Presentation of the Biometric Evaluation Procedure in Spain (D22b)
There are currently a large number of biometric solutions on the market, which are increasingly being applied in key sectors such as banking, public administration and insurance. In Spain, last year, it was published the first national law regulating remote video identification methods for the issuance of qualified electronic certificates. As a result of this law, CCN, the Spanish Certification Body, developed a supporting document (guide IT-014) to support the evaluation of facial biometric for both LINCE and Common Criteria methodologies. During the talk, it will be explained how the IT-014 guide is applied and the different types of presentation attacks it covers; impostor, using videos, using masks, using deepfake tools, etc. CCN will provide an overview of how such assessments have been conducted and the types of attacks that are most difficult for vendors to mitigate.