There is no user limit since v19.0 so you could get away with simply making 20 internal users (or 10 if you use both card fields) and set the ID fields to the card number and disable the internal users so they can't log in.