iTC Meeting Minutes 2023 05 02 - biometricITC/cPP-biometrics GitHub Wiki
Call started at 10:02am EDT
The call started with a review of the task list. There were no updates at this time.
Brian started by asking if there were any additional comments to the previous discussion on the BSI Protection Profile PP0118b. There were no additional comments on this document.
The discussion then moved on to the BSI Technical Guideline for Biometric Authentication. There was a question about the exact purpose of this document. While it seemed to have some use in relation to the PP, it does state this is targeted to manufacturers. One point that was made is that there is nothing in here about the numbers needed to prove anything. For example how many samples are needed to perform a test to determine if it is acceptable.
There was a question about a specific document referenced in the guide, BSI TS-03168, but this document is still not available yet. There was also a reference to a quality metric using entropy in the sample, Enhancing Security and Privacy in Biometrics-Based Authentication Systems that was listed. No one was familiar with this measure, and the paper is over 20 years old (though it has a number of citations). It was thought this could be useful in the future if there is a need to show quality in some sample which does not have another method for determining it, but it wasn’t certain.
As there were not many discussion points on this guide, the call ended early and the next call will pick up on planning for the updates based on the other documents.
There is no call on May 16, the next call will be May 30.
The call ended at 10:32am EDT.