Description

The plusID product line of secure, wireless devices transforms biometric security as we know it today.

plusID is the world's first personal biometric fingerprint token. One device provides secure access to multiple facilities, computers, and networks. Adding the heightened security of biometrics has never been easier, more economical, or widely accepted.

All plusID systems offer:

Affordability --  Work seamlessly with existing physical and logical security systems – no changes required to installed infrastructure, allowing for rapid enterprise integration.
Convenience --Replaces multiple access cards and passwords. Keychain attachable, quick and easy to use – typical authentication times of a second or less
Privacy -- All biometric processing including enrollment and template matching is performed on the user's personal device – never exposing biometric data to external servers, readers or databases
Multi-purpose -- One device grants secure access to multiple facilities, computers and networks
Security  --   Uses tamper-resistant secure processor (BCM5890) and is built to withstand digital and physical attack, transmits encrypted credentials, cannot be used by anyone else if lost or stolen.
Long-life -- Approximately 1,000 uses between recharges. Recharges over USB or via wall charger.

The plusID 75 Offers
 

• 125 kHz RF proximity card technology
• 13.56 MHz RF contactless smart card technology
• ISO 7816 Part 3 Smart Card compliant for logon
• USB
• Bluetooth™ (2.45 GHz)
• RSA SecurID® one-time password ready
• LCD and audible feedback

Features

One device for physical and logical biometric access
-Supports multiple facilities and multiple card formats for existing door reader systems
-Provides access to IT resources such as PC's, applications, web sites, VPN's, email, and encrypted files
-Offers vehicle gate access at distances up to 100 meters
-Securely stores and transmits up to 2MB of user credentials (such as passwords, building access codes, identity documents, photos)
   
Personal privacy
-All biometric processing, including enrollment and template matching is performed on the user's personal device – never exposing biometric data to external servers, readers or databases
-User's biometric information is stored on the secure device and never leaves it
-eliminates the need for a biometric database or back-end servers
   
Compatible with industry standards
-125 kHz RFID: works with HID®, Indala®, Kantech and CASI proximity readers
-13.56 MHz RFID: 14443A & B, 15693 and NFC for smart card readers; supports iCLASS
-ISO 7816 (Part 3) Smart Card compliant
-Bluetooth™ (wireless) and USB connection to computers/networks
-IEEE 802.15.4 for long-range gate access (up to 100 meters) from within moving vehicles
-Supports delivery of the RSA SecurID one-time password (OTP)
   
Cost effective
-Easy addition to existing security systems - no need to "rip and replace"
-Works on the same reader systems as prox and contactless smart cards
-Eliminates need for an external biometric database
-Eliminates need for biometric readers at every door and PC
-Reduces manpower at vehicle gates
-Can be erased and reissued
   
Convenience
-Replaces multiple access cards, fobs, and passwords
-Personal biometric device upgrades security at every access point
-Fingerprint sensor on personal devices eliminates single point of system failure, congestion at doorways, and health risks from shared biometric readers
-Allows for mixed populations of biometric and non-biometric devices
-Less than one second verification times
   
Security
-Designed to meet FIPS 140-2 level 3 security rating for tamper resistance
-Employs the BCM 5890 secure processor
-False acceptance rates of 1 in 100,000
-Full cryptographic services provider for secure, encrypted data transmissions
-Can store and transmit other biometrics, i.e., facial pattern templates, for multiple biometric authentication

Specifications

The plusID personal biometric token works seamlessly with existing physical and IT security systems and makes adding biometrics a simple and cost effective option.
Physical Access

plusID devices work exactly like a proximity card or smart card and is licensed to operate with up to 90% of installed reader systems, including: HID®, Kantech, Indala®, CASI and SARGENT®.
IT/Logical Access

plusID is an ISO 7816 Part 3-compliant smart card, but in a form factor that allows it to support on-board biometric authentication of its user. When connected to a PC, the plusID token enumerates itself as a smart card, enabling a quick and easy full three-factor authentication solution. Additionally, plusID devices are compatible with existing logical access applications, and can be easily configured to support RSA SecurID® one-time password (OTP) technology, for businesses that have already invested in RSA OTP infrastructure. The device displays a one-time-password with each authentication that can be transmitted via Bluetooth™, USB, or manually entered.

A single plusID token can hold the equivalent of four proximity cards and four contactless smart cards (of varying formats and for multiple facilities) and still perform logical access.

plusID Supports
 

• 125 kHz proximity technology -Supports HID, Kantech, Indala and CASI bit formats
• 13.56 MHz read/write contactless smart card technology -Meets ISO 14443A & B, 15693, and NFC standards for contactless communications; supports HID iCLASS
• ISO 7816- The device enumerates itself to computers as a smart card
• Bluetooth™ -2.45 GHz, V1.1 certified.  PCs can be easily upgraded with a USB adaptor
• USB -2.0 full-speed
• IEEE 802.15.4 -2.45 GHz long-range, in-vehicle gate access solution for distances up to 100 meters
• RSA SecurID® one-time password -One-time-password generated with each biometric authentication & automatically transmitted via Bluetooth™, USB, or can be manually entered.

Supporting Hardware and Software

Privaris plusID Manager

Enrollment is the plusID issuance process which pairs a device with its user and readies it to be used for identity verification. plusID Manager is the secure software required for enrollment (a two-three minute process per user). It enables fingerprint templates to be added or removed from the device; multiple applications, facilities and/or card formats to be assigned to the device's programmable buttons; card formats to be added or changed (for physical access applications); and device configurations and timeout settings to be adjusted. For security purposes, the software prohibits any changes to an enrolled device without the device's owner authenticating for authorization.

The Enrollment Station communicates with plusID devices via USB or wirelessly via Bluetooth™. The software is compatible with Windows 2000 SP4, Windows XP SP2 and Windows Vista.

HID idBank

The idBank from HID is a smart card containing card formats (access control IDs) that are securely transferred to plusID devices using the plusID Manager software. If the plusID device will be used in place of access cards or fobs to access doors and facilities (physical access), a card format must be loaded onto the plusID device via an HID idBank. Card formats from an idBank can be securely added or changed on the device.

idBanks can be ordered with HID®, CASI, or Indala® prox and HID iCLASS card formats, including Corporate 1000, in quantities of 25, 50, 100, 200 or 300.

Privaris Lane Transceiver

The Privaris Lane Transceiver enables plusID90 devices to be used for secure control of vehicle gates where transmission of user credential information over a range of 100 to 300 feet is required. The system is designed for applications that require biometrically assured identity verification without requiring vehicles to come to a stop to perform a biometric verification at a gate.

The Lane Transceiver combines Privaris' unique, patented wireless biometric devices with a specialized long range data gateway. The multi-function data gateway communicates with the plusID90 device via the IEEE 802.15.4 wireless protocol.

The Lane Transceiver can interface with existing access control systems using Weigand, RS-232, or Ethernet connections.  Once the Lane Transceiver receives a secure transmission of an authenticated credential from the plusID90, that credential (or access control ID) can be transmitted using the Weigand interface, or for specialized applications, a more robust credential including specific device or application information can be transmitted using the higher bandwidth RS-232 and Ethernet interfaces.