Solutions Architects Bringing Safety and Security to

Our Physical/Logical/Cyber World

GLOSSARY OF BIOMETRIC TERMS

Below is an A - Z guide of commonly used terms
when discussing biometrics:


Attempt
The submission of a biometric sample to a biometric system for identification or verification. A biometric system may allow more than one attempt to identify or verify.

BEM
Biometric Evaluation Methodology

BioAPI
Biometrics Application Programming Interface standard.

Biometric
A measurable physical characteristic or personal behavioral trait used to recognize the identity of an enrollee or verify a claimed identity.

Biometric application
The use to which a biometric system is put.

Biometric data
Extracted information taken from a biometric sample and used either to build a reference template on enrolment, or to compare against a previously created reference template.

Biometric feature
A representation from a biometric sample extracted by the extraction system.

Biometric sample
A biometric measure presented by the user and captured by the data collection system.

Biometric system
An automated system capable of capturing a biometric sample from an end user, extracting biometric data from the sample, comparing the data with one or more reference templates, deciding on how well they match, and indicating whether or not an identification or verification of identity has been achieved.
Note that in CC evaluation terms, a biometric system may be a product or may be (part of) a system for evaluation.

Biometric template
See template.

Capture
The process of taking a biometric sample via a sensor from a user.

CBEFF
Common Biometric Exchange File Format standard

CCEM
Common Criteria Evaluation Methodology [CEM]

Common Criteria
An international scheme for the security evaluation and certification of IT systems.

Comparison
The process of comparing biometric data with a previously stored reference template (or templates).

EAL
Evaluation Assurance Level

Enrollee
A user with a stored biometric reference template on file.

Enrolment
The process of collecting biometric sample(s) from a person, and the subsequent preparation and storage of reference template(s) and associated data representing that person's identity.

Failure to acquire rate (FTA)
The failure to acquire rate is the proportion of attempts for which a biometric system is unable to capture an image of sufficient quality. When a biometric system allows multiple attempts, FTA measures failure to capture over these multiple attempts.

Failure to enroll rate (FTE)
The failure to enroll rate is the proportion of the user population for whom the biometric system is unable to generate reference templates of sufficient quality. It is the equivalent of FTA for the enrolment process, and depends on the procedures used in enrolment (which may differ from the procedures for later identification). It includes those who, for physical or behavioral reasons, are unable to present the required biometric feature.

False Acceptance
An incorrect identification of an individual, or an incorrect verification of an impostor.

False Accept Rate (FAR)
The probability that a biometric system will incorrectly identify an individual, or will fail to reject an impostor. For a positive (verification) system, it can be estimated from: (the number of false acceptances) ÷ (the number of impostor verification attempts).

False Match Rate (FMR)
The rate for incorrect positive matches by the matching algorithm for single template comparison attempts. For a biometric system that uses just one attempt to decide acceptance, FMR is the same as FAR. When multiple attempts are combined in some manner to decide acceptance, FAR is more meaningful at the system level than FMR.

False Non-Match Rate (FNMR)
The rate for incorrect negative matches by the matching algorithm for single template comparison attempts. For a biometric system that uses just one attempt to decide acceptance, FNMR is the same as FRR. When multiple attempts are combined in some manner to decide acceptance, FRR is more meaningful at the system level than FNMR.

False Rejection
A failure to identify or verify a genuine enrollee.

False Reject Rate (FRR)
The probability that a biometric system will fail to identify a genuine enrollee. For a positive (verification) system, it can be estimated from: (the number of false rejects) ÷ (the number of enrollee verification attempts).

Identification
The process of using a submitted biometric sample for comparison against the set of enrolled templates to match a user to an enrollee. (Normally used only in one-to-many systems)

Identification system
Identification systems, where the user makes no explicit claim to identity, may be compared to verification systems. Without a claimed identity, the biometric system does a one-to-many process of comparison against all enrollees in its database.

Impostor
A person making a false claim about identity to the biometric system.

Live processing
Direct enrolment/ identification of potential users via the normal biometric capture process. Compare off-line processing.

Matching score
A measure of similarity or dissimilarity between the biometric data and a stored template, used in the comparison process.

Multimodal biometric
A biometric device which uses information from different biometrics - e.g. fingerprint and hand shape; or fingerprints from two separate fingers. All statistical analysis of multimodal systems should consider how the modes are combined in the comparison process.

NIST
National Institute of Standards and Technology

One-to-many matching
See identification system.

One-to-one matching
See verification system.

On-line processing
See live processing.

Operational testing
Testing a biometric system to measure its statistical properties (e.g. FAR and FRR) in a specified operational environment, with a specific target population.

Physical/ Physiological biometric
A biometric which is characterized by a physical characteristic.

Positive claim
A claim by a user to be enrolled in the biometric system. An explicit claim is often accompanied by a user identification, and may also be associated with a password or PIN.

PP
Protection Profile. A form of generic Security Target defined in the Common Criteria.

Receiver Operating Characteristics (ROC)
A method of showing the performance of the biometric system over a range of decision criteria - usually shown as a graph that relates FAR to FRR as the decision threshold varies.

ROC
Receiver Operating Characteristics

Scenario testing
Testing a biometric system to measure its statistical properties (e.g. FAR and FRR) in an environment modelled to simulate a particular application.

Security Target
A set of security requirements and specifications to be used as the basis for the evaluation of a TOE.

Sensor
The physical hardware device used for biometric capture

Sensor ageing
The gradual degradation in performance of a sensor over time.

Technology testing
Testing one or more biometric systems to measure statistical properties (e.g. FAR and FRR) to compare various algorithms and technologies - usually achieved by off-line processing.

Template
A user's stored reference measure based on biometric feature(s) extracted from biometric sample(s).

Template ageing
The gradual change of a user's biometric feature(s) which requires periodic updating of the user's reference template.

Threat
An intentional or unintentional potential event that could compromise the security integrity of the system.

Threshold
A parametric value used to convert a matching score to a decision. A threshold change will usually change both FAR and FRR - as FAR decreases, FRR increases.

User
A person who requires access to the portal which is protected by a biometric system.

Verification
The process of using a submitted biometric sample for comparison against a template to match a user to a known enrolee. (Normally used only in one-to-one systems, where the user may also have to specify a user name and/or password or PIN)

Verification system
Verification systems, where the user explicitly claims an identity, may be compared to identification systems.

Vulnerability
The potential for the function of a biometric system to be compromised by e.g. intention (fraudulent activity); design flaw (including usage error); accident; hardware failure; or external environmental condition.

Weak Template
A template created from a noisy, poor quality, highly varying or null image, which typically has a higher FAR than other templates.

Home Page     Custom Solutions     White Papers     Glossary

HRS Technologies, LLC

708-755-1583

Info@HRSTechnologiesLLC.com

©2006-2008 HRS Technologies, LLC.  All Rights Reserved.