scope:

The Standard for Biometric Privacy provides a biometric-agnostic security protocol for private authentication, identification, and liveness. The SBP implementation need not know whether the underlying system is a machine learning model, a relational database management system (RDBMS) or a search engine. The SBP implementation functionality offers a "point-and-cut" mechanism to add the appropriate security to the production systems as well as to the systems in development.

SBP additionally includes the biometric identification which the industry frequently calls the 'one to many' case. In the past, biometric identification was not considered because this requires a lookup against previously stored biometrics and this lookup required indexing and storing the biometric in plain text biometric identification. This specification includes biometric identification by using biometric features vectors as input to the enroll endpoint, biometric feature vectors as input to the predict endpoint and either video or audio as input to the liveness endpoint.

Purpose

This standard provides a biometric-agnostic security protocol for authentication, identification, and liveness.