ISO 27566-3 Revision Checker
ISO/IEC DIS 27566-3stage 40.20ballot closes 4 December 2026planning date 14 September 2027

All 37 framework clauses · 5 Attribute

5

The age assurance attribute

The framework counts age in years as a real number since birth. A relying party can ask for an actual age, an over-age, an under-age or a range. The first three are single values; a range is a pair. An under-age and a range have time-limited validity.

Framework ISO/IEC 27566-1:2025Clause 5Status published

What the clause says

The framework counts age in years as a real number since birth. A relying party can ask for an actual age, an over-age, an under-age or a range. The first three are single values; a range is a pair. An under-age and a range have time-limited validity.

What it supplies to a comparison

The attribute form decides the metric. A binary over-age is scored with true and false positives; a continuous age is scored with an error distribution; a range needs a rule for the boundaries.

Evidence to keep

  • The attribute form requested by the relying party, written as a rule.
  • The validity period and the refresh rule for a time-limited attribute.

What the evidence looks like

For 5, the first artefact is The attribute form requested by the relying party, written as a rule.. The second is The validity period and the refresh rule for a time-limited attribute.. If 5 has no first artefact, the practice is unproven at 5, and the report should record the absence rather than infer the practice from a policy.

Questions for the provider

  1. Which of the four forms does the decision need?
  2. How does the system handle the expiry of an under-age or range attribute?

How it connects to the draft

The age assurance attribute belongs to 5 attribute, and it gives the analysis one fixed point: The attribute form decides the metric. A binary over-age is scored with true and false positives; a continuous age is scored with an error distributio. A comparison that cannot place a result against 5 is measuring something the framework has not defined, and the report should say so.

In the register, 5 is read beside the unit that tests it, and where it sets an objective rather than a number, that unit turns the objective into a question and an evidence artefact.

Source for this page

Sources: ISO/IEC 27566-1:2025 official record. The published framework record, free from ISO. ISO/IEC JTC 1/SC 27/WG 5 N3927, AWI 27566-1 working draft WD2.0. Public working draft WD2.0 of the framework, at the ETSI document box. Retrieved 2026-10-21. 5 is our statement of the working draft; the published edition is authoritative.