CSA ISO/IEC 19794-7:20

CSA Preface Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the SCC Mirror Committee (SMC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T). For brevity, this Standard will be referred to as \"CSA ISO/IEC 19794-7\" throughout. This Standard coexists with CSA ISO/IEC 19794-7:19 (adopted ISO/IEC 19794-7:2007). At the time of publication, ISO/IEC 19794-6:2014 and ISO/IEC Amendment 1:2015 are available from ISO and IEC in English only. CSA Group will publish the French versions when they become available from ISO and IEC. This Standard has been formally approved, without modification, by the Technical Committee and has been developed in compliance with Standards Council of Canada requirements for National Standards of Canada. It has been published as a National Standard of Canada by CSA Group. Scope This part of ISO/IEC 19794 specifies data interchange formats for signature/sign behavioural data captured in the form of a multi-dimensional time series using devices such as digitizing tablets or advanced pen systems. The data interchange formats are generic, in that they may be applied and used in a wide range of application areas where handwritten signs or signatures are involved. No applicationspecific requirements or features are addressed in this part of ISO/IEC 19794. This part of ISO/IEC 19794 contains — a description of what data may be captured, — three data formats for containing the data: a full format for general use, a compression format capable of holding the same amount of information as the full format but in compressed form, and a compact format for use with smart cards and other tokens that does not require compression/decompression but conveys less information than the full format, and — examples of data record contents and best practices in capture. Specifying which of the format types and which options defined in this part of ISO/IEC 19794 are to be applied in a particular application is out of scope; this needs to be defined in application-specific requirements specifications or application profiles. It is advisable that cryptographic techniques be used to protect the authenticity, integrity, and confidentiality of stored and transmitted biometric data; yet such provisions are beyond the scope of this part of ISO/IEC 19794. This part of ISO/IEC 19794 also specifies elements of conformance testing methodology, test assertions, and test procedures as applicable to this part of ISO/IEC 19794. It establishes test assertions on the structure and internal consistency of the signature/sign time series data formats defined in this part of ISO/IEC 19794 (type A level 1 and 2 as defined in ISO/IEC 19794-1:2011/Amd.1), and semantic test assertions (type A level 3 as defined in ISO/IEC 19794-1:2011/Amd.1). The conformance testing methodology specified in this part of ISO/IEC 19794 does not establish: — tests of other characteristics of biometric products or other types of testing of biometric products (e.g. acceptance, performance, robustness, security), — tests of conformance of systems that do not produce data records claimed to conform to the requirements of this part of ISO/IEC 19794.