Most Singapore employers who buy biometric attendance devices do not need to understand the underlying technology. They need to know enough to ask the right questions about data security, accuracy, and compliance. When a vendor tells you the device stores “encrypted biometric data,” you should know what that means and why it matters for PDPA. When they quote a False Acceptance Rate of 0.001%, you should know whether that number is good or bad. This guide covers the technical essentials without requiring an engineering background.
Key Takeaways
- Biometric devices store templates, not images: The raw fingerprint or face scan is converted to a mathematical hash. The original cannot be reconstructed from the stored template.
- Two-phase operation: enrolment then verification. Every device works by capturing data during enrolment once, then matching live scans against that data at each clock-in.
- False Acceptance Rate (FAR) and False Rejection Rate (FRR) are the key accuracy metrics: Lower FAR means fewer security breaches. Lower FRR means fewer frustrated employees at the reader.
- Cloud sync replaces manual USB export: Modern cloud-connected devices push attendance records to the HR platform in near real time, removing the manual export step.
- PDPA applies from the moment of enrolment: The template is personal data under Singapore law from the first scan (Source: PDPC).
What Happens During Biometric Enrolment?
Biometric enrolment is the one-time process where the device captures the employee’s biometric data (fingerprint, face, or palm) and creates a mathematical template that becomes the reference for all future verifications. For a fingerprint reader, the employee places their finger on the sensor three times. The device averages the three scans into a single template.
The enrolment process for a fingerprint reader:
- Employee places finger on sensor (scan 1)
- Removes and replaces finger (scan 2)
- Removes and replaces finger (scan 3)
- The device extracts ridge minutiae points from all three scans
- Device creates a mathematical template (typically 500 bytes to 2 KB)
- Template is stored in device memory and/or uploaded to the cloud HR platform
The template is a numerical representation of the ridge pattern relationships. It is not a fingerprint image. You cannot reconstruct the original fingerprint from the template. This is the key PDPA data minimisation argument for biometric attendance systems.
How Does Biometric Verification Work at Each Clock-In?
At each clock-in, the device captures a live biometric scan, extracts the same feature set used during enrolment, and compares it against the stored template using a matching algorithm. The comparison produces a similarity score. If the score exceeds the configured threshold, the match is accepted and the timestamp is logged.
The matching process:
| Step | What Happens | Time |
|---|---|---|
| Live scan capture | Sensor captures fingerprint or face | Under 0.5 seconds |
| Feature extraction | The algorithm extracts the same feature points as enrolment | Under 0.3 seconds |
| Template comparison | Similarity score calculated against the stored template | Under 0.5 seconds |
| Decision | Score above threshold = accept; below = reject | Instant |
| Timestamp logging | Employee ID + date + time recorded | Instant |
Total process: under 2 seconds for most current Singapore devices.
What Are FAR and FRR, and What Numbers Are Good?
False Acceptance Rate (FAR) is the percentage of unauthorised attempts the device incorrectly accepts. False Rejection Rate (FRR) is the percentage of legitimate employee attempts that the device incorrectly rejects.
For Singapore attendance devices:
- Good FAR: 0.001% or lower (1 in 100,000 attempts is falsely accepted)
- Good FRR: 0.1% or lower (1 in 1,000 legitimate scans is rejected)
- Acceptable for attendance: FAR under 0.01%, FRR under 1%
FAR and FRR trade off against each other. Setting the matching threshold higher reduces FAR but increases FRR. Most Singapore attendance devices are factory-configured at a balanced point suitable for workforce attendance use.
For a fingerprint attendance system Singapore deployment with 100 employees clocking in twice daily (200 scans/day), a 1% FRR means 2 rejected scans per day. At 0.1% FRR, that drops to one rejection every five days. The lower the FRR, the less friction for employees.
How Does Cloud Sync Work for Biometric Attendance?
Cloud-connected biometric attendance devices transmit attendance records to the cloud HR platform over an encrypted HTTPS connection in near real time. The device requires outbound internet access on port 443. Each clock-in event (employee ID, timestamp, match result) is pushed to the HR platform within seconds.
Cloud sync architecture:
- The device connects to WiFi or LAN at the installation site
- After each successful match, the attendance event is queued for upload
- Events are uploaded to the HR platform API in batches of 1 to 10 records
- The HR dashboard shows attendance data within 1 to 3 minutes of the clock-in event
- Device stores up to 50,000 to 100,000 records locally as a buffer if connectivity drops
For employee attendance tracking Singapore compliance, this real-time sync means payroll runs on accurate data without a manual export step that could be forgotten or delayed.
“The cloud sync step is what turns a biometric device from a standalone clock into a compliance tool. Without it, you still have to manually export data. With it, payroll just works.”
Frequently Asked Questions
How is biometric template data stored securely in Singapore?
Compliant biometric attendance devices encrypt templates at rest using AES-128 or AES-256 encryption. Templates are stored either in encrypted device memory or in the cloud HR platform’s encrypted database, or both. Under PDPA, the data controller (employer) is responsible for ensuring appropriate technical safeguards regardless of whether the vendor manages the storage (Source: PDPC).
Can biometric templates be transferred between devices from different vendors?
No. Biometric templates are proprietary to each vendor’s algorithm. A fingerprint template from Vendor A cannot be used in Vendor B’s device. If you switch vendors, employees must re-enroll on the new hardware. This is a vendor lock-in consideration when choosing a biometric attendance system.
What happens to biometric data when an employee leaves a Singapore company?
The employee’s biometric template should be deleted from all devices and the cloud platform within a reasonable period after the last day of employment. Most Singapore HR platforms with biometric integration include an offboarding workflow that triggers template deletion. Verify this is automated before purchasing.
How does a biometric device handle multiple fingerprints per employee?
Most Singapore fingerprint attendance devices allow enrolment of up to 10 fingers per employee. In practice, most companies enrol the index fingers of both hands. The second finger is a backup: if the primary finger is injured or temporarily damaged, the employee can use the backup.
What is 1:1 vs 1:N matching in biometric attendance devices?
1:1 (one-to-one) matching compares the live scan against one specific stored template, identified by employee ID entry or card swipe. 1:N (one-to-many) matching compares the live scan against all stored templates to find a match. 1:N matching (touchless, just place a finger) is slower for large user databases. 1:1 matching (tap card, then finger) is faster. Most Singapore attendance terminals support both modes.
Conclusion
Biometric attendance devices work through a two-phase process: enrolment creates a mathematical template, verification matches the live scan against it. Templates are not images and cannot be reverse-engineered. Cloud sync eliminates manual export. FAR and FRR are the accuracy metrics to evaluate. PDPA applies from the first enrolment scan, so consent collection and data deletion procedures must be in place before the first employee is enrolled. Understanding these fundamentals helps you ask better questions during vendor selection.
Tipsoi’s biometric devices use AES-256 encrypted template storage and push attendance data to the cloud HR platform in real time. Get a quote. Download Tipsoi’s Biometric Device Buying Checklist for a specification comparison framework.