Protected transmission of biometric user authentication data for oncard-matching