bRUID iPerso

Instant Card Issuance

Branch Counter or Self-Service Kiosk · Real-Time EMV

Walk in. Get your card.
EMV-personalized on the spot.

bRUID iPerso brings the entire central issuance pipeline - data preparation, cryptographic services, EMV encoding, and bRUID applet provisioning - to the bank branch. No waiting for central bureau. Customer walks in, completes biometric enrollment, and walks out with a fully personalized, chip-encoded, contactless-ready payment card in under 90 seconds.

Request a Demo How It Works See the Kiosk

Contactless enabled

**** **** **** 7183

INSTANT ISSUE

bRUID

Customer KYC Identity verification & biometric enrollment

Real-Time dPrep EMV data generation + bRUID Kms crypto

Chip Encoding EMV + bRUID applet on virgin card

Graphic & Mag Stripe Embossing, printing, magnetic write

Card Delivery Hand to customer - ready to transact

<90s

Card-in-hand time

Branch Level

No central bureau needed

bRUID + ICBA

Biometric on every card

HSM Secured

bRUID Kms cryptography

Branch Issuance Flow

Central Issuance Power.
At the Branch Counter.

bRUID iPerso runs the same EMV data pipeline as central issuance - import, EMV generation, cryptographic services, template building, and chip encoding - but compressed into a single-card, real-time workflow at the branch. The same bRUID Kms HSM security. The same production-grade output. Just instant.

Customer Enrollment

KYC verification and ICBA biometric enrollment - fingerprint, face, or iris captured at the branch. Identity linked to card from the first second.

Real-Time Data Preparation

Single-card EMV data generation in real time. Import from CMS, enrich with chip data, request cryptographic services from bRUID Kms - all in seconds, not hours.

Chip & bRUID Encoding

EMV chip personalization with APDU script execution on virgin card. bRUID applet provisioned with biometric template. SDA/DDA/CDA certificates written.

Graphic & Magnetic

Card embossing, printing, and magnetic stripe writing on branch-deployed personalization hardware. Visual and chip QA verification before delivery.

Central vs Instant Issuance

Location Bureau / Factory Bank Branch

Volume Batch (thousands) Single card

Turnaround Days to weeks Under 90 seconds

Data Prep bRUID dPrep batch bRUID iPerso real-time

Cryptography bRUID Kms (same) bRUID Kms (same)

EMV Output DC9 + MDB files Direct APDU encoding

bRUID Applet Provisioned Provisioned

Biometric Optional enrollment Enrollment at counter

bRUID cPerso bRUID iPerso

Self-Service Banking Technology

Instant Card Issuance Kiosk

A complete card bureau, engineered into a single branch cabinet - an ATM-style self-service terminal that issues a live, fully personalised payment or ID card in minutes, without staff intervention.

The same iPerso pipeline described above, delivered as a machine the customer operates.

BNPRS Instant Card Issuance Kiosk - self-service terminal with camera, touch display, MRZ reader, fingerprint scanner, barcode reader and encrypting PIN pad

A branch cabinet doing the work of a card bureau. It takes the courier, the central batch and the reissue queue out of the process altogether - the customer never leaves the counter, and nothing about the card is prepared anywhere else.

The self-service issuance journey

Request

Customer selects Issue Card on the touch display.

Verify identity

Document MRZ, barcode and face / iris / fingerprint capture.

Authorise

Details confirmed; request authorised with the host CMS.

Personalise

Chip encoding, magstripe, print and optional embossing.

Verify card

In-machine check; rejected cards obfuscated and binned.

Dispense

Card and receipt issued; full audit record written.

Three Tiers, One Platform

Match capability to the deployment.

Basic, Pro and Max are not three products. They are three capability tiers of one design: a model is defined simply by which subsystems and software modules are populated on a shared base.

Capability	Basic	Pro Recommended	Max
Self-service instant issuance	Yes	Yes	Yes
Biometrics	Face + Fingerprint	Face + Iris + Fingerprint	Face + Iris + Fingerprint
MRZ passport + barcode capture	Yes	Yes	Yes
Super-User mode	No	Yes	Yes
Card embossing	No	Standard	Standard
Card hoppers (multiple card products)	2	up to 6	up to 6 + replenish
Security (mTLS, HSM, logical + physical)	Baseline	Full	Full + scheme certified
Reject-card data obfuscation	No	Yes	Yes
Cash / document deposit module	No	No	Standard
Remote fleet management & analytics	Basic	Standard	Advanced
Dual-controller resilience	Yes	Yes	Yes + redundancy
Enclosure W × D × H (mm)	600 × 700 × 1600	600 × 700 × 1600	650 × 700 × 1700

What sets the platform apart

Tri-modal biometrics

Face, iris and fingerprint capture with MRZ and barcode reading - identity assurance strong enough to issue a live card unattended.

Super-User mode

A privileged, strongly authenticated mode for staff to issue single or batch cards on behalf of customers, for centralised preparation and secure distribution.

In-machine embossing

Raised-character personalisation, indenting and tipping in the same card path as flat personalisation - premium and legacy formats, no separate embosser.

Modular vendor panel

All interaction readers sit on one quick-release panel; an entire vendor combination swaps in minutes with no change to the kiosk body.

Dual-controller resilience

An industrial PC drives the UI and peripherals while a dedicated controller handles chip encoding only - isolating the secure path and adding a watchdog layer.

Field-upgradable tiers

A site can start at Basic and move to Pro or Max by adding modules and enabling software - same enclosure, same work surface, same platform.

Specification

Card personalisation & dispensing

Personalisation: Chip read/write, magstripe encoding, embossing / indenting (51 digits), tipping
Card library: Turntable engine dispenses any card held in the library
Card box capacity: 100 cards per box - up to 600 blanks on board
Recycle / reject bin: 2 boxes × 120 cards; defective cards stored, re-issued or obfuscated
Issuing cycle: ≤ 60 s (issue + emboss / indent + tipping)
Card formats: Contact and contactless (dual-interface) EMV, magnetic stripe, embossed
Card size: 85.5 × 54 mm, 0.76-1.1 mm thickness

Architecture & control

Main controller: Industrial PC - kiosk application, UI, peripherals, personalisation engine
Secure controller: Dedicated chip-encoding controller with independent monitoring and watchdog
Key protection: External Cloud or on-premise server HSM; no keys held in the kiosk
Host integration: Secure connector to the bank's card management system over mutual TLS

Customer interface

Display: Tilted touch display, 10° from vertical
Identity capture: Camera (face), iris scanner, fingerprint scanner
Document capture: MRZ / passport reader, barcode / QR reader
PIN entry: Encrypting PIN pad (PCI PTS POI)
Output: Card and receipt outlet, thermal receipt printer, status LED

Power, enclosure & environment

Supply: 110 / 230 VAC, 50/60 Hz; two-pole isolator, protected live line
Continuity: 1 kVA online UPS - a card in production completes through a mains dip
Ergonomics: Card / receipt outlet at 820 mm; interaction panel 926-1014 mm at 25°
Environment: 0-50 °C, 0-90 % RH non-condensing; indoor deployment

Compliance framework

Compliance is achieved at system level under a PCI DSS / PIN-Security programme, with every payment-path component selected to carry its own certification: PCI PTS POI encrypting PIN pad · EMV Level 1 & 2 and contactless scheme approval for card readers · FIPS 140-2/3 Level 3 + PCI HSM key protection · PCI SSF / P2PE software · card-scheme personalisation approval · TLS 1.2+ / mTLS transport · CE, FCC, RoHS product safety and EMC · ISO/IEC 19794 biometric data interoperability.

Specifications subject to change without notice.

Capabilities

Instant Issuance Features

Everything the central bureau does - compressed into a branch-level, single-card, real-time workflow.

Real-Time EMV Generation

Single-card data preparation with EMV data enrichment, TLV template building, and scheme-specific tag mapping - all in real time instead of batch processing.

HSM Cryptographic Services

Per-card key derivation, PIN block generation, and SDA/DDA/CDA certificate computation via bRUID Kms.

bRUID Applet Provisioning

Load ICBA biometric applet onto virgin card during personalization. Biometric template from enrollment stored on-chip for BODA offline authentication at terminals.

Multi-Scheme Support

Supports Visa, Mastercard, RuPay, Amex, and local payment schemes. Scheme-specific EMV profiles, script generation, and risk parameter configuration at branch level.

Branch Hardware Support

Compatible with desktop personalization devices from Matica, CIM, Entrust, and other vendors. Small footprint - fits on a branch counter with USB/network connectivity.

Audit & PCI Compliance

Complete audit trail for every card issued at branch. PCI-DSS compliant with tamper-evident logging, role-based access, and reconciliation with central CMS.