CardLab has completed FIDO certification and field testing and is releasing a biometric FIDO authentication system built around a smart card that stores biometric templates and cryptographic keys on the card itself. The company’s roadmap frames the product as a “biometrics-first” security platform aligned with the direction of the EU Digital Identity Wallet.
The design principle distinguishing CardLab’s approach is on-card processing: biometric data is enrolled, stored, and matched on the physical card, with the private key never leaving the card. This architecture targets high-assurance access and offline verification use cases, in contrast to systems that rely on a phone or cloud service to process biometric data or manage cryptographic material.
The authentication server component – used to validate FIDO credentials server-side – comes from QuardLock, which CardLab describes as providing a FIDO-certified authentication server to complete the end-to-end stack. Together, the two components form what the company positions as a hardware-bound biometric authentication chain compatible with passkey and phishing-resistant login standards.
CardLab’s biometric FIDO platform dovetails with the ENISA cybersecurity certification program for the EU digital wallet, which is expected to set assurance requirements for authentication and credential security layers within the EU wallet ecosystem. Hardware-bound solutions that keep sensitive material on a discrete, certifiable device are one architectural path vendors are exploring to meet those requirements.
The EU Digital Identity Wallet framework has been attracting a range of vendor offerings. CardLab’s roadmap mirrors the Deutsche Telekom and Scytáles EU digital wallet age verification system in the sense that both anchor biometric checks to wallet-relevant use cases, though through different technical approaches. The company is also aligning with the EU digital wallet framework upgrade that extended the specification’s scope and updated the assurance baseline.
FIDO-based authentication has become a foundation for passkeys and phishing-resistant login, and the market for hardware FIDO tokens—including smart card form factors—continues to attract investment. Bringing biometric matching onto the card itself is intended to eliminate a verification step that typically requires a separate reader or mobile device, while maintaining the cryptographic binding that gives FIDO credentials their security properties.
Sources: Innovation News Network
–
By the ID Tech Editorial Team
