Recommendations for the future . 32
Bibliography . 33

European foreword
This document (CEN/TR 18030:2023) has been prepared by Technical Committee CEN/TC 224
“Personal identification and related personal devices with secure element, systems, operations and
privacy in a multi sectorial environment”, the secretariat of which is held by AFNOR.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
Any feedback and questions on this document should be directed to the users’ national standards body.
A complete listing of these bodies can be found on the CEN website.
Introduction
From the beginning of the century, the use of biometrics in real applications has been more and more
extended to other environments different than forensic analysis. With this focus, thorough studies about
normalized mechanisms to harmonize the use of biometrics have been made. Many relevant institutions,
public and private, have collaborated to obtain standards, technical reports, etc. towards best practices
of biometrics.
From the point of view of organizations at the international, European and national level, a big
organizational process has been developed. Other organizations have used and adapted current
standards to produce their own normative related with the use of biometrics (i.e. ICAO, Frontex, Eu-Lisa,
etc).
Biometrics networks where lots of nodes collaborate to obtain the distributed biometrics storage and
matching have been implemented in the public (Eurodac, Interpol, etc) and private scenarios.
It is well known the huge number of challenges that have to be faced when a biometric solution is being
deployed, in particular when trying to cover a high level of interoperability. One example of these
challenges is the difficulty that system integrators (and service providers) have to face when choosing
which capture device will they use, as they can only rely on the figures provided by the manufacturer,
which sometimes are incomplete. Another example is the rigourness in applying quality requirements to
biometric references and probes in different applications or even countries.
A perfect example of this challenge is border control, where the system has to be able to manage
ePassports from all around the world, as well as subjects of all kinds. Even with the high number of
international standards available nowadays, plus some additional requirements (e.g. those issued by
FRONTEX), a huge variety of cases have to be handled, including differences in how the information is
stored in the ePassports, the acquisition scenario and requirements, or even the acceptance thresholds.
The aim of this technical report is to analyse the current state of art in biometrics standardization, its use,
and the identification of gaps between all the relevant standards used in environments applying the
European laws and normative to the applications.
The detected gaps are identified in order to promote the modification of the current standards on
biometrics or/and the generation of new standards in Europe.
1 Scope
This document provides an overview of the current deployment of biometric systems within Europe. It
addresses the challenges that are being faced, in order to detect the current needs for improving the
specifications for the implementation and deployment of biometric systems. This document considers all
kind of deployments, from border control to ad hoc services. As most of the deployed systems are based
on the use of fingerprints or face recognition, this document will focus on these two biometric modalities,
from the system integrator and interoperability points of view.
Identity documents, in terms of production, structure, interoperability, etc., are out of the scope of this
document. The document is focused on the performance at system level.
The current European legislative initiatives around this topic (e.g. Entry/Exit System, framework for
interoperability between EU information systems, etc.) need a robust framework study about the
availability of standard technologies to improve interoperability in biometric products around the
European Union.
By showing these needs, a set of recommendations for future standardization works is provided.
From a methodological perspective, the report gathers information of different entities with this
classification:
— Capture/enrolment of biometrics including the quality assurance and the generation of feature or
biometric models from the images.
— Best practices and guidelines to use biometrics in Europe.
— Data Quality environment using biometrics in European networks.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
EN 17054, Biometrics multilingual vocabulary based upon the English version of ISO/IEC 2382-37:2012
ISO/IEC 2382-37, Information technology — Vocabulary — Part 37: Biometrics
3 Terms and definition s
For the purposes of this document, the terms and definitions given in ISO/IEC 2382-37 and EN 17054
apply.
ISO and IEC maintain terminology databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https://www.iso.org/obp/
— IEC Electropedia: available at https://www.electropedia.org/
...