ISO/IEC 7816-11:2022

Overview - What ISO/IEC 7816-11:2022 covers

ISO/IEC 7816-11:2022 specifies security-related interindustry commands, data structures and access methods for implementing personal verification through biometric methods on integrated circuit cards (ICCs). It defines how a card can act as a carrier of a biometric reference and/or as the device that performs on‑card biometric comparison of a presented biometric probe. The standard addresses both contact and contactless ICCs and is explicit that identification of persons using biometrics is outside its scope (it focuses on verification).

Key technical topics and requirements

• Commands and operations: Defines the set of interindustry commands for enrolment, retrieval and comparison of biometric data - notably the PERFORM BIOMETRIC OPERATION (PBO) command and its operations (enrolment, retrieve biometric reference information, compare biometric probe, feedback during acquisition).
• Biometric verification modes: Describes biometric static verification (fixed sample presentation) and biometric dynamic verification (random/card-challenge driven actions).
• Data structures and encoding: Specifies biometric-related data elements (biometric information, biometric data, verification information) and templates built from BER‑TLV (Tag‑Length‑Value) objects; includes Verification Information Data Object (VIDO) and Verification Information Template (VIT).
• Access and security: Integrates with card security environment concepts from ISO/IEC 7816-4 and mandates secure handling of biometric references and processing on the ICC.
• Feedback mechanism: Standardizes how an ICC can provide detailed error, warning or progress messages during biometric acquisition to external devices (Biometric System‑on‑Card).
• Interoperability and tag allocation: Clarifies tag allocation authority and template formats to support multiple biometric formats and compatibility with existing biometric data standards.
• Normative links: Normative references include ISO/IEC 7816-4, ISO/IEC 24761 (authentication context for biometrics), ISO/IEC 24787 (on‑card comparison) and ISO/IEC 2382-37 (biometrics vocabulary).

Practical applications and users

Who uses ISO/IEC 7816-11:2022:

• Smart card and secure element manufacturers
• Biometric solution vendors and middleware developers
• Government identity programs (e‑ID, e‑passport systems)
• Payment and banking card issuers implementing biometric verification
• Access control and physical security integrators
• Security architects and system integrators designing Biometric System‑on‑Card solutions

Common applications:

• On‑card biometric authentication for secure login, payment and physical access
• Storing and protecting biometric references on ICCs for offline verification
• Enrolment and lifecycle management of biometric templates on cards

Related standards

• ISO/IEC 7816‑4 - organization, security and commands for interchange
• ISO/IEC 24761 - Authentication context for biometrics
• ISO/IEC 24787 - On‑card biometric comparison
• ISO/IEC 2382‑37 - Biometrics vocabulary

Keywords: ISO/IEC 7816-11:2022, integrated circuit cards, biometric verification, on-card biometric comparison, PERFORM BIOMETRIC OPERATION, biometric reference, enrolment, VIDO, VIT, BER-TLV.