GB/T 37076-2018 in English

As the first national standard in the field of fingerprint recognition in my country, this standard has established a complete technical system framework including fingerprint acquisition equipment, processing algorithm, and comparison engine. It innovatively proposes a security classification mechanism, dividing system requirements into two levels: basic level and enhanced level.

1. System Architecture

The standard defines a six-module architecture: collection → processing → registration → identification → decision-making → management, requiring data to be transmitted between modules through secure channels. It is specifically stipulated that fingerprint collection equipment should have anti-counterfeiting capabilities, and the original image should not be restored after processing.

2. Core Performance Indicators

• Basic Level: FRR≤3% when FAR≤0.01%, identification capacity of 10,000 pieces
• Enhanced Level: FRR≤3% when FAR≤0.001%, identification capacity of 100,000 pieces

3. Key Points of Security Control

1. System selection recommendations

For high-risk scenarios such as finance and government affairs, it is recommended to select an enhanced system, with key focus on:

1. Support for revocable template technology
2. With multi-modal liveness detection capability
3. Audit logs have blockchain evidence storage function

2. Deployment considerations

• The light intensity of the collection environment should be maintained at 500-1000 lux
• The template update cycle is recommended to be no more than 3 years
• It needs to be implemented in conjunction with GB/T 35273 "Personal Information Security Specification"

This standard combines the GB17859 security level concept with biometric recognition technology for the first time. Its technical route is consistent with the international standard ISO/IEC 19794-4 remains compatible, but has more Chinese characteristics in the following aspects:

• Explicitly requires domestic certification of fingerprint collection equipment
• Strengthen the application of national encryption algorithms in the template distribution process
• Add special provisions for personal information protection