New law on the Unified Biometric System

[sadiksojib35]

Federal Law 572 is called new, although it was adopted back in 2022, and in December 2023 its provisions came into force, which concern the procedure for collecting and processing biometrics. In particular, the law introduced a new concept - KBS, or commercial biometric system, which can process biometric data after passing a complex accreditation procedure.

The new rules are aimed primarily at the financial sector, that is, at banks that verify clients using biometric data.



What has changed with the adoption of the new law
Let's study the changes using the example of paying bosnia and herzegovina whatsapp phone number for metro travel using facial biometrics. Previously, all processes of collecting, processing and verifying the user's image, identifying it and making payments took place within the IT infrastructure of the transport operator/bank.

Now the terminal reads the user's biometric data and sends it in encrypted form to the accredited KBS. The KBS then compares the received data with its database of reference biometric vectors obtained from the Unified Biometric System, identifies the person and sends a response back to the system. It is the KBS that interacts with the banking IT environment to conduct the payment transaction.

Thus, the biometric data of citizens themselves do not leave the protected state system of the Unified Biometric System or the accredited KBS and are not transferred to third-party organizations. Only accredited KBSs that have undergone serious checks for compliance with high information security requirements have access to biometrics.



How to provide "biometric services" in the new environment
Let's look at three main ways of providing services based on biometric personal data after the adoption of Federal Law 572.

1. Transaction model - direct interaction with the Unified Biometric System of an organization that wants to implement biometric authentication, for example, to enter its territory, with payment for each fact of authentication. According to the law, entities of the nuclear industry, fuel and energy complex, and the military-industrial complex are required to work according to this model.

2. Obtaining accreditation of the CBS for the use of vectors in its processes. We, as part of the company "Innovative Technologies", part of Pridex, have undergone the accreditation process and are an accredited CBS. It is worth noting that the requirements for the CBS, initially formed on the basis of the financial sector, concern both the parameters of the legal entity and the technologies used, and are extremely high. In particular, the equity capital of the accredited legal entity must exceed 500 million rubles, and only Russian algorithms that have undergone thorough testing by specialists of the Center for Biometric Technologies (CBT) - the operator of the Unified Biometric System (UBS) must be used.