How may a PC access control with “Template on Card” look like?
We consider the following implementation possibilities: The chip card is a pure memory card, storage is unencrypted During enrolment, a PC connected to a biometric sensor extracts the biometric features, and subsequently stores them as biometric reference on chip card. At verification, the access seeker inserts her chip card into the chip card reader and then her biometric characteristic is again scanned. The scanned biometric characteristic is then compared to the reference stored on the chip card at the PC. If the comparison exceeds a certain level of similarity, full clearance is granted to the network by sending the decrypted password (which is stored on the PC encrypted) from the PC to the server. The chip card is a pure memory card, storage is encrypted. See above. Additionally, however, decryption of the reference from the card is done on the PC or better yet on the server with a securely stored key. Alternatively, the comparison process should likewise occur on the server. Ther