Security and resilience — Authenticity, integrity and trust for products and documents — Validation procedures for the application of artefact metrics

This document specifies a process to qualify the suitability, reliability and effectiveness of artefact metrics as well as artefact metric recognition principles for identification and verification.

The artefact metric recognition described in this document can be used to identify or verify artefacts using one or more measurements of their characteristics, each of which is unique to an individual artefact and is supposedly impossible to reproduce.

This document is applicable to artefact metrics throughout the life cycle processes of products.

Measurement of the resilience of the system where the distinguishing characteristic is degraded is out of the scope of this document.

This document is applicable to performance testing of artefact metric systems and algorithms through analysis of the comparison scores and decisions output by the system, without requiring detailed knowledge of the system’s algorithms or of the underlying distribution of characteristics in the objects of interest.

This document excludes performance testing where deliberate attacks undermine the artefact metric system.