BioSeal

Cryptographic Identity Sealed in a 2D Barcode.

BioSeal is a Visible Digital Seal (VDS) — an electronically signed, biometrically linked payload rendered as a QR code, DataMatrix, Aztec or high-density 2D barcode. Any smartphone verifies document authenticity, detects tampering, and confirms the holder's identity. No network required at verification time.

Explore BioSeal API
id3 BioSeal Issuance Console Issuance #ISS-9217
FileIssuanceManifestToolsHelp
Use case definition — Manifest DRAFT
NameFRA Health Certificate
Issuing authorityMinistry of Health — France
Manifest IDMFST-HC-V12 IACVDS CINOT6
Signing curveECDSA P-256 · SHA-256
Field schema
last_name string required
first_name string required
date_of_birth date required
document_id string required
vaccine_code string required
vaccination_date date required
face_template binary optional
Payload preparation — MessagePack 0 / 6
Subject data
last_name : MARTIN
first_name : Claire
date_of_birth : 1992-03-14
document_id : CSS-2026-184219
vaccine_code : COV19-MRN1273
vaccination_date : 2026-04-12
Biometric reference
ISO/IEC 39794-5 face template Size: 448 bytes
MessagePack encoding
86
a9 6c 61 73 74 5f 6e 61 6d 65 a6 4d 41 52 54 49 4e
aa 66 69 72 73 74 5f 6e 61 6d 65 a6 43 6c 61 69 72 65
ad 64 61 74 65 5f 6f 66 5f 62 69 72 74 68 aa 31 39 39 32 2d 30 33 2d 31 34
ab 64 6f 63 75 6d 65 6e 74 5f 69 64 af 43 53 53 2d 32 30 32 36 2d 31 38 34 32 31 39
ac 76 61 63 63 69 6e 65 5f 63 6f 64 65 ad 43 4f 56 31 39 2d 4d 52 4e 31 32 37 33
b0 76 61 63 63 69 6e 61 74 69 6f 6e 5f 64 61 74 65 aa 32 30 32 36 2d 30 34 2d 31 32
ad 66 61 63 65 5f 74 65 6d 70 6c 61 74 65 c5 01 c0 …
Encoded payload 0 bytes
VDS generation — ECDSA signing SIGNING…
PREFIX
VDS · OT6
9 B
HEADER
DE 23 56 44 53 04 8A 21 6E F3 …
18 B
PAYLOAD
86 A9 6C 61 73 74 5F 6E 61 6D …
619 B
SIGNATURE
— · — · — · —
64 B
SHA-256(payload) → payload_hash
SHA-256(header || payload_hash) → digest
ECDSA_P256_sign(digest, priv_key) → (r,s)
VDS = PREFIX || HEADER || PAYLOAD || SIGNATURE
Signing certificate: CN=Health-Sign-2026-04, O=Min.Santé FRA VDS size: 710 B
2D barcode encoding — QR Code ENCODING…
FormatQR Code · ISO/IEC 18004
Modules33 × 33
Error correctionM (15%)
Capacity used
0 / 1273 bytes
Application on document ISSUED
Issuing authority
HEALTH CERTIFICATE
Vaccination record
HolderMARTIN, Claire
Date of birthMarch 14, 1992
Document N°CSS-2026-184219
IssuedMay 28, 2026
Valid untilMay 28, 2029
Authorized signature
BioSeal · ISO 22376
Offline scannable by any conformant reader
Ready Issuer: FRA Health Min. CA online --:--:--

How BioSeal Works

From issuance to field verification — the same PKI chain of trust protects every BioSeal through its full lifecycle.

Define
Use-case manifest
Capture
Data + biometrics
Encode
2D barcode payload
Sign
PKI private key
Issue
Print / embed
Verify
Scan + authenticate

Verification is fully offline — the reader app validates the PKI signature using the issuer's public key without any server call. Works in the field with zero connectivity.

Key Features

Every BioSeal combines cryptographic integrity, biometric linkage, and open-standard interoperability in a single printable 2D code.

PKI Signature

Every BioSeal is signed with an ECDSA private key (P-256 / SHA-256 per VDS-TS0; P-384 and P-521 also supported). Verifiers check the signature against the issuer's public key — proof the data has not been altered.

Tamper Detection

Any modification to the encoded data breaks the cryptographic signature. The reader app immediately flags the seal as invalid — no manual cross-checking required.

Offline Verification

The reader app validates the signature locally using cached trust information (LoTL, TSL, certificates) previously downloaded from the trust network. No server connection needed — ideal for border posts, field agents, and low-connectivity areas.

Format-agnostic 2D Barcode

The signed VDS payload is independent from its rendering — BioSeal supports QR Code, DataMatrix, Aztec, plus high-density and image-embedded variants for industrial-grade printing. The same payload reads identically across all formats with standard smartphone cameras.

Flexible Payload

The manifest defines which fields are included, encrypted, and required. A single BioSeal can carry identity attributes, validity dates, biometric templates, and custom data.

Biometric Linkage

Embed a face photo, facial template, or fingerprint template in the seal. The reader compares the live biometric against the sealed reference — proving the holder is the rightful owner.

Standards & Trust Network

BioSeal is built on open international standards and operates within the Otentik Trust Network — ensuring cross-border interoperability and chain-of-trust governance.

ISO 22385:2023

Trust Framework & ESEDS Governance

Defines the international trust framework for Electronically Signed Encoded Data Sets (ESEDS), including governance roles (Scheme Operators, Trust Service Providers, Issuers, Relying Parties) and five Technical Specifications (TS1–TS5) ensuring cross-actor interoperability. BioSeal operates within this framework via the Otentik Trust Network.

  • Trust framework & governance roles
  • TS1–TS5 technical specifications
  • Cross-border interoperability

Biometric Extension

Otentik VDS Extensions + ISO/IEC 39794

BioSeal leverages the Otentik VDS extension schema to embed biometric references directly in the sealed payload, using templates compliant with ISO/IEC 39794-5 (face) and ISO/IEC 39794-4 (fingerprint). The reader compares the live biometric against the sealed reference offline.

  • Biometric template embedding (ISO/IEC 39794)
  • Live offline comparison
  • GDPR privacy-by-design

Otentik Trust Network

id3 is a registered VDS Service Provider (Issuance Service ID EU5)

Operated by Otentik T.S.O. (Scheme Operator, IAC VDS), accredited by the VDSIC — Visible Digital Seal International Council (also known as AIGCEV in French). The trust hierarchy is published as a List of Trusted Lists (LoTL) and individual Trust Service Lists (TSL). id3 Technologies was among the first VDS Issuers accredited by Otentik T.S.O.

  • Scheme Operator: Otentik T.S.O. (IAC VDS)
  • LoTL + TSL trust distribution
  • Revocation & lifecycle management
id3 Technologies is a founding member of the VDSIC — Visible Digital Seal International Council and actively contributes to the ISO working groups that govern these standards.

Application Domains

BioSeal secures identity documents, credentials, and certificates across every sector that needs tamper-evident, offline-verifiable authentication.

Government & National ID

Secure citizen cards, residence permits, and public service documents with cryptographically signed, biometrically linked Visible Digital Seals.

Travel & Immigration

Passport auxiliary seals, visa stickers, and travel authorizations with offline verification for border agents with no connectivity.

Education & Credentials

Tamper-proof diplomas, certificates, and academic transcripts. Employers and institutions verify authenticity instantly without contacting the issuer.

Financial Services

Integrity protection for contracts, account-opening documents, and notarial acts. Detects document substitution and unauthorized modifications.

Healthcare

Vaccination certificates, medical prescriptions, and health records with patient biometric linkage — preventing credential sharing and fraud.

Product Authentication

Brand protection and supply chain integrity for luxury goods, pharmaceuticals, and regulated products — serialized BioSeals that cannot be reused or counterfeited.

Why id3 Technologies

VDSIC Founding Member

id3 is a founding member of the Visible Digital Seal International Council (VDSIC) and actively contributes to ISO 22376 / 22385. We don't just implement the standard — we helped write it.

Biometric Extension

BioSeal goes beyond document integrity — it links the sealed credential to its owner's face or fingerprint. One scan both verifies the document and authenticates the holder.

No Infrastructure at Scan

Verification requires zero server connectivity. Cached trust information (LoTL, TSL, certificates) is downloaded once — border agents, field inspectors, and airport staff all verify offline.

Full-Stack Solution

REST API for issuance, SDK for verification, mobile reader app, and PKI trust network — id3 provides every layer of the BioSeal ecosystem, not just the algorithm.

Real-World Deployments

BioSeal is in production across government and institutional programs on multiple continents.

🇫🇷

France Cybersecurity Label

The Alliance pour la Confiance Numérique adopted BioSeal to secure France Cybersecurity certificates. Each certificate carries a signed Visible Digital Seal that can be verified by any compliant reader — preventing forgery and unauthorized duplication.

🇸🇳

Senegal Student Card

BioSeal technology was deployed to secure student cards across Senegalese higher education institutions. Biometrically linked 2D barcodes prevent card sharing and unauthorized access to student services.

🇨🇮

ONECI – Côte d'Ivoire

The Office National de l'État Civil et de l'Identification deployed BioSeal to secure civil identity documents in Côte d'Ivoire — enabling cryptographic verification of identity credentials across the country's civil registration network.

🇫🇷

CNOEC – Chartered Accountants

The Conseil National de l'Ordre des Experts-Comptables uses BioSeal to secure professional membership cards. Each card carries a Visible Digital Seal enabling instant authentication of the holder's chartered accountant status.

Discuss your use case →

Frequently Asked Questions

Key questions about BioSeal technology, implementation, and standards compliance.

01 What is the difference between BioSeal and a standard QR code?

BioSeal is a Visible Digital Seal (VDS) — a cryptographically signed binary payload, not a URL or text string. The 2D barcode (QR, DataMatrix, Aztec…) is just the rendering medium. Any modification of the data, however small, breaks the PKI signature and the seal is flagged as invalid. A BioSeal also optionally embeds a biometric reference, linking the document to a specific person — something a standard QR code cannot do.

02 Does verification require an internet connection?

No. The reader app validates the ECDSA signature locally using cached trust information (LoTL, TSL, certificates) previously downloaded from the trust network. Offline verification is one of BioSeal's core design principles — it works in remote border posts, field inspections, and any connectivity-constrained environment.

03 Which international standards does BioSeal comply with?

BioSeal implements ISO 22376:2023 (Visible Digital Seal for Authentication) and operates within the ISO 22385:2023 trust framework (ESEDS governance, TS1–TS5). It also aligns with ISO/IEC 15459-2 for Issuing Agency Codes (IAC) used in the VDS prefix, and ISO/IEC 39794 for biometric template formats. id3 Technologies is a founding member of the VDSIC — Visible Digital Seal International Council — and contributed to authoring these standards.

04 Can BioSeal encode biometric data without storing it on a server?

Yes. The biometric template is embedded directly in the seal — the document itself carries the reference. No central biometric database is needed at verification time. The architecture is privacy-by-design: biometric data lives on the physical credential and nowhere else, fully compatible with GDPR principles.

05 How do I integrate BioSeal into my issuance system?

The BioSeal API exposes REST endpoints for seal generation, verification, and HTML presentation. A single POST request to /api/bioseal/create (or /api/bioseal/create/biometric) returns a ready-to-print 2D barcode image. The API is language-agnostic — any stack that can make an HTTP call can issue BioSeals, typically in under 200 ms (depending on HSM latency and network conditions).

06 Which barcode formats are supported?

BioSeal supports the standard QR Code, DataMatrix and Aztec 2D barcode formats, plus high-density variants (BigSquare, BigRectangle) for industrial-grade printing and image-embedded variants (QR Code+, DataMatrix+) when a logo or visual marker is required. All standard formats are readable by smartphone cameras — no dedicated scanner needed.

Get started with our technologies.

Contact us to learn more about our biometric and security solutions and discover how it can transform your products and services. With id3 Technologies, step into a world where technology meets security, innovation, and reliability.

Contact us