Descarga archivo PDF (20MB) - Biometría

easons, it is possible to assert that the evolution of law has exceeded the initial vision tending
to accept only digital signatures. (UNCITRAL; 2007)
In this sense, the legal scenario is sufficiently wide as to validate any electronic authentication
method that is agreed upon between the parties or which procedures has any type of
procedural framework. Therefore, symmetric keys, biometrics technologies, digital signatures
issued by not licensed certification authorities are accepted, all them with the same legal value
as an electronic signature susceptible to satisfy the legal requirement of a “signature” as an
expression of the individual’s consent.
b.-Authentication factors
The Social e-ID Framework contains a glossary of terms that are the starting point for
establishing agreements among our countries.
It defines the authentication factors as those “elements that comprise the identification
process”, namely:
• Something that I know: the individual is authenticated by means of something that he or she
knows: a key, an identification number– PIN, a phrase or an answer to a security question.
• Something that I have: the person is authenticated using something that he or she has: a
token, a smart card, a digital certificate.
• Something that I am: the individual is authenticated based on an own characteristic, i.e.,
biometric data.
The glossary also defines the biometrics technology, concept as those “methods that ensure
individuals recognition based on distinguishable physical or behavioural traits. Technologies
used in biometrics include recognition of fingerprints, face, veins patterns, iris, voice and typing
rhythm, among others.” (MARCO; 2011)
As regards biometrics systems, the Social e-ID Framework, defines them as “a computerized
recognition system based on one or various patterns that operates requiring biometric data
to an individual, collecting a pattern of the data acquired and comparing the sample against a
previously registered template. Depending on the application, this template can be stored in a
centralized database or in an individual device as a token or smart card.” (MARCO; 2011)
Following these definitions the Social e-ID Framework defines the Public Key Infrastructures,
also known as Digital Signature Infrastructures or PKI. They can be defined as “the set of
hardware, software, persons, policies and procedures necessary to create, manage, store,
distribute and revoke public key certificates based on asymmetric cryptography, that facilitate
the creation of a verifiable association between a public key and the identity of the possessor of
the corresponding private key.” (MARCO; 2011)
It follows making reference to digital signature, also called safe electronic signature, advanced
electronic signature or acknowledged electronic signature. The Social e-ID Framework
recognizes two aspects for a digital signature: the technological and the legal ones. The
technological meaning is related to public key technologies. The legal one is related to the
490