BioWavePass FAQs

Palm vein recognition uses near-infrared (IR) light to capture the unique vein pattern beneath the skin of the palm. These internal patterns are invisible to the naked eye, making them highly secure and extremely difficult to replicate.

X-Telcom’s ( BioWavePass) Palm Vein Biometric Technology goes beyond traditional IR-only systems. It captures IR vein patterns and RGB surface features at the same time. By combining internal vein data with external palm features, the system builds richer biometric data, improving recognition accuracy, speed, and resistance to spoofing in large-scale databases. .

The system uses 850 nm near-infrared LEDs and high-sensitivity global-shutter CIS sensors, penetrating 2–3 mm under the skin. For reduced blood flow scenarios, exposure time can be extended by 10–20 ms and sensor gain increased for compensation.

RGB and IR resolution is 720 × 1024.

Standby: 1.5 W
Instant during scanning: up to 7.5 W
Average: about 2.5 W

There is no strict size limitation. The scanning distance must be between 5–15 cm. In this range, palms with width 5–10 cm and length 15–22 cm can be stably captured, covering roughly children aged 6–12 through adults with extra-large hands.

Palm vein and palm print patterns are considered basically stable after age 6. Technically there is no hard lower limit. However, in many payment scenarios, enrollment is restricted to users aged 14 or above to match real-name account regulations. Users over 75 can still use the system if their palm veins are not severely degraded.

Yes. Users need to place their palm above the module. The system uses distance sensing and palm ROI framing to judge palm position and provide UI guidance on screen.

Multi-frame fusion is used to compensate for natural motion. The system can tolerate hand movement speeds up to 0.5 m/s during scanning.

The algorithm includes liveness and quality assessment modules. It scores occlusion rate, image contrast, vein clarity, and other parameters. If the image does not meet liveness or quality thresholds, recognition is automatically rejected.

Under normal hardware and network conditions, a single module completes each recognition in 1–1.5 seconds, including image capture, liveness and quality filtering, feature extraction, upload, and result return.

Overall recognition accuracy is 99.5%.

RGB palm print: FRR 1.002% at FAR 1e-6
NIR palm vein: FRR 1.52% at FAR 1e-6
Ours is RGB + NIR combined: Probability of both failing simultaneously is about 1e-11.

Network bandwidth
Server CPU/GPU performance
Client device processing capability

Recognition is usually completed within 1 second, including client-side processing and server-side matching.

At least 100 Mbps bandwidth is recommended for stable performance.

Tests include palm photos, screen replays, 3D-printed hands, gloves, and animal skin. Liveness detection is based on combined RGB and IR imaging.

• At rest (on device): AES-256 encryption with license-based signature protection
• In transit: SSL/TLS encryption ensures secure communication between devices and backend systems

This dual-layer security approach protects biometric data from unauthorized access.

• The system provides biometric matching capabilities only
• Algorithm services store palm feature vectors and indexes
• All other data (user profiles, transactions) is managed by the customer

Customers are advised to store original RGB and IR palm images during enrollment in compliance with local regulations on their own servers.

X-Telcom does not access or manage customer biometric data.

Yes. HTTPS with SSL/TLS encryption is used to secure communication between devices and backend servers, ensuring data integrity and confidentiality.

Palm biometric templates are encrypted using AES-256-CBC, covering:

• Palm vein data
• Palm print data

• Single record: approximately 4 KB
• ~2 KB for palm vein + ~2 KB for palm print
• 1 million records require ~4 GB storage
• With image caching enabled: up to ~1 TB per 1 million records

• Free small-model algorithm: up to 10,000 IDs
• Paid large-model licenses: 100,000 IDs and 1,000,000 IDs
• Domestic private server deployment: over 5 million user IDs
• WeChat ecosystem collaboration: over 300 million users
• Overseas deployments: licenses sold for 20+ million users

In the large-scale comparison model, the algorithm enforces a strict limit on the total number of registered palm records based on the licensed capacity.

• Example: A 100,000-user license allows up to 100,000 registered users
• X-Telcom does not access or view customer database content

For the free small-model version (10,000 ID license):

• No hard system cap on registrations
• However, performance degrades significantly beyond ~20,000 users
• ~99.5% recognition accuracy is achievable within 10,000 users

No technical support is provided for accuracy issues caused by exceeding recommended ID limits.

Yes. The license is a one-time purchase with permanent validity. There are no expiration dates, subscription fees, or recurring charges.

The license ID quantity refers to the number of registered users in the system.

• It is based on enrolled users, not transaction volume
• Example: 100,000 registered users = 100,000 ID license
• Not related to daily or monthly usage frequency
• Deleted users free up ID capacity for new registrations