Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
BS ISO IEC 17839 — Biometric System-on-Card (BiSoC) Standard Series
Information technology — Biometric System-on-Card (BiSoC) — Part 1 & Part 3
🔐 BS ISO/IEC 17839 is the British Standards Institution (BSI) adoption of the ISO/IEC 17839 series, covering Biometric System-on-Card (BiSoC). The series specifies the functional architecture, core requirements, and the logical information interchange mechanism for biometric comparison engines integrated directly into a portable identification card (such as a smart card or identity card). It was prepared by UK technical committee IST/17 (Cards and personal identification) and carries ICS classification 35.240.15 (identification cards and related devices). The series currently comprises two parts: Part 1 defines the core requirements and Part 3 defines the logical information interchange mechanism.
💡 The value of BiSoC is that “the card is the comparison engine”: both the biometric template and the matching operation reside inside the card’s secure chip, so external systems never touch raw biometric data — greatly reducing the risk of privacy leakage.
1. Series Overview and Positioning 📌
A biometric system typically comprises a sensor, a feature extractor, a matcher, and a template database. In a conventional architecture the matcher sits on the server side and the card merely stores the template; a BiSoC places the matcher (and the template) inside the card. The ISO/IEC 17839 series provides a unified functional architecture, type taxonomy, and conformance requirements for this “on-card comparison” scenario.
The two parts currently in the BS ISO/IEC 17839 series are shown below. Together they form the backbone of the BiSoC standard system: Part 1 establishes the functional architecture and core requirements, while Part 3 adds the data-interchange details needed at implementation level.
| Standard | Subject | Key Content | Edition |
|---|---|---|---|
| BS ISO/IEC 17839-1:2014 | Core requirements | BiSoC functional architecture, type classification, comparison modes, and general conformance requirements | First edition 2014-07-01 |
| BS ISO/IEC 17839-3:2016 | Logical information interchange mechanism | Data structures and mechanisms for exchanging logical information between the BiSoC and external systems | First edition 2016-11-01 |
⚠️ This series governs an “on-card comparison” BiSoC, not a “template card” that merely stores a biometric template on the card. The latter does not satisfy the BiSoC core requirements, because its comparison is performed outside the card.
2. Functional Architecture and Type Classification 🏗️
BS ISO/IEC 17839-1 defines the functional architecture of a BiSoC. A complete BiSoC contains at least a matcher, and may additionally integrate feature extraction, template storage, capture, and interface functions. The Standard classifies BiSoCs into different types, typically including Type S1 and Type S2 (the S denoting the System-on-Card family), to distinguish different combinations of comparison capability and external assistance.
- Type S1 BiSoC: provides the most basic on-card comparison capability; the comparison is performed entirely within the card, and all information required for matching resides in the card.
- Type S2 BiSoC: on top of on-card comparison, allows an external system to perform part of the processing (such as feature extraction or template management), but the core comparison decision is still issued by the in-card matcher.
The Standard also gives strict definitions of terms such as “BiSoC comparison” and “template comparison”, and describes the boundaries of capture, encoding, exchange, and comparison of biometric data, so that different implementations are comparable.
3. Key Technical Requirements 🔧
BS ISO/IEC 17839-1 sets requirements on the following aspects:
- Functional architecture: defines the functional units of the BiSoC and their inputs/outputs, and specifies the location and role of the matcher inside the card.
- Types and capabilities: defines capability combinations by S1/S2 type and the functions each type must implement.
- Conformance: provides general clauses for declaring conformance, requiring that implementations be independently verifiable.
- Security and privacy: emphasises that the biometric template and comparison result are protected inside the card, avoiding plaintext disclosure.
BS ISO/IEC 17839-3 specifies the logical information interchange mechanism, covering conformance statements, logical data structures, command/response handling, and error handling. This enables a BiSoC to interact with readers, terminals, or back-end systems in a standardised way, supporting cross-vendor interoperability.
💡 The logical information interchange mechanism is the key to interoperability: only by organising commands and responses according to the standard data structures can BiSoCs from different vendors be recognised and invoked by the same terminal.
4. Engineering Practice and Applications 🔍
BiSoC is mainly used in scenarios requiring strong identity authentication and privacy protection, such as electronic ID cards, e-passports, employee access cards, financial IC cards, and government service cards. Engineering practice points include:
- Secure chip selection: choose a chip with secure storage, cryptographic computation, and on-card comparison capability, and verify it meets the type requirements of ISO/IEC 17839-1.
- Template management: once a biometric template is written into the card, it must be protected by access control; updating a template requires a secure authentication process.
- Interoperability testing: conduct end-to-end integration based on the logical information interchange mechanism of Part 3, verifying compatibility of command sequences and data structures.
- Privacy compliance: follow the principles of “minimised collection, localised comparison”, avoiding uploading biometric data to a centralised database.
5. Frequently Asked Questions ❓
❓ Q: What is the essential difference between a BiSoC and an ordinary biometric template card?
A: A BiSoC integrates the matcher inside the card chip, so comparison is performed on-card; a template card only stores the template, and comparison happens outside (terminal or server). ISO/IEC 17839 addresses the former with functional architecture and core requirements.
A: A BiSoC integrates the matcher inside the card chip, so comparison is performed on-card; a template card only stores the template, and comparison happens outside (terminal or server). ISO/IEC 17839 addresses the former with functional architecture and core requirements.
❓ Q: What is the main difference between Type S1 and Type S2?
A: For S1, all information needed for comparison resides in the card; for S2, an external system may perform part of the processing, but the final comparison decision is still issued by the in-card matcher.
A: For S1, all information needed for comparison resides in the card; for S2, an external system may perform part of the processing, but the final comparison decision is still issued by the in-card matcher.
❓ Q: Why does Part 3 emphasise a “logical information interchange mechanism”?
A: Because cross-vendor interoperability requires unified commands, responses, and data structures. Standardised logical interchange lets BiSoCs from different vendors be correctly invoked by the same reader terminal, improving ecosystem compatibility.
A: Because cross-vendor interoperability requires unified commands, responses, and data structures. Standardised logical interchange lets BiSoCs from different vendors be correctly invoked by the same reader terminal, improving ecosystem compatibility.
🔍 Q: What privacy benefit does a BiSoC bring?
A: Both the biometric template and the comparison are performed in-card, so external systems do not touch raw feature data. This reduces the risk of large-scale leakage from centralised storage and better aligns with data-minimisation compliance requirements.
A: Both the biometric template and the comparison are performed in-card, so external systems do not touch raw feature data. This reduces the risk of large-scale leakage from centralised storage and better aligns with data-minimisation compliance requirements.