HID Door security

Update Reader Firmware in the Field – Empower reader technicians with the capability to introduce new functionality and security enhancements to HID readers post installation via firmware update Load HID Elite and Mobile Keys – Securely authenticate and manage HID reader keys, including the capability to roll standard to HID Elite custom authentication keys for additional security Enable and Disable Credential Technologies – Close the gap and complete a migration to secure credential technologies (such as Seos® and Mifare DESFire EV2) by disabling reader support for legacy credential technologies Personalise Every Reader – Adjust LED colours to match up with corporate themes or enable powerful features such as Intelligent Power Management to reduce power consumption

Simultaneously supports low and high frequency credentials, including iCLASS® Seos®, HID Prox®, iCLASS SE®, MIFARE® Classic and MIFARE DESFire® EV1; supports NFC and Bluetooth for mobile devices Firmware is field-upgradable to extend the lifecycle of customer installations Supports strictest security standards such as EAL5+ to ensure regulatory compliance and restricted access to corporate resources Offers third-party products the ability to securely interoperate with the iCLASS SE® platform, connecting access control across the organisation Host-driven commands enable read/write to secure areas of smart devices Flexible configuration fits a variety of applications Ultra low power mode for battery-operated devices Adjustable Bluetooth Smart read settings control overall power and read range of Mobile IDs, enabling flexibility for both close proximity “tap” and longer range “Twist and Go” activation Directional antenna enables long-range reading distances up to 2m in correct orientation

Consisting of a fully functional hardware and firmware solution accompanied by an API integration package, HID Aero™ Controllers are ideal for access control providers who want to build solutions for small- to medium-size customers but do not want to incur the ongoing costs of designing, manufacturing, and maintaining panel hardware. The HID Aero controller product line is the successor to HID VertX® controllers. Key benefits of HID Aero include: Flexible—A future-proof platform that can protect end-user investment by its ability to adapt and grow to meet future needs. With its IP network base, HID Aero Controllers can connect to the internet or cloud-based systems for updates and offer interoperability with security systems. HID Aero also introduces powerful remote management capabilities for HID readers, enabling the simultaneous update of credential compatibilities for all HID Readers attached to an individual intelligent controller, at the touch of a button. Secure—Protect against costly exploits, vulnerabilities, and downtime with end-to-end security from credential to host, reducing attack vectors for system-level protection. HID Aero safeguards the entire security chain an identity travels along during the authentication process with TLS running in a FIPS 140-2 approved operating environment, OSDP secure channel and AES-256 encrypted communication. Trusted—Based on trusted HID Mercury™ technology to leverage the knowledge and expertise gained from 4+ million panels installed globally. HID Aero is also backwards compatible with VertX IO modules to protect current investments with HID Global. Future Proof and Highly Adaptable - HID Aero Controllers are built with openness and flexibility at their core. This open approach gives users unmatched freedom to choose from a wide range of HID-approved system manufacturers, as HID Aero is supported by a trusted network of software providers. This ecosystem reduces total cost of ownership by enabling users to migrate their existing systems over the entire deployment lifecycle. To enable our ecosystem of partners, HID Aero comes with a powerful API toolkit and full access to the developer environment. Beyond the freedom of choice, HID Aero is a future-proof controller platform that can adapt to the growing needs of small and medium-size organizations. Because HID Aero is IP-based, the controllers can connect to on-premise or cloud-based systems to perform access control configuration, command and control, and monitor system status. This also enables interoperability with parallel security systems. Furthermore, HID Aero Controllers run on Linux, an open source and standardized operating system that allows for quicker patch management as compared to proprietary systems. OSDP Verified - HID Aero controllers are SIA OSDP verified and provide interoperable solutions for open architecture access control applications. This further demonstrates that HID Physical Access Control Solutions comply to the Open Supervised Device Protocol (OSDP) standard, which reassures specifiers that they offer the intended interoperability and security. 

The SIO processor enables devices to become TIP nodes and integrate easily and securely to HID’sTrusted Identity Platform. SIOs can reside on any card technology, microprocessor-based cards, NFC smartphones, USB tokens, computer drives and other formats. As part of HID’s SIO-enabled ecosystem, the SIO Processor is a technology-independent virtualized interpreter that enables reader manufacturers, developers and system integrators to quickly and easily integrate SIO and allows them to make their devices TIP nodes.

As an embedded computer packaged in a small form factor with pre-installed, updatable firmware, the pivCLASS® authentication modules (PAM) enables physical access control systems (PACS) upgrades to FIPS 201 compliance by performing the FIPS 140-certified cryptographic functions the typical PACS panel cannot. pivCLASS authentication module supports a range of commercially available contact, contactless and biometric readers, including the extensive line of pivCLASS® readers.

Ability to print up to 230 cards per hour (YMCK with transfer) Patent-pending iON™ technology for unparalleled printer readiness and intelligent temperature control Retransfer-based wasteless lamination Simultaneous print and retransfer GreenCircle® certified energy savings

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware

Provides efficient, standards-based criminal and civil enrollment capabilities to a wide range of law enforcement and governmental agencies, as well as commercial enterprises Designed to support the rapid, high-quality capture of multiple biometrics, Livescan Management Software’s intuitive user interface is easy to access and use, requires minimal training and incorporates time-saving features

Meets the highest Payment Card Industry standards for Hardware Security Modules (HSMs) serving the financial market Supports the latest Visa® and Mastercard® requirements for contactless transactions which includes Offline Data Authentication (ODA) Efficiently designed for easy storage in a standard 1U 19” rack mount cabinet Designed to meet the unique security needs of financial card instant issuance, the HSM XT integrates with HID® TRISM™ Financial Instant Issuance Software

Smart cards incorporating iCLASS + MIFARE Classic or iCLASS + MIFARE DESFire EV1, are great for organisations with multiple reader types and for those transitioning from one smart card technology to another Options for smart cards include: Magnetic stripe, Contact smart chip (an embeddable card body or embedded by HID), PVC or composite card body, Visual security features, Corporate 1000, iCLASS Elite HID can also embed a wide range of commercially available contact chips, or customers can select HID's off-the-shelf Crescendo® multi-technology smart card, providing strong authentication options with logical access systems With options such as magnetic stripe and contact smart card chips, each card can be programmed based on customer specifications and can be fully personalised with a wide range of customisation offered through HID's Identity on Demand service

Smart and secure authenticators – Allows employees and mobile workforce secure access to data and cloud, using strong authentication in a mobile device. Reduce total cost of ownership / increase convenience – Combines the security of a smart card with a built-in USB reader. Integrated end to end solution – ActivKey SIM is fully interoperable with other HID Global® authentication solutions, delivering an out-of-the-box experience. Easy to deploy – IT organisations can deploy a single device, replacing a USB reader and a smart card High-capacity, high-performance smart card - Support credentials for the most demanding applications (PKI digital certificates, digital signature and encryption services, and one-time password authentication services) Product features: Smart card reader architecture: PC/SC, CCID drivers, ISO 7816 interface with T0 and T1 protocols. USB 2.0 (high speed, full speed, low speed). Connector type A. Multi-color LED - RED: device is connected to the host, GREEN: smart card interface is activated, Blinking (green/orange): device is communicating with the SIM card

Patent-pending iON technology for unparalleled printer readiness, intelligent temperature control and energy savings Highly secure and cost-effective driverless card printing Retransfer printing in true 600 dpi via dye-sublimation for exceptional image quality Flat card printing for quiet and significantly expedited issuance when compared to embossing solutions Thoughtful design elements that foster low maintenance and easy access to card path

HID Global’s iCLASS Seos® smart cards enable the ability to carry dual identities in a single credential to offer a true “one card” solution for physical and logical access control applications. The credentials can be programmed to work immediately for opening doors and accessing to IT resources since they are provisioned to support other applications, including One-Time Password authentication (OTP) for network login. Key benefits: Versatile strong authentication– The solution of choice for companies looking for state-of-the-art access control and multi-application smart cards Increased interoperability – Part of the iCLASS SE® platform, the open and standards-based solution supports future technologies and can store data for multiple applications that are independently protected (as part of a firewalled architecture). Effective risk mitigation – Provides protection against attacks and timely remediation. Greater Return on Investment (ROI) – Programmable cards are based on a reliable platform. Includes a lifetime warranty. Comprehensive support– Out-of-the-box support enables customers to seamlessly create and manage secure identities during the life span of the card.

The SIO Processor supports new SIO-enabled credentials based on a variety of technologies, such as iCLASS SE, iCLASS Elite and MIFARE Classic. It can also be configured to support standard iCLASS, providing compatibility with existing installations or card deployments. The SIO Processor allows developers to easily embed it into a new reader design using the surface mount technology chip, or integrate it into an existing reader design /infrastructure using the convenient pre-packaged ID-1/ID-000 card.

Capture fingerprint and palm print images through a non-hardware dependent biometric SDK Workflow management allows implementation of a structured process for biometric capture that matches the application requirement Workflows for ID Flats, ten-print, single finger, dual finger and palm capture, including handling of pre-captured fingerprints and/or missing fingers Workflow parameters and workflow steps can be changed and controlled dynamically at processing time, thus enabling a flexible adaption of application to all customer specific processing requirements User application receives status and error message during the capture process Configurable image file formats for PNG, WSQ, BMP, JPEG Flexible plug-ins infrastructure including out of the box implementations for quality and sequence check: standards for NFIQ (500 ppi) and Aware (500 + 1000 ppi)

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications Robust Network Security - Supports mutual authentication sing TLS 1.2 while running in a FIPS 140-2 approved operating environment on the intelligent controller IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware