# Introduction



As middleware that works between biometric authentication engines, mobile devices and web browser applications the BiometrID API is a service that allows, accordingly to each client specifications, the creation of different biometric registries to a single user that will further allow his identification, recognition and ID card validation.&#x20;

### Security <a href="#biometridapifunctionalities-security" id="biometridapifunctionalities-security"></a>

Biometrid works behind a security layer, wherein each request is necessary the presence of authentication headers provided after the client’s creation on the system, being those headers unique for each client. The service won’t allow any access to the service with wrong or missing headers.

### **Identity Link**

For security concerns Biometrid only stores (and make it available to the client) two fields. _Biometric\_ID_ that is automatically generated by us upon registration, and _Subject\_ID_ that is a unique field and it’s a reference of the client’s user platform. The client’s platform can access our RESTful API with the _Biometric\_ID_ or _Subject\_ID_ identification as a starting point for the authentication process.

### **Provider's Biometric Engines**

The biometric engines would act as the primary system to enroll and verify a customer's identity through facial recognition and voice. It enables to perform functions such as matching, enrolling, deduplication and quality checks.\
Also, it provides security mechanisms when storing the data into the biometric database as part of the enrolment process such as templates.
