CSA ISO/IEC 19794-7:20

1 Scope This part of ISO/IEC 19794 specifies data interchange formats for signature/sign behavioural data captured in the form of a multi-dimensional time series using devices such as digitizing tablets or advanced pen systems. The data interchange formats are generic, in that they may be applied and used in a wide range of application areas where handwritten signs or signatures are involved. No applicationspecific requirements or features are addressed in this part of ISO/IEC 19794. This part of ISO/IEC 19794 contains — a description of what data may be captured, — three data formats for containing the data: a full format for general use, a compression format capable of holding the same amount of information as the full format but in compressed form, and a compact format for use with smart cards and other tokens that does not require compression/decompression but conveys less information than the full format, and — examples of data record contents and best practices in capture. Specifying which of the format types and which options defined in this part of ISO/IEC 19794 are to be applied in a particular application is out of scope; this needs to be defined in application-specific requirements specifications or application profiles. It is advisable that cryptographic techniques be used to protect the authenticity, integrity, and confidentiality of stored and transmitted biometric data; yet such provisions are beyond the scope of this part of ISO/IEC 19794. This part of ISO/IEC 19794 also specifies elements of conformance testing methodology, test assertions, and test procedures as applicable to this part of ISO/IEC 19794. It establishes test assertions on the structure and internal consistency of the signature/sign time series data formats defined in this part of ISO/IEC 19794 (type A level 1 and 2 as defined in ISO/IEC 19794-1:2011/Amd.1), and semantic test assertions (type A level 3 as defined in ISO/IEC 19794-1:2011/Amd.1). The conformance testing methodology specified in this part of ISO/IEC 19794 does not establish: — tests of other characteristics of biometric products or other types of testing of biometric products (e.g. acceptance, performance, robustness, security), — tests of conformance of systems that do not produce data records claimed to conform to the requirements of this part of ISO/IEC 19794.