SenseCrypt eID
Foundational eID functionality
In this section, we detail four main methods of creating/verifying foundational eID:
-
Generating an eID QR code - this generates a QR code containing a raw SensePrint.
-
Generating a raw SensePrint - this generates the raw bytes contained in an eID QR code. These bytes can then be stored on alternative media such as an NFC card or in a database.
-
Decrypting a raw SensePrint - this decrypts the metadata contained in a raw SensePrint using the eID holder's face.
-
Parsing a SensePrint - In addition to metadata encrypted with the eID holder's face, a SensePrint can also contain metadata that can be read without the user's face. This data is still stored encrypted within a SensePrint but since it is not encrypted using the user's face, we call it
cleartext_data. Parsing a SensePrint also reveals information whether a Liveness check is required to decrypt it and whether an additional password is required to decrypt it. -
Refreshing a SensePrint Face - Re-issues an existing SensePrint as a freshly-keyed V4 SensePrint verified against the same person's face. The previous SensePrint can be any version (V1/V2/V3/V4) — the endpoint verifies the supplied face matches it and outputs a new V4 SensePrint carrying all the same metadata, cleartext_data, extra_binary_data, and tolerance settings.
Use this to migrate older SensePrints to V4, or to re-key an existing SensePrint without re-enrolling from scratch.
-
Verifying a group - Performs N:N face search and verification against a group image. Detects all faces in the provided image and attempts to match each detected face against every SensePrint in the supplied list, decrypting the metadata for any matches found.