Biometrics

Biometric recognition converts physical characteristics into a unique digital signature that can be used to quickly and securely locate your child’s cashless catering account. This helps speed up service and eliminates the requirement to carry cash or an alternative method of access, such as having to remember a PIN code.

When the child places their finger on the scanner, the software reads key features (unique patterns on a fingerprint) and compares this against the database of registered users. When it finds a match it automatically opens their cashless catering account allowing the operator to complete the sale of their school meals.

No, the software turns your child’s physical characteristics into an encrypted (using AES 256) string of characters known as a template (no fingerprint image is ever stored). Even if someone were to be able to gain access to the data and break the encryption, this template does not contain enough information to reverse engineer into a usable fingerprint.

When a student leaves school all data will be deleted from our system.

Yes, an alternative method of authentication will be available. For example, students can continue to use the PIN code method is preferred.

If you initially opt-in for your child to use biometric recognition but later change your mind, contact the school and we will remove the permission from the system which will automatically remove any biometric data associated with your child and provide your child with an alternative method of authentication.

The individual templates are encrypted using a 256 bit AES key that is built into the scanners hardware. Also the persisted file is encrypted using a different 256 bit AES key built into the matching algorithm supplied by Biostore and generated by a unique license purchased for each site. This is more secure than the ANSII and ISO standards that government department’s use as the Biostore Template is encrypted and the ANSII and ISO standards are not. The template data is useless and cannot be interpreted back into a usable fingerprint image. If this was not the case then there would be no world standards and performance measures for such technologies. The data is stored in an array in the RAM of the Biometric Controller and is also permanently stored on the hard drive of the Bio Controller to be restored in the event of a reboot. Below is an example of a template code for an individual thumb:

0X417741414142514141414445415141414151415341414D415A4141414141414174774541414C71 4777346C5869656D6C574945494A764A6B42466D6837616C4E764D704F517874517A706A4A395 A31784935686C4177395366726E777645576357386C4573314B426F47443166694170675559704C 763168423642682A7043

The solution is secure because the matching can only be done by the individual’s consent as the thumb has to be presented to the device for matching. We do not hold images of fingerprints in our system.
The technology provided for this method of identification meets with BECTA guidelines and also allows students the option to opt out of the scheme and use a Card instead. Furthermore, under the data protection act and GDPR, the school cannot allow access to this data by anyone for any other means than for the purpose the data was collected and that is to identify an individual within the solution we supply.
Any biometric data that belongs to an individual that leaves the school is purged which also is in line with the BECTA guidelines.