Descarga archivo PDF (20MB) - Biometría

Adoption of a
common glossary
514
7 For the purpose of social electronic identification, of the inhabitants
of the Ibero American Community, the Ibero American
States will understand by:
a. Authentication factors: are those elements that integrate the
identification process.
Authentication factors currently used are three, and are based
on:
• Something that I know: l the individual is authenticated
by means of something that he or she knows: a key, an
identification number– PIN, a phrase or an answer to a
security question.
• Something that I have: the person is authenticated using
something that he or she has: a token, a smart card, a digital
certificate.
• Something that I am: the individual is authenticated based
on an own characteristic, i.e., biometric data
The factors based on knowledge and possession require that
the person who is to be authenticated before a system remember
or carry the device. Instead, when biometric technologies
are applied, the data is carried by that person him/herself, and
it is almost impossible to be tampered with, or in any other
way altered for impersonation purposes. It is said that in the
first two factors the connection between data and their verification
is weak, what facilitates impersonation, as the system
cannot distinguis h between the actual possessor of the device
and someone who has stolen it; the same applies to the key.
b. Biometric technologies: Biometric recognition is understood
as the automated methods that ensure individuals recognition
based on distinguishable physical or behavioural traits. Technologies
used in biometrics include recognition of fingerprints,
face, veins patterns, iris, voice and typing rhythm, among other.
c. Biometric System: It is an IT recognition system based on one
or various patterns that operates requiring biometric data to
an individual, collecting a pattern of the data acquired and
comparing the example against a previously registered template.
Depending on the application, this template can be
stored in a centralized database or in an individual device as
a token or smart card.
d. Public Key Infrastructures: (also known as Digital Signature
Infrastructures or PKI). They can be defined as the set of hardware,
software, persons, policies and procedures necessary to
create, manage, store, distribute and revoke public key certificates
based on asymmetric cryptography, that facilitate the
creation of a verifiable association between a public key and
the identity of the possessor of the corresponding private key.