BioSeal
Cryptographic Identity Sealed in a 2D Barcode.
BioSeal is a Visible Digital Seal (VDS) — an electronically signed, biometrically linked payload rendered as a QR code, DataMatrix, Aztec or high-density 2D barcode. Any smartphone verifies document authenticity, detects tampering, and confirms the holder's identity. No network required at verification time.
Explore BioSeal API
How BioSeal Works
From issuance to field verification — the same PKI chain of trust protects every BioSeal through its full lifecycle.
Verification is fully offline — the reader app validates the PKI signature using the issuer's public key without any server call. Works in the field with zero connectivity.
Key Features
Every BioSeal combines cryptographic integrity, biometric linkage, and open-standard interoperability in a single printable 2D code.
PKI Signature
Every BioSeal is signed with an ECDSA private key (P-256 / SHA-256 per VDS-TS0; P-384 and P-521 also supported). Verifiers check the signature against the issuer's public key — proof the data has not been altered.
Tamper Detection
Any modification to the encoded data breaks the cryptographic signature. The reader app immediately flags the seal as invalid — no manual cross-checking required.
Offline Verification
The reader app validates the signature locally using cached trust information (LoTL, TSL, certificates) previously downloaded from the trust network. No server connection needed — ideal for border posts, field agents, and low-connectivity areas.
Format-agnostic 2D Barcode
The signed VDS payload is independent from its rendering — BioSeal supports QR Code, DataMatrix, Aztec, plus high-density and image-embedded variants for industrial-grade printing. The same payload reads identically across all formats with standard smartphone cameras.
Flexible Payload
The manifest defines which fields are included, encrypted, and required. A single BioSeal can carry identity attributes, validity dates, biometric templates, and custom data.
Biometric Linkage
Embed a face photo, facial template, or fingerprint template in the seal. The reader compares the live biometric against the sealed reference — proving the holder is the rightful owner.
Standards & Trust Network
BioSeal is built on open international standards and operates within the Otentik Trust Network — ensuring cross-border interoperability and chain-of-trust governance.
ISO 22376:2023
Visible Digital Seal for Authentication
The international standard governing the cryptographic format, encoding rules, and verification protocol for Visible Digital Seals — covering both documents and products. BioSeal implements ISO 22376 natively — any compliant reader can verify any BioSeal.
- ECDSA signatures (P-256 / P-384 / P-521)
- Compact binary encoding (MessagePack)
- Certificate chain validation
ISO 22385:2023
Trust Framework & ESEDS Governance
Defines the international trust framework for Electronically Signed Encoded Data Sets (ESEDS), including governance roles (Scheme Operators, Trust Service Providers, Issuers, Relying Parties) and five Technical Specifications (TS1–TS5) ensuring cross-actor interoperability. BioSeal operates within this framework via the Otentik Trust Network.
- Trust framework & governance roles
- TS1–TS5 technical specifications
- Cross-border interoperability
Biometric Extension
Otentik VDS Extensions + ISO/IEC 39794
BioSeal leverages the Otentik VDS extension schema to embed biometric references directly in the sealed payload, using templates compliant with ISO/IEC 39794-5 (face) and ISO/IEC 39794-4 (fingerprint). The reader compares the live biometric against the sealed reference offline.
- Biometric template embedding (ISO/IEC 39794)
- Live offline comparison
- GDPR privacy-by-design
Otentik Trust Network
id3 is a registered VDS Service Provider (Issuance Service ID EU5)
Operated by Otentik T.S.O. (Scheme Operator, IAC VDS), accredited by the VDSIC — Visible Digital Seal International Council (also known as AIGCEV in French). The trust hierarchy is published as a List of Trusted Lists (LoTL) and individual Trust Service Lists (TSL). id3 Technologies was among the first VDS Issuers accredited by Otentik T.S.O.
- Scheme Operator: Otentik T.S.O. (IAC
VDS) - LoTL + TSL trust distribution
- Revocation & lifecycle management
Application Domains
BioSeal secures identity documents, credentials, and certificates across every sector that needs tamper-evident, offline-verifiable authentication.
Government & National ID
Secure citizen cards, residence permits, and public service documents with cryptographically signed, biometrically linked Visible Digital Seals.
Travel & Immigration
Passport auxiliary seals, visa stickers, and travel authorizations with offline verification for border agents with no connectivity.
Education & Credentials
Tamper-proof diplomas, certificates, and academic transcripts. Employers and institutions verify authenticity instantly without contacting the issuer.
Financial Services
Integrity protection for contracts, account-opening documents, and notarial acts. Detects document substitution and unauthorized modifications.
Healthcare
Vaccination certificates, medical prescriptions, and health records with patient biometric linkage — preventing credential sharing and fraud.
Product Authentication
Brand protection and supply chain integrity for luxury goods, pharmaceuticals, and regulated products — serialized BioSeals that cannot be reused or counterfeited.
Why id3 Technologies
VDSIC Founding Member
id3 is a founding member of the Visible Digital Seal International Council (VDSIC) and actively contributes to ISO 22376 / 22385. We don't just implement the standard — we helped write it.
Biometric Extension
BioSeal goes beyond document integrity — it links the sealed credential to its owner's face or fingerprint. One scan both verifies the document and authenticates the holder.
No Infrastructure at Scan
Verification requires zero server connectivity. Cached trust information (LoTL, TSL, certificates) is downloaded once — border agents, field inspectors, and airport staff all verify offline.
Full-Stack Solution
REST API for issuance, SDK for verification, mobile reader app, and PKI trust network — id3 provides every layer of the BioSeal ecosystem, not just the algorithm.
Real-World Deployments
BioSeal is in production across government and institutional programs on multiple continents.
France Cybersecurity Label
The Alliance pour la Confiance Numérique adopted BioSeal to secure France Cybersecurity certificates. Each certificate carries a signed Visible Digital Seal that can be verified by any compliant reader — preventing forgery and unauthorized duplication.
Senegal Student Card
BioSeal technology was deployed to secure student cards across Senegalese higher education institutions. Biometrically linked 2D barcodes prevent card sharing and unauthorized access to student services.
ONECI – Côte d'Ivoire
The Office National de l'État Civil et de l'Identification deployed BioSeal to secure civil identity documents in Côte d'Ivoire — enabling cryptographic verification of identity credentials across the country's civil registration network.
CNOEC – Chartered Accountants
The Conseil National de l'Ordre des Experts-Comptables uses BioSeal to secure professional membership cards. Each card carries a Visible Digital Seal enabling instant authentication of the holder's chartered accountant status.
Frequently Asked Questions
Key questions about BioSeal technology, implementation, and standards compliance.
01 What is the difference between BioSeal and a standard QR code?
BioSeal is a Visible Digital Seal (VDS) — a cryptographically signed binary payload, not a URL or text string. The 2D barcode (QR, DataMatrix, Aztec…) is just the rendering medium. Any modification of the data, however small, breaks the PKI signature and the seal is flagged as invalid. A BioSeal also optionally embeds a biometric reference, linking the document to a specific person — something a standard QR code cannot do.
02 Does verification require an internet connection?
No. The reader app validates the ECDSA signature locally using cached trust information (LoTL, TSL, certificates) previously downloaded from the trust network. Offline verification is one of BioSeal's core design principles — it works in remote border posts, field inspections, and any connectivity-constrained environment.
03 Which international standards does BioSeal comply with?
BioSeal implements ISO 22376:2023 (Visible Digital Seal for Authentication) and operates within the ISO 22385:2023 trust framework (ESEDS governance, TS1–TS5). It also aligns with ISO/IEC 15459-2 for Issuing Agency Codes (IAC) used in the VDS prefix, and ISO/IEC 39794 for biometric template formats. id3 Technologies is a founding member of the VDSIC — Visible Digital Seal International Council — and contributed to authoring these standards.
04 Can BioSeal encode biometric data without storing it on a server?
Yes. The biometric template is embedded directly in the seal — the document itself carries the reference. No central biometric database is needed at verification time. The architecture is privacy-by-design: biometric data lives on the physical credential and nowhere else, fully compatible with GDPR principles.
05 How do I integrate BioSeal into my issuance system?
The BioSeal API exposes REST endpoints for seal generation, verification, and HTML presentation. A single POST request to /api/bioseal/create (or /api/bioseal/create/biometric) returns a ready-to-print 2D barcode image. The API is language-agnostic — any stack that can make an HTTP call can issue BioSeals, typically in under 200 ms (depending on HSM latency and network conditions).
06 Which barcode formats are supported?
BioSeal supports the standard QR Code, DataMatrix and Aztec 2D barcode formats, plus high-density variants (BigSquare, BigRectangle) for industrial-grade printing and image-embedded variants (QR Code+, DataMatrix+) when a logo or visual marker is required. All standard formats are readable by smartphone cameras — no dedicated scanner needed.
Get started with our technologies.
Contact us to learn more about our biometric and security solutions and discover how it can transform your products and services. With id3 Technologies, step into a world where technology meets security, innovation, and reliability.
Contact us