HID Door access control

Designed to simplify the selection process by offering a cost-effective fixed configuration that combines Seos physical card credential compatibility along with Bluetooth Low Energy (BLE) and Near-Field-Communication (NFC) technologies to support HID Mobile Access® To support niche low security applications, an option is also available to read credentials with ISO14443 unique identification (UID) number To further simplify the ordering process, Wiegand output and pigtail connection are standardised

The iCLASS Key II provides the security and convenience of iCLASS 13.56 Mhz contactless smart card technology in a molded plastic key fob that is durable in harsh environments. This credential can be placed on a key ring or lanyard for access control applications that do not require a Photo ID. iCLASS was specifically designed to make access control more powerful, more versatile, and more secure. iCLASS 13.56 MHz read/write contactless smart card technology provides versatile interoperability in applications such as access control, network log-on security, cashless vending, time and attendance, event management and biometric identification.

HID’s iCLASS® 13.56 MHz Embeddable read/write contactless smart card technology can be used for diverse applications such as access control, biometrics, cashless vending, public transportation, airline ticketing and customer loyalty programs.  Multiple, securely separated files enable numerous applications and support future growth. The iCLASS Prox Embeddable Card integrates iCLASS 13.56 MHz contactless read/write smart card and 125 kHz proximity technology on a single card with the ability to embed a smart chip of your choice along with adding a magnetic stripe, barcode, and anti-counterfeiting features including custom artwork or a photo identification directly on the credential.

iClass SE readers are highly adaptable and secure high frequency access control solution. It provides multi-layered security beyond the card technology, providing added protection to identity data using SIOs.

Multi-Protocol: FIDO U2F and 2.0 – Securely accesses online and cloud services such as Azure Active Directory, G Suite or DropBox Business without preinstalled software PIV – Utilises Defence grade authentication OATH – Leverages open universal authentication standard Benefits: Is part of the HID High Assurance Certificate Authority and Authentication Solutions Can be used with standard NFC and contact smart card reader Features: Available in standard ISO smart card format in dual interface configuration Made of durable composite PET/PVC plastic that enables high quality printing with recommended HID Secure Issuance card printers Available as white cards or with customer specific artwork with advanced security features to prevent visual counterfeiting Physical Access Options: Supports SEOS™ MIFARE Plus® and MIFARE® DESFire® emulation with optional HID and Indala® Prox 

The new iCLASS SE Encoder, a desktop solution and developer toolkit (DTK) from HID Global enables organisations to encode and instantly issue cards using a single device. The multi-technology encoder makes it easier for customers to migrate from current technologies to the higher security, adaptability and portability of the company’s iCLASS SE access control platform. The solution gives organisations the convenience of encoding a broad range of current and future technologies, with the option for customers to create and manage keys and configure readers locally or through HID Global’s iCLASS and SE Elite programme. “Migrating current systems to operate with our iCLASS SE platform has never been easier with the new iCLASS Encoder that empowers customers to encode and format an extensive range of credential technologies, on demand, through an easy and straightforward process,” said Helmut Dansachmueller, vice president of product marketing, credentials and embedded technologies with HID Global. “HID Global’s goal with the encoder is to give users the technology flexibility and confidence in their access control systems investments as they move to high frequency and future technologies.”   The iCLASS SE Encoder provides an entirely open solution and that allows organisations to encode multiple credential technologies, including both genuine HID and third-party credentials, in order to upgrade existing card populations for use with iCLASS SE platform readers. For maximum interoperability, the solution supports Seos, iCLASS SE, standard iCLASS, MIFARE Classic and MIFARE DESFire EV1. The encoder also supports 125 MHz HID Prox for encoding Prox credentials as well as migrating from HID Prox to high frequency technologies. Users can seamlessly and easily migrate from one technology to another by simply extracting access control data from an existing card and writing it to the new credential, without having to manually input data or understand encoding details. For even higher security, users can “wrap” their access control data within a Secure Identity Object (SIO) and then write it back to the same card.  Based on open architecture, the encoder enables SIOs to be added to the full range of supported cards, including MIFARE and DESFire credentials. The HID Global Developer Tool Kit (DTK) for the iCLASS SE Encoder Platform is designed for systems integrators, OEM’s and solution providers who wish to integrate contactless encoding capabilities into their products and leverage the advantages of the iCLASS SE ecosystem. Key features: Programme standard security or Elite credentials Securely manage credential keys Multiple format support Programme Genuine HID or third-party credentials by downloading appropriate Encoder Credits Developer Tool Kit (DTK) provides all the necessary tools, documentation and developer resources to allow integration of the iCLASS SE Encoder into third party applications. HID Global is also introducing a flexible credential encoding applet structure that is based on an easy-to-manage credit system. Users install only the applets they require for the technology credentials they currently need, and can add applets to support other existing or future technology credentials over time. In addition, the iCLASS SE Encoder is field-programmable and upgradeable for added versatility.   The encoder is part of HID Global’s award-winning iCLASS SE platform, which empowers users to implement a combination of credential technology, traditional smart cards and smartphones that meet the specific needs of their access control system. HID Global also plans to offer credential encoding capabilities via its FARGO printer line and its HID Secure Identity Services portal. For more information visit: https://www.hidglobal.com/developer-center/iclass-se-encoder-platform

Supports mutual use of an SIO Technology-enabled solution for MIFARE DESFire EV1 and HITAG1 combined in one physical credential Supports iCLASS SE platform, providing superior privacy protection with AES standard cryptography for data authenticity and privacy through the multi-layered security of HID Global´s SIO data model Complies with ISO/IEC standards for thickness and use with all direct to card or thermal transfer printers Available with magnetic stripe Can be produced with visual security and anti-counterfeiting features or a custom logo via HID Global Secure Identity Services

HID® Signo™ Readers bring today’s organizations into the future of access control. Beyond its sleek, modern design, this cutting-edge reader platform provides flexible, reliable performance with support for an unmatched range of credential technologies. HID Signo extends the leadership position of HID Global in the access control industry while providing unrivaled security and powerful performance with the addition of new features to better fortify facilities and beyond. Upgrading your access control readers to HID Signo ensures convenience and security today while preparing you for whatever comes tomorrow—this is the signature promise of Signo. Key Features Highly Versatile - Support for the widest range of credential technologies, including HID Mobile Access via native Bluetooth and Near Field Communication (NFC) capability. Also features Apple’s Enhanced Contactless Polling (ECP) to support credentials in the Apple Wallet. Unparalleled Performance - Ultra secure storage of cryptographic keys on certified secure element hardware, plus a new surface detection feature that allows the reader to automatically recalibrate and optimize read range performance. Connected to the Future - All readers include out-of-the-box support for Open Supervised Device Protocol (OSDP) for secure bidirectional communication. Each reader is also designed to be connected and managed remotely without “sneakernet” or the need to be physically touched.

AES 128/256 bit data encryption Supports OSDP, OSDP Secure Channel, FICAM government profiles, keypads, biometric readers, Wiegand, clock and data, magnetic stripe, F/2F and supervised F/2F reader technologies RS-485 host connectivity High performance, reliable platform enables use of hardware with HID Mercury OEM partners’ software solutions Supports OSDP and Secure Channel protocol for device connectivity, file transfer and extended applications such as biometrics and federal government profile support Embedded crypto memory chip provides secured layer of encryption to protect sensitive data

Update Reader Firmware in the Field – Empower reader technicians with the capability to introduce new functionality and security enhancements to HID readers post installation via firmware update Load HID Elite and Mobile Keys – Securely authenticate and manage HID reader keys, including the capability to roll standard to HID Elite custom authentication keys for additional security Enable and Disable Credential Technologies – Close the gap and complete a migration to secure credential technologies (such as Seos® and Mifare DESFire EV2) by disabling reader support for legacy credential technologies Personalise Every Reader – Adjust LED colours to match up with corporate themes or enable powerful features such as Intelligent Power Management to reduce power consumption

Simultaneously supports low and high frequency credentials, including iCLASS® Seos®, HID Prox®, iCLASS SE®, MIFARE® Classic and MIFARE DESFire® EV1; supports NFC and Bluetooth for mobile devices Firmware is field-upgradable to extend the lifecycle of customer installations Supports strictest security standards such as EAL5+ to ensure regulatory compliance and restricted access to corporate resources Offers third-party products the ability to securely interoperate with the iCLASS SE® platform, connecting access control across the organisation Host-driven commands enable read/write to secure areas of smart devices Flexible configuration fits a variety of applications Ultra low power mode for battery-operated devices Adjustable Bluetooth Smart read settings control overall power and read range of Mobile IDs, enabling flexibility for both close proximity “tap” and longer range “Twist and Go” activation Directional antenna enables long-range reading distances up to 2m in correct orientation

As an embedded computer packaged in a small form factor with pre-installed, updatable firmware, the pivCLASS® authentication modules (PAM) enables physical access control systems (PACS) upgrades to FIPS 201 compliance by performing the FIPS 140-certified cryptographic functions the typical PACS panel cannot. pivCLASS authentication module supports a range of commercially available contact, contactless and biometric readers, including the extensive line of pivCLASS® readers.

Ability to print up to 230 cards per hour (YMCK with transfer) Patent-pending iON™ technology for unparalleled printer readiness and intelligent temperature control Retransfer-based wasteless lamination Simultaneous print and retransfer GreenCircle® certified energy savings

Uses digital certificates protected by a PIN for client authentication Leverages platform support for smart card authentication Simplifies the deployment of credentials ensuring only authorised people can access sensitive data while enabling organisations to prevent data theft Enables organisations to provide instant, secure data access to visitors, temporary employees, remote workforces, etc. Utilises the same ActivID Credential Management System for both Crescendo Mobile and physical Crescendo cards Compatible with existing infrastructure and applications supporting smart cards, including desktop operating systems and applications Bluetooth and NCF compatible Features: Personal Identity Verification (FIPS 201) card edge that allows the virtual credential to be compatible with the built in Windows PIV minidriver for basic authentication and signature or with ActivClient for full access to all PIV certificates NFC local issuance and credential use supported in Android devices Bluetooth local issuance and credential use supported in Android and iOS devices Remote issuance supported in Android and iOS devices

Patent-pending iON technology for unparalleled printer readiness, intelligent temperature control and energy savings Highly secure and cost-effective driverless card printing Retransfer printing in true 600 dpi via dye-sublimation for exceptional image quality Flat card printing for quiet and significantly expedited issuance when compared to embossing solutions Thoughtful design elements that foster low maintenance and easy access to card path

The SIO processor enables devices to become TIP nodes and integrate easily and securely to HID’sTrusted Identity Platform. SIOs can reside on any card technology, microprocessor-based cards, NFC smartphones, USB tokens, computer drives and other formats. As part of HID’s SIO-enabled ecosystem, the SIO Processor is a technology-independent virtualized interpreter that enables reader manufacturers, developers and system integrators to quickly and easily integrate SIO and allows them to make their devices TIP nodes.

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware

Provides efficient, standards-based criminal and civil enrollment capabilities to a wide range of law enforcement and governmental agencies, as well as commercial enterprises Designed to support the rapid, high-quality capture of multiple biometrics, Livescan Management Software’s intuitive user interface is easy to access and use, requires minimal training and incorporates time-saving features

Consisting of a fully functional hardware and firmware solution accompanied by an API integration package, HID Aero™ Controllers are ideal for access control providers who want to build solutions for small- to medium-size customers but do not want to incur the ongoing costs of designing, manufacturing, and maintaining panel hardware. The HID Aero controller product line is the successor to HID VertX® controllers. Key benefits of HID Aero include: Flexible—A future-proof platform that can protect end-user investment by its ability to adapt and grow to meet future needs. With its IP network base, HID Aero Controllers can connect to the internet or cloud-based systems for updates and offer interoperability with security systems. HID Aero also introduces powerful remote management capabilities for HID readers, enabling the simultaneous update of credential compatibilities for all HID Readers attached to an individual intelligent controller, at the touch of a button. Secure—Protect against costly exploits, vulnerabilities, and downtime with end-to-end security from credential to host, reducing attack vectors for system-level protection. HID Aero safeguards the entire security chain an identity travels along during the authentication process with TLS running in a FIPS 140-2 approved operating environment, OSDP secure channel and AES-256 encrypted communication. Trusted—Based on trusted HID Mercury™ technology to leverage the knowledge and expertise gained from 4+ million panels installed globally. HID Aero is also backwards compatible with VertX IO modules to protect current investments with HID Global. Future Proof and Highly Adaptable - HID Aero Controllers are built with openness and flexibility at their core. This open approach gives users unmatched freedom to choose from a wide range of HID-approved system manufacturers, as HID Aero is supported by a trusted network of software providers. This ecosystem reduces total cost of ownership by enabling users to migrate their existing systems over the entire deployment lifecycle. To enable our ecosystem of partners, HID Aero comes with a powerful API toolkit and full access to the developer environment. Beyond the freedom of choice, HID Aero is a future-proof controller platform that can adapt to the growing needs of small and medium-size organizations. Because HID Aero is IP-based, the controllers can connect to on-premise or cloud-based systems to perform access control configuration, command and control, and monitor system status. This also enables interoperability with parallel security systems. Furthermore, HID Aero Controllers run on Linux, an open source and standardized operating system that allows for quicker patch management as compared to proprietary systems. OSDP Verified - HID Aero controllers are SIA OSDP verified and provide interoperable solutions for open architecture access control applications. This further demonstrates that HID Physical Access Control Solutions comply to the Open Supervised Device Protocol (OSDP) standard, which reassures specifiers that they offer the intended interoperability and security. 

Meets the highest Payment Card Industry standards for Hardware Security Modules (HSMs) serving the financial market Supports the latest Visa® and Mastercard® requirements for contactless transactions which includes Offline Data Authentication (ODA) Efficiently designed for easy storage in a standard 1U 19” rack mount cabinet Designed to meet the unique security needs of financial card instant issuance, the HSM XT integrates with HID® TRISM™ Financial Instant Issuance Software

Smart and secure authenticators – Allows employees and mobile workforce secure access to data and cloud, using strong authentication in a mobile device. Reduce total cost of ownership / increase convenience – Combines the security of a smart card with a built-in USB reader. Integrated end to end solution – ActivKey SIM is fully interoperable with other HID Global® authentication solutions, delivering an out-of-the-box experience. Easy to deploy – IT organisations can deploy a single device, replacing a USB reader and a smart card High-capacity, high-performance smart card - Support credentials for the most demanding applications (PKI digital certificates, digital signature and encryption services, and one-time password authentication services) Product features: Smart card reader architecture: PC/SC, CCID drivers, ISO 7816 interface with T0 and T1 protocols. USB 2.0 (high speed, full speed, low speed). Connector type A. Multi-color LED - RED: device is connected to the host, GREEN: smart card interface is activated, Blinking (green/orange): device is communicating with the SIM card

Smart cards incorporating iCLASS + MIFARE Classic or iCLASS + MIFARE DESFire EV1, are great for organisations with multiple reader types and for those transitioning from one smart card technology to another Options for smart cards include: Magnetic stripe, Contact smart chip (an embeddable card body or embedded by HID), PVC or composite card body, Visual security features, Corporate 1000, iCLASS Elite HID can also embed a wide range of commercially available contact chips, or customers can select HID's off-the-shelf Crescendo® multi-technology smart card, providing strong authentication options with logical access systems With options such as magnetic stripe and contact smart card chips, each card can be programmed based on customer specifications and can be fully personalised with a wide range of customisation offered through HID's Identity on Demand service

The SIO Processor supports new SIO-enabled credentials based on a variety of technologies, such as iCLASS SE, iCLASS Elite and MIFARE Classic. It can also be configured to support standard iCLASS, providing compatibility with existing installations or card deployments. The SIO Processor allows developers to easily embed it into a new reader design using the surface mount technology chip, or integrate it into an existing reader design /infrastructure using the convenient pre-packaged ID-1/ID-000 card.

HID Global’s iCLASS Seos® smart cards enable the ability to carry dual identities in a single credential to offer a true “one card” solution for physical and logical access control applications. The credentials can be programmed to work immediately for opening doors and accessing to IT resources since they are provisioned to support other applications, including One-Time Password authentication (OTP) for network login. Key benefits: Versatile strong authentication– The solution of choice for companies looking for state-of-the-art access control and multi-application smart cards Increased interoperability – Part of the iCLASS SE® platform, the open and standards-based solution supports future technologies and can store data for multiple applications that are independently protected (as part of a firewalled architecture). Effective risk mitigation – Provides protection against attacks and timely remediation. Greater Return on Investment (ROI) – Programmable cards are based on a reliable platform. Includes a lifetime warranty. Comprehensive support– Out-of-the-box support enables customers to seamlessly create and manage secure identities during the life span of the card.

Capture fingerprint and palm print images through a non-hardware dependent biometric SDK Workflow management allows implementation of a structured process for biometric capture that matches the application requirement Workflows for ID Flats, ten-print, single finger, dual finger and palm capture, including handling of pre-captured fingerprints and/or missing fingers Workflow parameters and workflow steps can be changed and controlled dynamically at processing time, thus enabling a flexible adaption of application to all customer specific processing requirements User application receives status and error message during the capture process Configurable image file formats for PNG, WSQ, BMP, JPEG Flexible plug-ins infrastructure including out of the box implementations for quality and sequence check: standards for NFIQ (500 ppi) and Aware (500 + 1000 ppi)

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications Robust Network Security - Supports mutual authentication sing TLS 1.2 while running in a FIPS 140-2 approved operating environment on the intelligent controller IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware