BCAP User GUIDE
BCap URL for Finger Print Capture
[Link]
6D696F724F676B656B466A7274577A794F5155644C42786A4B54714E366E586A73
632F354453412F444F537949734E523556527639684F7A57662F694E496B547C237
E237C36322438345E6A687C237E237C427C237E237C597C237E237C3630
Base URL: [Link]
Request Key:
6D696F724F676B656B466A7274577A794F5155644C42786A4B54714E366E5
86A73632F354453412F444F537949734E523556527639684F7A57662F694E4
96B547C237E237C36322438345E6A687C237E237C427C237E237C597C237
E237C3630
BCap URL for Finger Print Verification
[Link]
6D696F724F676B656B466A7274577A794F5155644C42786A4B54714E366E586A73
632F354453412F444F537949734E523556527639684F7A57662F694E496B547C237
E237C36322438345E6A687C237E237C427C237E237C597C237E237C3630
Base URL: [Link]
Request Key:
6D696F724F676B656B466A7274577A794F5155644C42786A4B54714E366E5
86A73632F354453412F444F537949734E523556527639684F7A57662F694E4
96B547C237E237C36322438345E6A687C237E237C427C237E237C597C237
E237C3630
How to Generate Request Key
Step 1:
Initial Authorization Key: 16 bytes encryption key|#~#|16 bytes application id
Final Authorization Key: AES Encryption of Initial Authorization Key.
Sample:
Initial Authorization Key: w8%bj@h4h^h$n*35|#~#|BBL_CBA_ABSV1.10
Final Authorization Key:
miorOgkekFjrtWzyOQUdLBxjKTqN6nXjsc/5DSA/DOSyIsNR5VRv9hOzWf/iNIkT
Step 2:
Initial Request Key: Final_Authorization_Key|#~#|Session_Key|#~#|
Output_Format|#~#|EC_FingerPrint_Required_Flag|#~#|
Min_FingerPrint_Capture_Quality
Output_Format
o W for WSQ format
o B for BMP format
EC_FingerPrint_Required_Flag
o Y for Yes
o N for No
Final Request Key: HEX conversion of Initial Request Key
Sample:
Initial Request Key:
miorOgkekFjrtWzyOQUdLBxjKTqN6nXjsc/5DSA/DOSyIsNR5VRv9hOzWf/iNIkT|#~#|
62$84^jh|#~#|B|#~#|Y|#~#|60
Final Request Key:
6D696F724F676B656B466A7274577A794F5155644C42786A4B54714E366E586A73632F3544534
12F444F537949734E523556527639684F7A57662F694E496B547C237E237C36322438345E6A68
7C237E237C427C237E237C597C237E237C3630
Encryption Process
1. “Access Token” is required to use BCAP tool which is kept encrypted in BCAP
source code. “Authorization Key” is decrypted, and “16 bytes encryption key”
& “16 bytes application id” are extracted. Pre-encrypted “Access Token” is
decrypted with encryption key & application id, and then validated
accordingly.
2. After capturing, fingerprint data are encrypted with provided 8 bytes session
key & shared in initial BCAP API response/payload.
3. A random & dynamic 16 digits key is generated, and entire BCAP API
response is encrypted with that random key.
4. Now, the above random key encrypted with RSA public key.
5. Final BCAP API response/payload is prepared & shared as –
encrypted_random_key!^~^!encrypted_ BCAP_API_response
Decryption Process
1. BCAP API response is splitted into encrypted random key & encrypted BCAP
API response.
2. Encrypted random key is decrypted with RSA private key.
3. Encrypted BCAP API response is decrypted with above random key.
4. Fingerprint data from BCAP API response is decrypted with shared 8 bytes
session key.