Introduction
From the CCDB-established Working Group, the Biometrics Security iTC (BIO-iTC for short) was formed. The BIO-iTC consists of members of Certification Bodies, labs, vendors and academia working together to create requirements for biometric security testing.
To join the BIO-iTC, please send a message to: px-isec-itc-bio-info@ipa.go.jp
Current Status
The BIO-iTC has published v2.0 of the PP-Module and Supporting Documents. This version is matched with the final release of Mobile Device Fundamentals PP v3.3, but is targeted to CC:2022. Updates will be made when a CC:2022-compliant version of that PP is released. This release has several updates based on feedback from lab review of the Supporting Document and PP-Configuration. The current Toolbox has not changed since publication in October 2024.
The Current Documents for Review section provides links to the documents under review.
The BIO-iTC has published a Proposed Draft v1.2 of the PP-Module and Supporting Document. This update incorporates changes being made to the PAD Toolboxes to support additional attack levels. The update is now undergoing another internal review to incorporate CC:2022 changes.
Current Documents
PP-Module and Supporting Documentation
- Latest Publication Date
-
February 28, 2025
The following are the currently published and usable documents.
The v1.1 series of the PP-Module and SD will sunset in line with the sunset of the PP_MDF_V3.3 by NIAP.
| Title | Version | Date | Links | Latest TD Version | Date | Links |
|---|---|---|---|---|---|---|
collaborative PP-Module for Biometric enrolment and verification - for unlocking the device - [BIOPP-Module] |
2.0 |
February 28, 2025 |
|
|||
PP-Configuration for Protection Profile for Mobile Device Fundamentals and collaborative PP-Module for Biometric enrolment and verification - for unlocking the device - [CFG-MDF-BIO] |
2.0 |
February 28, 2025 |
|
|||
Supporting Document Mandatory Technical Document: Evaluation Activities for collaborative PP-Module for Biometric enrolment and verification - for unlocking the device - [BIOSD] |
2.0 |
February 28, 2025 |
|
| Title | Version | Date | Links | Latest TD Version | Date | Links |
|---|---|---|---|---|---|---|
collaborative PP-Module for Biometric enrolment and verification - for unlocking the device - [BIOPP-Module] |
1.1 |
Sept 12, 2022 |
|
1.1.1 |
Nov 12, 2024 |
|
PP-Configuration for Protection Profile for Mobile Device Fundamentals and collaborative PP-Module for Biometric enrolment and verification - for unlocking the device - [CFG-MDF-BIO] |
1.1 |
Sept 12, 2022 |
|
|||
Supporting Document Mandatory Technical Document: Evaluation Activities for collaborative PP-Module for Biometric enrolment and verification - for unlocking the device - [BIOSD] |
1.1 |
Sept 12, 2022 |
|
1.1.1 |
Nov 21, 2022 |
|
| Title | Version | Date | Links | Latest TD Version | Date | Links |
|---|---|---|---|---|---|---|
Biometric PAD Toolbox Overview [Toolbox] |
1.2 |
Oct 15, 2024 |
|
| Title | Date | Link |
|---|---|---|
PP-Module V2.0 Release package |
February 28, 2025 |
|
Supporting Document V2.0 Release package |
February 28, 2025 (with v2.0 PP-Module) |
|
PP-Module V1.1.1 Release package |
Nov 12, 2024 |
|
Supporting Document V1.1.1 Release package |
Nov 12, 2024 (with current PP-Module) |
|
Toolbox Overview V1.2 Release package |
Oct 15, 2024 |
|
Presentation Attack Detection Toolboxes
To request access to any toolboxes supporting PAD above Level 1, submit a PAD L2+ Request.
| Title | Date | Link |
|---|---|---|
PAD-L1 Eye Toolbox V3 Release package |
Aug 18, 2022 |
|
PAD-L1 Face Toolbox V5 Release package |
Jan 21, 2025 |
|
PAD-L1 Fingerprint Toolbox V6 Release package |
Oct 1, 2024 |
|
PAD-L2 Fingerprint Toolbox V1 Release package |
Oct 15, 2024 |
|
PAD-L1 Vein Toolbox V3 Release package |
Aug 18, 2022 |
|
Continuous Multi-Factor Authentication (CMFA) Proposed Work
The BIO-iTC has created a proposed a new scope of work in authentication to create requirements for Continuous Multi-Factor Authentication (CMFA). CMFA uses multiple inputs to generate a trust score of the user over time. This score can be used for many purposes, such as maintaining the unlock state of the device, determining when some information should be made available, or to provide higher assurance based on the metadata of the decision to external systems.
This work is still in the proposal stage, but the ESR and Overview of the focus of a PP-Module can be found on the CMFA page.
Protection Profile Allowed List
The published v2.x PP-Module and v1.x PP-Module can be used with Protection Profiles and PP-Modules listed on the PP Allowed List.
Technical Decisions
Technical Decisions produced by the BIO-iTC can be found at the BIO-iTC Technical Decisions page.
Supporting Review Documents
The following are the documents are intended to support Public Reviews:
| Title | Link |
|---|---|
Comment Matrix |
|
Current Documents for Review
There are no current documents for review.
Public Review Archive
Previous public review updates (with links to the documents under review) can be found at the Public Release Archive.