## 1 Introduction  
Biometric protocols are being used not only to authenticate an individual to an official authority but also to encrypt or sign a message. These protocols are based on biometric traits, which are universal and unique. There are a lot of methods to implement biometric identification, and a biometric card, usually known as a national electronic identification card (eID), is one of them. Biometric eID cards can perform authentication, encryption and data signature, because of the private parameters (keys) stored on the card. The private parameters are stored in a card, as a biometric template during the enrolment stage. This template is used for comparison between the new template and corresponding template on the card, using two processing systems: match-off-card and match-on-card. Match-on-card compares the template of the card with the fresh template, while the processing of biometric data is done on the card and never leaves the card. On the other hand, match-off-card processing is not done on the card, but in and outside a device or system. Match-off-card and match-on-card are presented in Figures 1 and 2. Each processing system has its own advantages and disadvantages, as described in [1]. Match-off-card is faster, because of the processing power from the system, but because the biometric template leaves the card, this approach presents a security risk for the sensitive information inside the card. However, match-on-card has lower computation power, higher security because the biometric template does not leave the card, and lack of interoperability is a problem in this processing system [1]. A general introduction on the match-on-card can be found on [2], where the main advantages of this processing system are discussed, like a decentralized biometric database, data mobility, enhanced privacy and security [3]. Encryption processed with a biometric card was proposed in [4]. The encryption is done using the biometric key, a unique key generated from the biometric template inside the card. Except for the encryption process, this key can be used for the matching and authentication process also [4]. As the technology is progressing, a need for a faster data processing system is increasing too, making the speed the main parameter for analyzing. The National Institute of Standards and Technology (NIST) has done an evaluation of the accuracy and speed of fingerprint match-on-card process. Minimum error rate, the speed of execution, and the accuracy were only a few of the parameters tested in this experiment and discussed in an extended report [5]. Fingerprint authentication using a match-on-card is also presented in [6], where the authors observed the performance of successful and unsuccessful authentication. The positive verification time is slower than the negative verification time, which is also a security issue. In this paper, performance of enrollment and the false acceptance rate of the verification process are also analyzed. NIST has done another experiment, a feasibility study, to determine if biometric match-on-card authentication could be performed in less than 2.5 s. The protocol for this operation consisted of few steps, presenting the card to the contactless reader from the cardholder, presenting the finger to the scanner, a secure session establishment process, transmitting the encrypted fingerprint template to the card, decrypting the template, and in the end returning the matching test result. In the report, the main parameters measured are average time to establish a secure session, average time for transmission of encrypted biometric data, and average total time to perform this complete process [7]. This paper proposes a different approach than the papers mentioned above. The main parameter is the efficiency of two processing systems, match-on-card versus match-off-card. This paper will not  
Figure 1: Match-off-card system. Reprinted with permission from [2]. © 2009 Springer US. Figure 2: Match-on-card system. Reprinted with permission from [2]. © 2009 Springer US.