SenseCrypt Face PKI

Functional eID features

As discussed earlier SenseCrypt Face PKI extends SenseCrypt eID by enabling a third party, without having / processing a person’s face / biometric data to

1. encrypt information for that person's eyes only

2. verify that the person signed specific information

3. verify a subset of eID attributes are real as issued by a trusted issuer

The central piece of technology in SenseCrypt Face-PKI is the Face Certificate. A Face Certificate is generated from:

• the user’s face

• a purpose ID

• metadata

An example of a verification flow using Face Certificates

In the following sections, we shall see how to use the end-points to accomplish various different objectives within SenseCrypt Face PKI functionality.