Template Protection
Helping manage risk in biometric data storage through assessing protection mechanisms.
BixeLab provides independent testing and evaluation of mechanisms for template protection, to ensure that safeguards for biometric data can be trusted.
Our services assess a range of characteristics of template protection systems, to ensure that privacy standards are adhered to, and sensitive biometric data cannot be misused.
What Is Biometric Template Protection?
Biometric Templates are the data that describes human biometric characteristics in a format useful to the biometric system in question. In many biometric systems, a template is created when a user is first introduced to the biometric system, sometimes in an ‘enrolment’ process. This template is stored in a location suitable for the activities of the biometric system – for mobile phone biometric comparison, this might be in a secure enclave on the device; for a centralised comparison system, in a database accessible to the servers used.
Because these templates contain sensitive data, mechanisms exist to protect them from misuse. Desirable properties include irreversibility – the idea that it should not be possible to re-create the original biometric information from a template. If templates for a particular system are irreversible, then an attacker in possession of a user template for a face biometric system cannot recreate that user’s face from the template. Other protections also exist – for instance aiming to prevent linkability and ensure template diversity.
Benefits of Testing for Template Protection
Privacy Protections
Ensure systems achieve desired data privacy through protections surrounding sensitive information.
Regulatory Assurance
Meet technical standards for resistance to data loss in key use scenarios.
Maintain Public Confidence
Deliver public services with independent assurance that identity data is being securely managed.
What Can Be Tested for Template Protection?
All biometric modes
ISO/IEC 30106-aligned evaluations
Protection attributes including unlinkability, template diversity and irreversibility
Interaction with demographic characteristics – sometimes, these may intersect with protection objectives
Our Capabilities
BixeLab offers trusted expertise in real-world testing and assurance.
-
Environmental and field testing of biometric systems
-
Testing of biometric data storage characteristics such as template protection mechanisms
-
Spoofing resistance and liveness validation / Presentation Attack Detection
-
Injection Attack Detection
-
Risk assessment for mission-critical systems
Why Choose BixeLab?
Q: Can you test template protection for any biometric modality?
Yes. We conduct laboratory testing for template protections aligned with ISO 30106 for any modality.
Q: Can you test performance at the same time?
Of course. Getting an overall picture of all aspects including protection mechanisms and performance can significantly improve decision-making, especially in procurement processes.
Q: What types of clients use this service?
Technology providers, holders of sensitive population biometric data, operators of critical security infrastructure, and system integrators rely on our assurance services.