BioSeal API

Secure Biometric QR Code Generation & Verification.

The BioSeal API is a key component of the versatile and secure BioSeal solution, designed for data protection, anti-forgery, and identity verification. Uses asymmetric cryptography and integrates with the Otentik Trust Network for tamper-proof digital seals.

View Documentation

POST /api/bioseal/create/biometric?use_case_id=FFFF&format=QrCode

Response · sealed QR

Signed · ISO 22376

Built-in Capabilities

BioSeal Generation

Generates BioSeals and outputs 2D barcodes including QR Code, DataMatrix, and Aztec codes for simplified document verification.

RESTful Interface

Provides a RESTful interface for seamless integration with various applications and platforms — no SDK installation required.

Decode and Verify

Decodes and verifies BioSeals or any VDS (Visible Digital Seal), ensuring authenticity and data integrity with signature validation.

HTML Presentation View

Generates HTML presentation views of BioSeal content for easier interpretation and validation by non-technical stakeholders.

Biometric Recognition

Includes user photos, facial templates, or fingerprint templates in BioSeal codes for identity verification against the sealed data.

Standards Compliance

Ensures compliance with international standards including ISO 22376, ISO 15459, and Visible Digital Seal specifications.

Endpoints & Performance

Fast cryptographic operations for real-time document issuance and verification in high-throughput production environments.

BioSeal Operations

Endpoint	Latency
POST /api/bioseal/create	< 200 ms
POST /api/bioseal/verify	< 100 ms
POST /api/bioseal/view	< 50 ms

Including biometric template embedding

Security

Feature	Standard
Digital Seal Format	ISO 22376 · AFNOR XP Z42-105
Trust Infrastructure	ISO 22385
Payload Encoding	MessagePack
Barcode Identifier	ISO 15459
Biometric Template	ISO 19794

Asymmetric cryptography — ECDSA P-256

Quick Start

Generate a signed BioSeal with biometric data in a single API call.

generate_bioseal.py

import requests, base64

BASE = "https://bioseal.id3.eu"

# 1. Exchange API key for a bearer token
token = requests.post(
    f"{BASE}/authenticate",
    json={"key": "YOUR_API_KEY"}
).json()["bearerToken"]

# 2. Create a biometric BioSeal — returns PNG bytes
with open("portrait.jpg", "rb") as f:
    img_b64 = base64.b64encode(f.read()).decode()

resp = requests.post(
    f"{BASE}/api/bioseal/create/biometric",
    headers={"Authorization": f"Bearer {token}", "Accept": "image/png"},
    params={"use_case_id": "FFFF", "format": "QrCode"},
    json={
        "payload": {
            "last_name": "Dupont",
            "first_name": "Jean",
            "portrait": "photo1"
        },
        "images": {"photo1": img_b64}
    })

open("bioseal.png", "wb").write(resp.content)
print(f"Transaction: {resp.headers['TransactionId']}")

Real-World Workflow

Issue a sealed credential and verify it offline — chain BioSeal API endpoints to build a complete issuance-to-verification trust flow.

Manifest selection

use_case · ISO 22376

→

Issue sealed QR

POST /api/bioseal/create

→

Print on document

paper · PDF · plastic

→

User scans QR

any VDS reader app

→

Verify signature

POST /api/bioseal/verify

→

✓

Trusted

authentic · data ok

Verification works fully offline — the QR carries everything needed (signature + cert reference). The verifier just needs the trust network's public keys cached locally.

How It Works

1. Use Case Creation

Expert groups define specific use cases with key data fields, field constraints, and security requirements translated into secure manifest files.

2. Code Generation

Select use case, capture biometric data, encode into secure format, digitally sign for authenticity, and affix to documents.

3. Code Verification

Acquire BioSeal code, decode and decrypt, validate digital signature, validate extended policies, and compare biometric data.

Application Domains

Wherever a paper or PDF document must carry tamper-proof, offline-verifiable proof of origin.

Diplomas & academic credentials

Universities and certifying bodies seal degrees, transcripts and professional certifications — instantly verifiable by any employer with a smartphone.

Civil status documents

Birth certificates, marriage records, identity attestations — administrations seal documents to prevent forgery and enable instant digital verification.

Healthcare documents

Prescriptions, vaccination records, health certificates — verifiable at border controls, pharmacies and care facilities, even offline.

Insurance & compliance

Insurance policies, compliance certificates and audit reports sealed with a BioSeal — instantly verifiable by regulators without contacting the issuer.

Customs & supply chain

Delivery notes, customs declarations and certificates of origin sealed at issuance — scannable at every step of the chain for instant, tamper-proof verification.

e-Government services

Tax notices, benefit attestations, driving licences and other public records issued with a verifiable digital seal — citizens prove authenticity in one scan.

Part of the id3 API ecosystem

Combine BioSeal with id3's other services to build a complete identity and document trust stack.

Licensing

Flexible licensing from evaluation to enterprise-scale digital seal issuance. All tiers include full access to every BioSeal API operation.

Evaluation

Free

Test and prototype your integration

Test environment only
500 seals / month
All operations included
Swagger documentation
Community support

Request Access