Biometric Smart Cards Overview
{# Answer-first lead — frontend-gold-standard §1.1. Expects `lead` (plain text, already resolved by apps.content.leads). Rendered directly under the h1 so the self-contained answer is the first prose a reader, a SERP snippet, or an AI extractor meets. No curated-data gate: the view always supplies either curated content_summary or a computed fallback. #}Overview of biometric smart cards: on-card fingerprint sensors, match-on-card architecture, and market adoption. It covers Biometric Smart Cards Overview, Component Architecture, Market Landscape (2024–2025), Matching Accuracy Metrics, and Power Considerations. The guide is part of the Biometric Cards series and about 4 minutes of reading.
Biometric Smart Cards Overview
A biometric smart card integrates a fingerprint sensor, a biometric processing unit, and a conventional smart card chip into the same card body. The defining feature is on-card matching (Match-on-Card, MoC): the fingerprint template is stored inside the secure element, the comparison algorithm runs entirely on the card, and only a pass/fail Boolean leaves the card — the biometric data itself is never transmitted.
This architecture eliminates the privacy risks associated with server-side biometric databases and enables strong two-factor authentication (something you have + something you are) without exposing the template to the reader or host system.
Component Architecture
┌──────────────────────────────────────────────────┐
│ Card Body (PVC, 0.8 mm) │
│ │
│ ┌──────────────┐ ┌───────────────────────────┐ │
│ │ Fingerprint │ │ Smart Card Chip │ │
│ │ Sensor │──►│ ┌─────────────────────┐ │ │
│ │ (capacitive │ │ │ Biometric MCU │ │ │
│ │ or optical) │ │ │ (template + match) │ │ │
│ └──────────────┘ │ └─────────────────────┘ │ │
│ │ ┌─────────────────────┐ │ │
│ ┌──────────────┐ │ │ Payment / PKI App │ │ │
│ │ Battery │ │ │ ([JavaCard]/[GP]) │ │ │
│ │ (optional) │ │ └─────────────────────┘ │ │
│ └──────────────┘ │ [EEPROM]: template store │ │
│ └───────────────────────────┘ │
│ Contactless antenna (ISO 14443) │
└──────────────────────────────────────────────────┘
Cards in the EMV biometric programme (Mastercard, Visa) add a fingerprint sensor in the lower-right corner and harvest RF energy from the payment terminal to power the sensor and matching chip — no battery required.
Market Landscape (2024–2025)
| Vendor | Card Platform | Sensor | Target Market |
|---|---|---|---|
| Fingerprint Cards (FPC) | FPC1300 | Capacitive area | Banking, access |
| IDEX Biometrics | IDEX TrustedBio | Capacitive area | Banking, government |
| Infineon | SLC38 + SECORA Pay Bio | Capacitive strip | EMV payment |
| Zwipe | Zwipe Pay ONE | Capacitive area | Banking |
| Thales | Gemalto Biometric Card | Capacitive area | Banking, enterprise |
| HID Global | Crescendo Bio | Capacitive area | Enterprise access |
Matching Accuracy Metrics
Biometric smart cards are evaluated using three primary accuracy metrics:
| Metric | Definition | Typical Target |
|---|---|---|
| FAR (False Accept Rate) | P(match | different finger) |
| FRR (False Reject Rate) | P(reject | correct finger) |
| FTE (Failure to Enrol) | P(enrolment fails) | < 1% |
| FTA (Failure to Acquire) | P(sensor cannot capture) | < 2% |
See Match-on-Card Technology for a deep dive into the on-card comparison algorithms and template formats.
Power Considerations
| Scenario | Power Source | Notes |
|---|---|---|
| Contactless payment | RF harvesting (ISO 14443) | ~6 mW available at 13.56 MHz |
| Contact (chip & PIN) | VCC contact pad (3V/5V) | Full power available |
| Battery-assisted | On-card thin battery | 5–7 year life; enables always-on |
| Dual-interface + battery | RF + battery hybrid | Sensor active before tap |
Battery-free operation requires the fingerprint capture and match to complete within the ISO 14443 activation window — typically 300–500 ms — placing tight constraints on sensor resolution and matching algorithm complexity.
Regulatory and Standards Landscape
| Standard | Scope |
|---|---|
| EMVCo Biometric Card Specification | Payment card biometric CVM |
| ISO/IEC 19794-2 | Minutiae-based fingerprint data format |
| ISO/IEC 19794-4 | Finger image data format |
| NIST SP 800-76 | Biometric specifications for PIV |
| ANSSI / BSI Protection Profile | Biometric match security requirements |
Use the EAL Comparator to compare biometric card security certifications, and Biometric Payment Cards for the EMV-specific implementation pathway.
(frontend-gold-standard §1.7): the answer text is in
the initial HTML and stays reachable with JavaScript disabled, so crawlers and
AI extractors read answer-shaped chunks without depending on Alpine. #}
Frequently Asked Questions
What is Match-on-Card?
Match-on-Card means the fingerprint template is stored inside the secure element and the comparison algorithm executes on the card itself, so only a pass or fail Boolean leaves the card. The biometric data is never transmitted to the reader or host, which removes the privacy exposure of a server-side template database.
What components does a biometric smart card contain?
A biometric card body, typically 0.8 mm PVC, holds a capacitive or optical fingerprint sensor, a biometric microcontroller that stores the template and runs the match, EEPROM for template storage, a payment or PKI application built on JavaCard and GlobalPlatform, an optional battery, and an ISO 14443 contactless antenna.
Which authentication factors does a biometric card combine?
The card provides two factors in one credential: possession of the card and the cardholder's fingerprint — something held plus something inherent — without exposing the template to the reader or host system.
Who are the smart card guides written for?
Our guides cover a range of experience levels. Getting Started guides introduce smart card fundamentals. Security guides address Common Criteria certification and key management. Programming guides target developers working with APDU commands, JavaCard applets, and GlobalPlatform card management.
Frequently Asked Questions
What is Match-on-Card?
Match-on-Card means the fingerprint template is stored inside the secure element and the comparison algorithm executes on the card itself, so only a pass or fail Boolean leaves the card. The biometric data is never transmitted to the reader or host, which removes the privacy exposure of a server-side template database.
What components does a biometric smart card contain?
A biometric card body, typically 0.8 mm PVC, holds a capacitive or optical fingerprint sensor, a biometric microcontroller that stores the template and runs the match, EEPROM for template storage, a payment or PKI application built on JavaCard and GlobalPlatform, an optional battery, and an ISO 14443 contactless antenna.
Which authentication factors does a biometric card combine?
The card provides two factors in one credential: possession of the card and the cardholder's fingerprint — something held plus something inherent — without exposing the template to the reader or host system.
Who are the smart card guides written for?
Our guides cover a range of experience levels. Getting Started guides introduce smart card fundamentals. Security guides address Common Criteria certification and key management. Programming guides target developers working with APDU commands, JavaCard applets, and GlobalPlatform card management.