ISO/IEC 30107-2:2017 PDF

Overview

ISO/IEC 30107-2:2017 specifies standardized data formats for biometric presentation attack detection (PAD). It defines how PAD mechanisms and PAD results are represented so they can be exchanged between systems. The standard addresses attacks that occur at the sensor during presentation and collection of biometric characteristics (sensor-level attacks). It provides two interchange formats: a tagged binary format (ASN.1‑based) and an XML schema. Security measures such as cryptographic protection of PAD data are explicitly out of scope, although PAD records can be embedded in biometric information records (see ISO/IEC 19785‑1) for optional protection.

Key topics and requirements

• Data elements: Formal definitions for PAD input and output data (Clause 5), including:
  • PAD decision: ATTACK, NO_ATTACK, or FAILURE_TO_COMPUTE.
  • PAD score: Integer 0–100 (higher values indicate likely attacks) or FAILURE_TO_COMPUTE.
  • PAD mechanism identifiers: Vendor and mechanism IDs (integers 1–65535) registered per ISO/IEC 19785‑1.
  • PAD extended data: Vendor-defined octet strings for additional PAD-related info.
  • Capture metadata: Context of capture (enrolment/verification/identification), supervision level, risk level, device vendor/model/serial, capture date/time, challenges, and PAD parameters.
• Interchange formats: Normative ASN.1 binary encoding (Annex A.1) and XML schema (Annex A.2); Annex B gives encoding examples.
• Conformance: A PAD data block conforms if it meets the normative requirements in Clause 5 and the formal encodings in Annex A.1 or A.2.
• Scope limits: Only presentation attacks at the sensor are covered. Application-specific requirements and cryptographic protections are excluded.

Applications and intended users

• Biometric system vendors implementing PAD components and needing interoperable output formats.
• Integrators and platform providers who combine PAD outputs with biometric matching or identity systems.
• Testing labs and certification bodies that evaluate PAD effectiveness and require standardized result formats.
• Security architects and identity program managers designing end‑to‑end biometric workflows with PAD logging and auditability.
• Researchers producing PAD datasets or tools that benefit from standardized metadata and scoring.

Practical uses include interoperable reporting of PAD decisions and scores, exchange of PAD metadata in enrolment/verification/identification workflows, audit logging of sensor‑level attacks, and consistent identification of PAD mechanisms and capture devices.

Related standards

• ISO/IEC 30107‑1 (PAD framework)
• ISO/IEC 19785‑1 (Common Biometric Exchange Formats Framework - data element registration)
• ISO/IEC 8824/8825 (ASN.1 and encoding rules)
• ISO/IEC 2382‑37 (biometrics vocabulary)
• ISO 80000 (SI units)

Keywords: ISO/IEC 30107-2:2017, biometric presentation attack detection, PAD data formats, ASN.1 binary format, XML schema, PAD score, PAD decision, vendor identifiers, capture device metadata, sensor-level attacks, biometric interoperability.