Descarga archivo PDF (20MB) - Biometría

emember something or to take an item (such as a card) with him. In contrast, when biometric
technology is used the information is with him permanently so that it is therefore almost
impossible for it to be falsified (that is, for it to be used by someone else for impersonation
purposes). It is said that in the first two factors, the link between information and verification
is weak, which makes stealing identities easier, since the system cannot distinguish between
the legitimate possessor of the device or password and someone who has stolen it.
2. Biometric technology: biometric recognition means the automated methods that guarantee
the identification of an individual based on physical features or distinguishable behaviour.
Biometric technology includes the recognition of fingerprints, the face, vein patterns, the iris,
the voice and keystroke patterns.
3. Biometric system: this is a computerised recognition system, based on one or more patterns,
which extracts one of those patterns from an individual’s biometric data and compares the
sample with a previously created template. Depending on the application, this template can
be stored in a centralised database or in a separate device, such as a token or a smart card.
4. Public Key Infrastructure: also known as Digital Signature Infrastructure or PKI, this can be
defined as the combination of hardware, software, people, policies and procedures necessary
to create, administer, store, distribute and revoke public key certificates using asymmetric
cryptography, which facilitates the creation of a verifiable association between a public key
and the identity of the holder of the corresponding private key.
5. Digital Signature: also known as secure electronic signature, advanced electronic signature
or recognised electronic signature, the concept of the digital signature has at least two
meanings: one technological, linked to public key technology, and the other legal, reflecting
its definition in national laws as equivalent to a handwritten signature.
From a technological point of view, a digital signature is the means of authentication which,
supported by asymmetric cryptography (meaning the use of two keys, one public and one
private), enables the signer to be identified and the integrity of the contents of the signed
electronic document to be guaranteed.
From a legal point of view, laws include an administrative requirement. This means that
in order for a document to be considered legally completed with a digital signature, the
signature must have been applied using a digital certificate issued by a certificate authority
accredited by the relevant supervising State organisation.
6. Electronic Signature: this concept is applied to any sound, symbol or process attached to or
logically associated with an electronic document which expresses the giving of a person’s
consent in digital form, and is performed or adopted by that person for the purpose of
signing the electronic document. In general, laws give the name “electronic signature” to any
means of authentication that does not comply with one of the requirements necessary to
be a digital signature. “Electronic signature” is the generic, neutral term for referring to all
technology that a person can use to express his agreement with the content of a document.
Basis of agreement on mutual recognition
Finally, Chapter 3 of the Framework lays down a series of considerations relating to the
establishment of common criteria to allow for a future common means of social electronic
284