HID Security access systems

HID Global, the worldwide leader in trusted identity solutions, has announced the most feature-rich implementation of the latest MIFARE DESFire EV3 credential. This new access control credential based on NXP MIFARE DESFire EV3 delivers this technology’s full range of advanced security and privacy capabilities and reinforces them with HID’s powerful model for identity data protection. This HID credential provides AES128 encryption, a secure channel for protecting card data from man-in-the-middle attacks, and a random unique identifier (UID) for protecting user privacy. The credential works with readers based on MIFARE DESFire EV1 and EV2 products and is interoperable with HID® Signo™, iCLASS SE®, and multiCLASS SE® readers. In addition to choosing standard or custom security profiles to meet their specific needs, users can take advantage of HID’s Secure Identity Object™ (SIO®) model that protects a credential’s identity data through key diversification, authentication signatures, and encryption. Users can create multi-technology cards with HID’s credential based on NXP MIFARE DESFire EV3 to provide a smooth migration path from vulnerable legacy, low-frequency 125 kHz-based systems to modern and secure credential technology. What are the benefits of HID Global’s MIFARE DESFire EV3 credential solution? Feature-rich security that offers profile choices to fit your needs Advanced security features that aren’t available elsewhere, such as modern encryption, mutual  authentication and secure messaging and SIOs Key management and card formatting that adhere to the highest standards of data protection and governance Click here for more information.

HID's iCLASS SE Processor is a cryptographic module that enables reader manufacturers, developers and system integrators to quickly and easily integrate SIO and TIP into their devices. The iCLASS SE Processor sits on top of all existing card technology and supports the interpretation and authentication of the SIO data structure to increase overall system security; it also supports key emerging technologies, delivering superior performance and enhanced usability.

HID Satellite secure visitor management software is used to control and monitor entry and exit at one or more internal locations or “check points” for visitors who have already been badged at a SVM workstation at the main lobby, visitor center or guard gate. Upon arrival at a Satellite station, the visitor’s badge is scanned and the Satellite station will display the visitor’s photo, name and clearance level while informing the operator whether to allow or deny the visitor entry into that area. The clearance level is assigned to each visitor when they are badged by the SVM software. Satellite time stamps the visitor’s entry and exit at that station via barcode scan, proximity card or magnetic stripe read.

In the past, biometrics solutions for access control were often deployed with reduced security thresholds because their imaging technology, which routinely yielded false fingerprint rejections, resulted in long authentication queues at the door. HID Global’s new fingerprint reader, iCLASS SE® RB25F, merges credential excellence with HID’s globally-patented multispectral imaging technology to address the need for reliable biometric authentication and fuel broad adoption of biometrics at the door. The high-performance iCLASS SE RB25F provides an unrivalled experience by dramatically increasing image capture performance and fingerprint matching in under a second, significantly reducing delays that were previously symptomatic of biometric solutions. The reader contains HID’s Lumidigm® multispectral technology. The multispectral image read by the sensor includes surface, subsurface (subdermal) and liveness details making it the most forgiving, yet toughest-to-spoof fingerprint reader on the market. RB25F supports both template-on-card and template-in-device architecture, whilst carrying an IP67 rating for both indoor and outdoor use (-20°C to 66°C), and an IK09 rating for vandal resistance. Certified in several major geographies worldwide, the new iCLASS SE RB25F can be used with all popular industry-standard high frequency credential technologies including HID Mobile Access® Mobile IDs, Seos®, iCLASS SE®, iCLASS®, MIFARE DESFire®, and MIFARE® Classic.

Superior wet and dry print capture without recalibration Intuitive instructions via illuminated pictograms Proprietary FlexFlat and FlexRoll features facilitate fingerprint image capture regardless of positioning on the platen AutoCapture functionality ensures rapid capture of high quality images for error-free biometric data collection Ideally suited for border control, national ID, and other expedited, high volume screening and enrollment applications

HID RKCLB40 pivCLASS biometric reader is intended for use in areas requiring the highest level of security. This dynamic reader is suitable for meeting the FIPS-201 criteria for “Controlled”, “Limited” and “Exclusion” access areas. The biometric reader must be used with a pivCLASS Authentication Module (PAM) to provide strong authentication, which ensures that the card presented is genuine, the data has not been manipulated, the card has not been compromised or stolen and the PIN has not been shared. When the biometric feature is engaged, the reader provides the highest level of identity assurance. These comprehensive security measures include: authentication of the PIN, validation of the PIV Authentication Key certificate, validation of the authenticity of the fingerprint template on the card and comparison of the live fingerprint to the template.

HID pivCLASS Certificate Manager software is a PC-based application that re-validates imported cardholder certificates on a user-defined periodic basis. Certificate Manager can be configured to suspend a PACS badge associated with an invalid or revoked certificate, to generate alarms in the PACS and can send an e-mail to a distribution list for notification when it discovers an invalid certificate. It is integrated with fixed biometric readers that can send certificate revocation status, TWIC Privacy Key (TPK), etc. to the fixed reader upon request.

The HID ActivID Credential Management System enables organisations to issue an authentication credential that goes beyond perimeter security. A smart card or smart token can be used to secure access to individual workstations and servers within the firewall, as well as securing VPN and other remote access use cases. The smart card or token can also be used to encrypt data, hard drives, documents and emails, and for digital signatures. It gives organisations a way to simply and securely manage their smart card and smart USB token deployments. The credential management solution makes it easy to define and apply policies to manage data, applets, digital certificates and OTP credentials across the entire product lifecycle.

HID Asure ID Solo is an entry-level card personalisation software. It features a highly-intuitive user interface that utilises a familiar Microsoft® ribbon look-and-feel as well as creates full-colour IDs in a matter of minutes. Routine tasks can be performed with a couple of mouse clicks. It’s a snap to capture or load a photo, void a card or set the print counter.

HID Asure ID Enterprise enables multiple workstations to share a common database over a network, whether Asure ID is installed on a PC or a Windows 8 Pro Tablet. The advanced and intuitive card design processes provide a dramatic speed boost for designing card templates and entering cardholder data.

HID Global®, trusted leader in solutions for the delivery of secure identity, recently announced the production release of its next generation EDGE EVO and VertX EVO™ controller platform that brings intelligence and decision-making to the door for advanced and highly customisable networked access control solutions.  EDGE EVO and VertX EVO offer an open and scalable development platform for the deployment of a wide range of access control functionality, including remote management options, real-time monitoring, report generation and a powerful custom rules engine that enables the use of the system hardware for complimentary applications.  Protecting the hardware investments of end user organizations, the new platform builds on the success of the company’s EDGE and VertX solutions and provides the most extensive access control architecture that delivers enhanced security features and superior performance with versatile installation and future upgrade options.  According to ARC Advisory Group, the physical security and access control market is experiencing a major shift toward IP-based solutions. “End users want ease of operation,” said Joseph Gillespie, principal author of ARC Advisory’s December 2011 study, “Physical Security and Access Control Systems for Industry Worldwide Outlook. They also want security solutions that are easier to expand, customize, and integrate with other solutions.  They want each part of the system to be optimized to work together, and to avoid integration and compatibility issues.  With its latest EDGE EVO and VertX EVO solutions, HID Global has shown its commitment to this approach and as the result can now offer more intelligent and valuable solutions to end users.” The scalability of the EDGE EVO and VertX EVO controller platform enables a comprehensive range of future access control functions that are interoperable with wireless locks and deliver enhanced security, such as implementations of highly advanced access rules, keypad door commands and large-scale anti-passback.  Additionally, VertX EVO controllers operate within the company’s Trusted Identity Platform® (TIP™).  These components will enable this version and future revisions of the controller platform to operate with fully trusted connections from host to controller to reader, substantially increasing security options for access control systems of the future. “HID Global’s EDGE EVO and VertX EVO controller platform, including a Developer Tool Kit with OPIN application programming interface (API), offers expanded capacity and higher performance, demonstrating our commitment to providing open solutions based on direct feedback from our partners,” said John Fenske, vice president of product marketing with HID Global. “The state-of-the-art features in our next generation IP-enabled platform emphasize HID Global’s dedication to driving market innovation to efficiently manage identities for access control while also ensuring our customers optimize their Genuine HID investment.” EDGE EVO and VertX EVO platform components include:  EDGE EVO Controllers, Reader/Controllers and IO Modules that enable higher security with an on-board encrypted Hi-O communication bus. EDGE EVO also broadens its worldwide usability of networked access control solutions with the addition of 12/24VDC lock support, mounting options and plug-and-play IO modules that extend IO at and behind the door. VertX EVO V1000 Controller and the V2000 Controller/Reader Interface solutions that expand cardholder capacity, decrease door transaction time and increase door uptime, while offering 100% plug-in compatibility with existing HID Global access control systems and associated V100, V200 and V300 downstream devices.  A comprehensive Developer Tool Kit (DTK) for developing to OPIN API when migrating from first generation EDGE and VertX or for new development using the latest platform.  The DTK is equipped pre-wired EDGE EVO Controller, VertX EVO V1000 and VertX interface boards and IO switchboard, as well as a full set of documentation.

HID pivCLASS Registration Engine software is a PC-based solution that provides three factor authentication, extracting and verifying cardholder data on a FIPS 201 smart card and performing a biometric match against the templates stored on the card. Digital certificates are verified against the issuer's validation authority, SCVP or OCSP responder. All cards are validated using FIPS 201 challenge-response (CAK or PAK) in order to identify forged or cloned cards. Works with all PIV, PIV-I, TWIC, CAC, and FRAC cards. After validation, pivCLASS Registration Engine performs automated registration of FASC-N, photo and printed information into compatible PACS. It also updates cardholder record if it already exists in the PACS, or inserts a new record if one does not exist

HID pivCLASS® R40 wall switch contactless reader is suitable for use in security areas. It fulfills the FIPS-201 criteria for contolled access. When used in conjuntion with HID Global's pivCLASS authentication module (PAM), the reader provides strong authentication that the card being presented is genuine.

HID SE RK40 part of mutliCLASS SE readers is based on its Secure Identity Object (SIO), a portable credential methodology and its Trusted Identity Platform (TIP) for advanced applications, mobility and heightened security.

Capture fingerprint and palm print images through a non-hardware dependent biometric SDK Workflow management allows implementation of a structured process for biometric capture that matches the application requirement Workflows for ID Flats, ten-print, single finger, dual finger and palm capture, including handling of pre-captured fingerprints and/or missing fingers Workflow parameters and workflow steps can be changed and controlled dynamically at processing time, thus enabling a flexible adaption of application to all customer specific processing requirements User application receives status and error message during the capture process Configurable image file formats for PNG, WSQ, BMP, JPEG Flexible plug-ins infrastructure including out of the box implementations for quality and sequence check: standards for NFIQ (500 ppi) and Aware (500 + 1000 ppi)

Auto-Capture feature ensures rapid and error-free capturing of images by automatically taking a picture when sufficient quality of the fingerprint or palm image is detected Offers a high-resolution preview of the biometric image on the integrated screen Patented FlexFlat and FlexRoll features coupled with the large capturing surface gives a unique user experience as fingerprints and palms are captured automatically regardless of their positioning on the platen Delivers an image quality in 1000 ppi for more superior image quality, capturing level 3 details such as a person’s sweat pores The integrated heated platen supports consistent image quality regardless of the ambient temperatures as it applies controlled heat to the surface Applications: Crime scene investigations Enrollment and booking Background checks Identification

Simultaneously supports low and high frequency credentials, including iCLASS® Seos®, HID Prox®, iCLASS SE®, MIFARE® Classic and MIFARE DESFire® EV1; supports NFC and Bluetooth for mobile devices Firmware is field-upgradable to extend the lifecycle of customer installations Supports strictest security standards such as EAL5+ to ensure regulatory compliance and restricted access to corporate resources Offers third-party products the ability to securely interoperate with the iCLASS SE® platform, connecting access control across the organisation Host-driven commands enable read/write to secure areas of smart devices Flexible configuration fits a variety of applications Ultra low power mode for battery-operated devices Adjustable Bluetooth Smart read settings control overall power and read range of Mobile IDs, enabling flexibility for both close proximity “tap” and longer range “Twist and Go” activation Directional antenna enables long-range reading distances up to 2m in correct orientation

HID SE RP10 is a multiCLASS reader with intelligent power management that reduces power consumption. It also supports multiple credential technologies for seamless migration and is field programmable for secure upgrades and extended lifecycle.

HID pivCLASS RK40 is a wall switch with keypad contactless reader suitable for use in security areas. It fulfills the FIPS-201 criteria for controlled access and is intended to support the use of a personal identification number (PIN) entered via a keypad and sent directly to a panel or door controller.

The CombiTag Classic is a read-only 2.45 GHz RFID-tag for both long-range and short-range identification. The CombiTag is available with either HID 125 kHz proximity or 13.56 MHz iCLASS® technology. Read range with TagMaster reader and CombiTag Classic is up to 10 meters.

HID Single button Time-based OATH OTP delivers next generation cloud-based security-as-a-service to protect the identities of employees, students, business entities and government agencies for both physical and logical security. It combines an OATH-compliant two-factor authentication crypto-processor with an HID Prox or iCLASS® antenna for dual function physical and logical access in a single card.

UltraCard PC is the ideal card for use with reverse transfer, laser engraving printers. Made of a 100% polycarbonate construction, UltraCard PC cards are fully compatible with laser engraving, which can be used to add a secure, counterfeit resistant and tamper-evident layer of security to your card personalisation. UltraCard PC cards are highly durable and offer a longer expected card life than other common card types like PVC or PVC/PET composite. Key Features Clean, glossy surface Compatible with fluorescent printing applications Compatible with laser engraving Durable, delamination resistant card construction

The HID ActivID Desktop Validation Client for Windows desktop enables real-time validation of PKI certificates. It works with the ActivID Validation Authority, or any RFC compliant OCSP responder. it enables an organisation to deploy PKI validation capability to desktop users. The ActivID Desktop Validation Client is ideally suited toward enterprises and governments deploying PKI-based smart cards and smart tokens for secure remote access, and Windows domain login.

HID SE RP15 is a multiCLASS reader with intelligent power management that reduces power consumption. It also supports multiple credential technologies for seamless migration and is field programmable for secure upgrades and extended lifecycle.

HID Global vanGO and vanGO custom cards can be used to create personalised one-2-one visual security features that are hot-stamped on to cards, adding an additional layer of protection against counterfeiting -- quickly and affordably. The vanGO One-2-One visual security features enable users to create a custom solution with premiere, best-in-class counterfeit resistance.

Proximity Cards available in several form factors: CX-CRD Clamshell Card. CX-PL5 .049" thick card equivalent to CASI ProxLite Card. CX-ISO XT Polyester composite card for applications requiring a heavy duty card. Photo imageable with optional mag stripe. CX-ISO Card: ISO Thin, Photo Imageable proximity card with optional mag stripe. CK-KEY Keyfob: Ultrasonically sealed for durability, perfect for sites where a convenient pocket size token is needed. Easily attaches to key ring or lanyard. Features of the CX Series CASI Compatible Prox Credentials: Indala Prox credentials programmed for use with CASI ProxLite readers. Same high quality credentials used in the standard Indala Prox line. Factory Programmed, 12 digit ID number. ISO thick proximity cards offered with optional mag stripe. Keyfob available for applications where Photo ID is not required.

HID Global´s iCLASS® + HITAG2 card supports both low frequency 125kHz cards and 13.56 MHz RFID to meet the needs of organisations using multiple contactless technologies and to enable smooth migration to a higher secure solution. The iCLASS SE platform make access control more powerful and more secure by going beyond the traditional smart card model with multi-layered security that is independent of the card technology.

HID Global´s iCLASS® + HITAG1 card supports both low frequency 125kHz cards and 13.56 MHz RFID to meet the needs of organisations using multiple contactless technologies. The card can be used for access control, PC logon, time and attendance and a range of diverse applications.