---
title: Bona-Fide Presentation Classification Error Rate
url: https://www.emergentmind.com/topics/bona-fide-presentation-classification-error-rate-bpcer
type: topic
---

# Bona-Fide Presentation Classification Error Rate

The Bona-Fide Presentation Classification Error Rate (BPCER) is an error metric established by ISO/IEC 30107-3 and widely used in biometric presentation attack detection (PAD) systems. BPCER quantifies the proportion of genuine (bona-fide) user attempts that are incorrectly classified as attacks—i.e., the system's false-rejection rate on legitimate presentations. BPCER, in conjunction with the Attack Presentation Classification Error Rate (APCER), forms the foundational means for empirically characterizing a PAD system’s trade-off between usability for legitimate users and security against spoof or attack presentations.

## 1. Formal Definition and Mathematical Expression

BPCER is defined as the fraction of bona-fide presentations misclassified as attacks by a PAD system at a specified decision threshold. Let $N_{\mathrm{BF}}$ be the total number of bona-fide presentations, and $N_{\mathrm{BF} \to \mathrm{Attack}}$ the number of those presentations labeled as attacks (i.e., false rejects). The canonical formula is:
\[
\mathrm{BPCER} = \frac{N_{\mathrm{BF} \to \mathrm{Attack}}}{N_{\mathrm{BF}}} \times 100\%
\]
This definition appears verbatim across multiple works, including deep learning-based systems for hand [1809.04364], fingerprint [2310.15044], finger-vein [1912.01408], and fingerphoto PAD [2409.18636], as well as iris and document PAD [2101.01404, 2603.17859]. In implementations based on thresholded detector scores, let $\mathrm{score}(x)$ denote the PAD output for presentation $x$ and $\tau$ the decision boundary. Presentations with $\mathrm{score}(x) < \tau$ are classified as attacks, and the formula operationalizes as:
\[
\mathrm{BPCER}(\tau) = \frac{|\{x \in \mathcal{X}_{\mathrm{BF}} : \mathrm{score}(x) < \tau\}|}{|\mathcal{X}_{\mathrm{BF}}|} \times 100\%
\]
where $\mathcal{X}_{\mathrm{BF}}$ is the bona-fide evaluation set.

## 2. Relationship to APCER, EER, and DET/ROC Curves

BPCER is paired with APCER, the fraction of attack presentations misclassified as bona-fide:
\[
\mathrm{APCER} = \frac{N_{\mathrm{Attack} \to \mathrm{BF}}}{N_{\mathrm{Attack}}} \times 100\%
\]
The operating trade-off between BPCER and APCER is controlled by the decision threshold $\tau$. Varying $\tau$ traces out the Detection Error Tradeoff (DET) or ROC curves, enabling the visualization of trade-offs between security (minimizing APCER) and usability (minimizing BPCER). The Equal Error Rate (EER) is given by $\tau^*$ such that $\mathrm{APCER}(\tau^*) = \mathrm{BPCER}(\tau^*)$ [2101.01404, 1912.01408]. DET and ROC curves are standard in both biometric and document PAD, and fixed operating points are typically reported as “APCER at BPCER = x%” or conversely [2603.17859]. This convention is mandated by ISO/IEC 30107-3.

## 3. Experimental Protocols and Threshold Selection

The standard PAD evaluation protocol involves splitting data into bona-fide and attack sets, computing PAD scores, and choosing a threshold $\tau$ to set BPCER (or APCER) at a predetermined policy level. For example:
- Choose $\tau$ on the (training or validation) bona-fide set such that exactly $p\%$ of bona-fide samples fall below $\tau$ (i.e., BPCER = $p\%$).
- Apply $\tau$ to the attack test set; APCER at this $\tau$ quantifies system vulnerability under the same user convenience constraint.
- Reporting is thus summarized as “APCER @ BPCER = x%,” e.g., APCER @ BPCER = 1% [2603.17859].

This framework is implemented for leave-one-attack-type-out open-set protocols (iris PAD) [2603.17859], document PAD under unseen printing/imaging devices [2101.01404], diffusion-model-based fingerphoto PAD [2409.18636], and contactless fingerprint [2310.15044]. In some studies, the threshold is directly the softmax class boundary (e.g., hand PAD [1809.04364]).

## 4. Role in PAD System Performance and Impact

BPCER is interpreted as the empirical false-reject rate for genuine users, with low BPCER being crucial for user acceptance, minimizing inconvenience or lockout of legitimate users. In deployments, one generally sets a policy upper bound on tolerable BPCER (e.g., 1%, 5%, 10%) and seeks to minimize APCER at this operating point. The balanced summary is sometimes reflected by the Average Classification Error Rate (ACER):
\[
\mathrm{ACER} = \frac{\mathrm{APCER} + \mathrm{BPCER}}{2}
\]
However, ACER is only meaningful with known constituent rates; reporting BPCER (and APCER) separately is standard [2310.15044].

Empirically, the literature reports BPCER values spanning from 0.12% [2310.15044] to 12.89% [2409.18636]. Zero BPCER is occasionally achieved, notably when thermal cues perfectly distinguish genuine from spoof presentations [1809.04364, 1912.01408]. Nonzero BPCER is a persistent challenge in systems encountering domain shift, limited spoof diversity, or unseen acquisition conditions [2409.18636, 2101.01404].

## 5. Comparative Results and Trade-off Insights

The following table summarizes representative BPCER values as reported across different PAD domains and datasets:

| Domain               | BPCER (minimum–maximum) | Condition/Note                                                    |
|----------------------|-------------------------|-------------------------------------------------------------------|
| Iris (VISER, [2603.17859])       | 1% (fixed)                | Saliency-guided, open-set, APCER @ 1% BPCER                        |
| Fingerphoto (DDPM, [2409.18636]) | 0–12.89% (intra); up to 96% (cross) | DDPM model on diverse PAIs; cross-domain BPCER elevates sharply    |
| Hand (thermal, [1809.04364])     | 0%                        | Thermal as PAD cue, open-set                                      |
| Fingerprint ([2310.15044])        | 0.12%                     | Contactless scenario, unseen attacks                              |
| Finger-vein ([1912.01408])        | 0–5%                      | SVM score fusion, EER/fixed APCER points; BPCER = 0% in optimal cases |

Results show that BPCER is highly sensitive to sensor modality, feature design, environmental mismatch, and domain generalization complexity. For instance, VISER’s saliency-driven eye-tracking models reduce APCER by over 10 percentage points at a fixed BPCER of 1%, but domain shifts in fingerphoto PAD cause BPCER to exceed 80% [2409.18636].

## 6. Regulatory and Reporting Standards

ISO/IEC 30107-3 prescribes explicit reporting of BPCER at fixed APCER or vice versa. This practice is ubiquitous in the biometrics PAD literature [2101.01404, 2603.17859, 2409.18636]. Fixed-BPCER reporting not only standardizes cross-comparisons of PAD solutions but aligns with deployment needs for limiting false rejections, particularly in high-security or user-facing environments.

Industry guidance further justifies this protocol, as it quantifies the practical impact of PAD thresholding policies on both system robustness and genuine-user experience. Reporting BPCER (and APCER) at multiple fixed points (e.g., 0.1%, 1%, 5%, 10%) across diverse datasets is recognized as the de-facto characterization of biometric PAD systems.

## 7. Practical Considerations and Open Challenges

BPCER is influenced by the diversity of bona-fide training data, variation in acquisition conditions, PAD score calibration, and attack vector novelty. Systems that generalize poorly may exhibit large increases in BPCER under unseen test environments or sensor types [2409.18636]. Conversely, architectures leveraging robust features (e.g., thermal, 3D shape, eye-tracking saliency) are capable of achieving BPCER approaching zero on well-matched data [1809.04364, 1912.01408, 2603.17859].

A persistent challenge is maintaining a low BPCER in conjunction with a low APCER across operationally realistic, open-set scenarios and heterogeneous data conditions. A plausible implication is that effective PAD system deployment requires training with diverse bona-fide samples and careful selection of operating thresholds to ensure both security (low APCER) and usability (low BPCER).

---

For comprehensive benchmarking and comparison, BPCER must always be reported alongside APCER (and optionally ACER), at standardized, policy-relevant operating points, and under explicit cross-validation or domain-generalization protocols [2101.01404, 2603.17859, 2409.18636, 2310.15044, 1912.01408, 1809.04364].

Source: https://www.emergentmind.com/topics/bona-fide-presentation-classification-error-rate-bpcer