Demand has grown in recent years for token devices with biometrics used for personal verification. And, security system requires discussion regarding their operation as well as their functions. However, the discussion of security operation is behind discussion of security functions.
Therefore, we are developing "the security specification in consideration of functional and operational facets" (refer to it as "Security Profile") using ISO15408 and ISO17799 as basis, and hope that it's helpful when the system designer considers security requirements of his/her token based biometrics verification system.
In this presentation, we introduce the overview of the security profile, and propose the necessity of it.