This document specifies the security framework for using biometrics for authentication of customers in financial services, focusing exclusively on retail payments. It introduces the most common types of biometric technologies and addresses issues concerning their application. This document also describes representative architectures for the implementation of biometric authentication and associated minimum control objectives.


The following are within the scope of this document:


—     use of biometrics for the purpose of:


—     verification of a claimed identity;


—     identification of an individual;


—     biometr...