Identity-Locked dynamic QR Platform

Biometric and Cryptographic Security

BioQR is a sophisticated zero-knowledge security platform that couples hardware-backed biometric verification (TouchID/FaceID) with identity-locked dynamic QR validation to safeguard enterprise resources.

View Source Code
App Preview

Application Screenshots

BioQR Homepage showing core security details and dynamic feature grids

Welcome Page

Premium dark-mode entry page showcasing key cryptographic solutions, team layouts, and Android links.

BioQR Login interface supporting biometric and standard logins

Sign In Page

Sign-in dashboard with integrated WebAuthn checks for instant biometric keystore handshakes.

BioQR User Area showing dynamic QR code generation tools

User Dashboard

Dynamic QR creation panel letting users generate identity-locked dynamic credentials verified via biometrics.

BioQR Analytics Dashboard and biometric logs monitoring systems

Analytics Page

Security audit logs, system performance charts, and real-time biometric validation logs.

Security Layer

Key Capabilities

Identity-Locked Dynamic QR

Generate QR keys encrypted specifically for a receiver's public key. Decryption is only possible after a local biometric authentication scan.

Biometric WebAuthn Keys

Onboard and map user hardware tokens (TouchID, FaceID, Windows Hello) using the FIDO2 standard directly via standard browser WebAuthn hooks.

Organization & Team Dashboards

Enterprise administration section mapped with custom team scopes and distinct organization access control parameters.

Live System Health Analytics

Modernized Status panel that pings server processes, database tables, and external endpoints to measure live latency graphs.

Security-First Framework

Strict endpoint validation with Express v5 rate-limiters, CSRF protection double cookies, and encrypted JWT storage.

Cross-Platform Support

Integrated Android mobile app codebase that queries the Express APIs to verify dynamic QR codes locally on the move.

Technical Reference

Architecture & System Flow

QR Lock & Verification Flow

How sensitive keys are encrypted and verified using biometrics

1
Generate QR

Sender encrypts access data using the receiver's cryptographic public key.

2
Biometric Check

Receiver scans QR. Device triggers FaceID/Fingerprint scan to verify identity.

3
Access Granted

Upon matching biometrics, hardware key decrypts data locally. Access is granted.

WebAuthn Registration Flow

How devices are securely linked to user accounts

1
Enroll Device

User requests biometric lock setup from the dashboard.

2
Browser Prompt

FIDO2/WebAuthn opens hardware biometric verification prompt.

3
Save Public Key

Biometric match triggers creation of keys. Public key is saved in MySQL database.

Architecture

Technology Stack

React 19 & Vite

Premium dark-mode responsive client interface bundled dynamically with Vite compilation.

TypeScript

Strong compile-time type safety across database controllers and REST payload formats.

Node & Express

Robust backend layer managing biometric key mapping and JWT auth routes.

MySQL Database

Relational database storing user credential links and organization layouts (TiDB Cloud).

MongoDB

Document-based log vault tracking security audits and server latency timelines.

WebAuthn & Passport

FIDO2/WebAuthn library handling authenticators alongside OAuth connections.