As P’Somchai suggestion you I think so too and another likely possibility they use with RADIUS Server secure authentication. Because as your pic I see they use ID card number and receipt number on the ticket of customer on that means they must be sent to a central database of them to register first.