xPrint: Biometric Template Protection

The Problem

Biometric templates stored in single databases are permanent breach targets. Unlike passwords, biometrics cannot be rotated after compromise.

When a password database is breached, users can change their passwords. When a biometric template database is breached, the damage is permanent. You cannot change your fingerprints, your iris pattern, or the geometry of your face. A biometric breach compromises the victim for life.

Centralized biometric databases at airports, banks, and government agencies store millions of templates at single points of failure. The OPM breach in 2015 exposed 5.6 million fingerprint records. Those fingerprints are still compromised today and will be forever. Traditional encryption does not solve this -- it simply moves the problem to key management.

The Old Way

The PRIVATE.ME Solution

XorIDA splits biometric templates across independent storage nodes. No single node holds a usable template. Matching happens in the split domain without ever reconstructing the full template.

Each biometric template is split into N shares distributed across independent storage nodes. During authentication, shares are collected and the match is performed on the reconstructed template in a secure enclave, then immediately discarded. No node ever holds a complete template at rest.

Because XorIDA is information-theoretic, a compromised node reveals zero information about the template. Unlike encrypted templates where a future quantum computer could decrypt, XorIDA shares are provably unrecoverable without the threshold number of shares -- today, tomorrow, and forever.

The New Way

How It Works

A secure enrollment and matching pipeline ensures biometric templates never exist in usable form at rest. Templates are split at enrollment and reconstructed ephemerally at match time.

Use Cases

Integration

import { vaultTemplate, matchSecure } from '@private.me/biometricvault';

// Vault a fingerprint template across 3 nodes (2-of-3)
const shares = await vaultTemplate(fingerprintTemplate, {
  n: 3,
  k: 2,
  modality: 'fingerprint'
});

// Secure match with ephemeral reconstruction
const match = await matchSecure(probeTemplate, {
  userId: 'user-12345',
  threshold: 0.95
});
// match.ok === true → identity verified

Security Properties

Verifiable Data Protection

Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.

Ready to deploy xPrint?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xPrint generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases