Biometric model must not leak any sensitive information regarding known driver identities. Although the personal data is pseudonymized, the system must guarantee that there are no alternative paths to rebuild the relation between biometric templates and subject identities.