FIDO User Verification & Biometric Integration 3

Question 1

FIDO specifications require that biometric templates be protected against extraction. Which attribute in authenticator metadata indicates the level of matcher protection?

Accepted Answer

matcherProtection

Answer

The matcherProtection field describes whether the biometric matcher runs in software, TEE, or on-chip secure hardware, indicating how well templates are shielded from extraction.

Question 2

An authenticator stores biometric templates inside a Trusted Execution Environment (TEE). What is the main security advantage over storing templates in the normal OS?

Accepted Answer

TEE isolates the template from the rich OS, preventing malware from reading it

Answer

A TEE provides hardware-enforced isolation so that malicious applications running in the normal OS cannot access or exfiltrate the biometric template.

Question 3

Under FIDO's approach to biometric privacy, which statement best describes how biometric data is treated across different relying parties?

Accepted Answer

Biometric data stays on the device and is never sent to any relying party

Answer

FIDO's architecture ensures biometric templates remain on the authenticator device; relying parties only receive cryptographic signatures, never biometric data.

Question 4

A FIDO-certified authenticator must meet specific Biometric Requirements (FIDOBiometrics). Which False Acceptance Rate (FAR) threshold is mandated for Level 1 certification?

Accepted Answer

Equal to or less than 1 in 10,000 (0.01%)

Answer

FIDO Biometric Requirements for Level 1 specify a FAR threshold of no more than 1 in 10,000, balancing security with usability.

Question 5

What does the term 'template aging' refer to in biometric authentication systems?

Accepted Answer

Gradual decline in matching accuracy as a user's biometric characteristics change over time

Answer

Template aging occurs when natural changes in a user's physiology (e.g., skin condition, facial changes) cause the stored template to diverge from live samples, increasing FRR over time.

(FIDO) FIDO Certified Authenticator Practice Test

(FIDO) FIDO Certified Authenticator Practice Test

FIDO User Verification & Biometric Integration 3