HID Electronic security systems

Ergonomic design, tailored to the needs of booking officers Convenient layout of all user control elements and consumables Locked physical protection for scanner, monitor, keyboard and PC Long life, industrial-grade kiosk designed for harsh environments Accommodates all FBI certified forensic-quality L Scan® palm print and Guardian® family ten-print fingerprint scanners

Ergonomically designed to meet the needs of law enforcement professionals Provides secure protection for scanner, monitor, keyboard and PC Keyed lock User-friendly placement of control elements and consumable Durable, industrial-grade kiosk Accommodates most HID Guardian™ tenprint readers, as well as HID Crossmatch L Scan™ palm scanners

Serving the needs of the military, civilian governments, NGOs and enterprise alike, a custom-configured portable kit utilising COTS components is a quick and easy way to architect enrollment or verification solution without sacrificing performance A popular jumpkit ideal for FBI Appendix F compliant livescan enrollment, utilises versatile HID Guardian 200 ten-print device with HID MOBS software Optional certified peripherals, such as mugshot camera can be added for in-field versatility The HID Crossmatch L Scan palm print scanner could also be used Similarly, the jump kit could be adapted for use in hostile environments by adding ruggedised HID Guardian R ten-print scanner and durable laptop For high performing portability with low profile, build in a capacitive HID NOMAD 60 Wireless Reader, supporting full FBI Appendix F livescan ten print submissions, with thin laptop or tablet to create a highly portable, compact jumpkit

Compact and convenient – All the power of iCLASS® Seos® technology packed into a convenient, pocket-size key fob, designed to be neatly attached to a key ring. Enabling secure, versatile, and open standards-based access control Highly secure – Seos is Secure Identity Object (SIO)-enabled, allowing for multi-layered security beyond the card technology and protecting identity data from unauthorised access Certified – Based on Common Criteria (CC) EAL 5+ hardware platform, ensuring a clear chain of evidence that the platform’s security attributes have been rigorously tested and independently verified Multi-application – Part of the iCLASS SE® platform, an open and standards-based solution that supports data storage for multiple applications beyond traditional access control such as secure printing, time and attendance, cashless vending and biometric templates Heightened privacy protection – Seos offers best-in-class data and privacy protection by incorporating mutual authentication and secure messaging mechanisms into stringent best practices for data protection Greater durability – Molded housing for maximum protection in harsh environments, capable of withstanding elevated operating temperatures when compared with cards Compatibility - Supports iCLASS SE single-technology and iCLASS SE Express reader deployments

Custom Rules Processing - Use X200 in conjunction with custom rules engine on X1100 to create elaborate rules for handling input states Supervised/Unsupervised - Inputs Supervised inputs can support custom A-to-D conversion IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts Open Architecture – Work with a variety of software partners over time without any re-investment in hardware

The CP600 Programmer is designed for on-site programming of access control and user data onto MIFARE  DESFire EV1 Credentials for use with iCLASS migration readers. It allows access control data formats and user data fields to be programmed directly into MIFARE DESFire contactless smart cards.

Highly secure – Seos is Secure Identity Object (SIO)-enabled, allowing for multilayered security beyond the card technology and protecting identity data from unauthorised access Certified – Based on Common Criteria (CC) EAL 5+ hardware platform, ensuring a clear chain of evidence that the platform’s security attributes have been rigorously tested and independently verified High durability – All the power of Seos technology packed into a robust ABS shell construction that provides protection in harsh environments Slot-punched – Simply attach to a lanyard with ease for swift deployment, no plastic cardholders needed Multi-application – Part of the iCLASS SE platform, an open and standards-based solution that supports data storage for multiple applications beyond traditional access control such as secure printing, time and attendance, cashless vending and biometric templates Heightened privacy protection – Seos offers best-in-class data and privacy protection by incorporating mutual authentication and secure messaging mechanisms into stringent best practices for data protection

Custom Rules Processing - Use X300 in conjunction with custom rules engine on X1100 to create elaborate rules for handling input states Elevator Control - Use in conjunction with X1100 elevator processing engine to control elevator floor access IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts Open Architecture – Work with a variety of software partners over time without any re-investment in hardware

ETL (Extract-Transform-Load): Easily collect data from disparate PACS Risk Evaluation: Use pre-built Risk Metrics to uncover insider threats and security vulnerabilities using Data Analyst Toolbox Dashboards and Reports: Review results on the Analytics Dashboard or create with full-featured reporting suite Actions: Use the Analytics Best Practice Rule Set to automate responses to a host of common security issues or create custom rules with intuitive rule editor. Revoke access, assign training, send notifications and more

No need for additional readers and other equipment; eliminates related software development costs Trusted tags are available in a variety of form factors and can be attached to or embedded into nearly any object Services provide “small data analytics” about each transaction, delivering deeper insights into consumer behaviors Data read from trusted tags has additional security and privacy attributes that change on every tap, making the taps uncloneable Services also enable authentication and brand protection, global supply chain management and a wide variety of additional Internet of Things (IoT) applications Interactive marketing campaigns, home health care services, time-and-attendance and other “proof of presence” applications are an ideal match for HID Trusted Tag Services

Interoperable with a wide range of credential technologies such as Seos® MIFARE DESFire® EV1/EV2, iCLASS SE, iCLASS® and more Supports mobile devices utilizing Seos, enabling a new class of portable identity credentials that can be securely provisioned to smartphones, wearables and other smart devices The iCLASS SE platform’s Secure Identity Object® (SIO®) data model provides an extra layer of encryption for additional protection of identity data Capable of supporting Open Supervised Device Protocol (OSDP) for secure bi-directional communication between reader and controller

A modern biometric identity software that can be used to enroll, identify and verify individuals using biometric and biographical data The integrated touchscreen in the user interface provides easy operation and data entry to capture essential information On-board biometric matching enables watchlists to be quickly and easily checked against known subjects Biometric images captured by MOBS (Mission Oriented Biometric Software) meet all major image quality standards MOBS can be localised into any language, ensuring convenient usage and a better user experience, resulting in a more efficient capture process

Simultaneously supports low and high frequency credentials, including iCLASS® Seos®, HID Prox®, iCLASS SE®, MIFARE® Classic and MIFARE DESFire® EV1; supports NFC and Bluetooth for mobile devices Firmware is field-upgradable to extend the lifecycle of customer installations Supports strictest security standards such as EAL5+ to ensure regulatory compliance and restricted access to corporate resources Offers third-party products the ability to securely interoperate with the iCLASS SE® platform, connecting access control across the organisation Host-driven commands enable read/write to secure areas of smart devices Flexible configuration fits a variety of applications Ultra low power mode for battery-operated devices Adjustable Bluetooth Smart read settings control overall power and read range of Mobile IDs, enabling flexibility for both close proximity “tap” and longer range “Twist and Go” activation Directional antenna enables long-range reading distances up to 2m in correct orientation

Improves front desk efficiency by automating visitor check-in processes, offloading visitor pre-registration to end users Delivers high quality visitor experience with the ability to self-check-in using visitor kiosk and minimising wait times Elevates brand experience with personalised branding on visitor kiosk Enhances security via automated vetting of visitors through multiple security checks prior to check-in Facilitates better management of visitors by electronically maintaining details and visit history Automates compliance as it relates to visitor access rules and policy-based registration Lowers TCO by minimising installation and IT support costs as a web-based application 

A cloud based Software as a Service (SaaS) to centrally manage BEEKs™ BLE beacons via Blufi™ BLE to WiFi gateways Monitor beacon status and update configuration remotely Optimise building utilisation, emergency mustering etc. Find assets quickly in buildings or across a campus using Real Time Location Services (RTLS) Check performance status of motorised equipment remotely and alert on failures  

Utilises pre-defined rules and workflows for on-/off-boarding of identities, access provisioning/de-provisioning and access change management Allows users to manage various details of a physical identity including access card information, biographic and biometric details, results of security checks and logs of historical access usage Allows users to create spatial hierarchy of locations (sites), the underlying buildings, floors and associated areas for better access management Provides a central location to search and assign access levels for an identity across disparate physical access control systems (PACS) and specify details such as time schedule of access (24x7, business hours) Enables employees to make multiple physical security requests, such as new physical access requests and badge requests, using a self-service portal Aggregates access level information from disparate PACS and allows users to manage additional details typically not available in PACS, such as risk level, area owner, multiple approvers and pre-requisites for access (such as training for critical areas) Allows creation of access profiles, which automates assigning physical access using common identity attributes such as role, location and  department Allows authorised personnel to immediately terminate physical access of identities, using urgent termination, avoiding termination delays by HR personnel Maintains a complete audit trail of all transactions executed within the system and between HID SAFE Enterprise and external systems Delivers pre-defined reports based on access records and logs of identities for compliance reporting and security planning 

HID Global, the worldwide leader in trusted identity solutions, has announced the most feature-rich implementation of the latest MIFARE DESFire EV3 credential. This new access control credential based on NXP MIFARE DESFire EV3 delivers this technology’s full range of advanced security and privacy capabilities and reinforces them with HID’s powerful model for identity data protection. This HID credential provides AES128 encryption, a secure channel for protecting card data from man-in-the-middle attacks, and a random unique identifier (UID) for protecting user privacy. The credential works with readers based on MIFARE DESFire EV1 and EV2 products and is interoperable with HID® Signo™, iCLASS SE®, and multiCLASS SE® readers. In addition to choosing standard or custom security profiles to meet their specific needs, users can take advantage of HID’s Secure Identity Object™ (SIO®) model that protects a credential’s identity data through key diversification, authentication signatures, and encryption. Users can create multi-technology cards with HID’s credential based on NXP MIFARE DESFire EV3 to provide a smooth migration path from vulnerable legacy, low-frequency 125 kHz-based systems to modern and secure credential technology. What are the benefits of HID Global’s MIFARE DESFire EV3 credential solution? Feature-rich security that offers profile choices to fit your needs Advanced security features that aren’t available elsewhere, such as modern encryption, mutual  authentication and secure messaging and SIOs Key management and card formatting that adhere to the highest standards of data protection and governance Click here for more information.

Designed to simplify the selection process by offering a cost-effective fixed configuration that combines Seos physical card credential compatibility along with Bluetooth Low Energy (BLE) and Near-Field-Communication (NFC) technologies to support HID Mobile Access® To support niche low security applications, an option is also available to read credentials with ISO14443 unique identification (UID) number To further simplify the ordering process, Wiegand output and pigtail connection are standardised

Update Reader Firmware in the Field – Empower reader technicians with the capability to introduce new functionality and security enhancements to HID readers post installation via firmware update Load HID Elite and Mobile Keys – Securely authenticate and manage HID reader keys, including the capability to roll standard to HID Elite custom authentication keys for additional security Enable and Disable Credential Technologies – Close the gap and complete a migration to secure credential technologies (such as Seos® and Mifare DESFire EV2) by disabling reader support for legacy credential technologies Personalise Every Reader – Adjust LED colours to match up with corporate themes or enable powerful features such as Intelligent Power Management to reduce power consumption

Simultaneously supports low and high frequency credentials, including iCLASS® Seos®, HID Prox®, iCLASS SE®, MIFARE® Classic and MIFARE DESFire® EV1; supports NFC and Bluetooth for mobile devices Firmware is field-upgradable to extend the lifecycle of customer installations Supports strictest security standards such as EAL5+ to ensure regulatory compliance and restricted access to corporate resources Offers third-party products the ability to securely interoperate with the iCLASS SE® platform, connecting access control across the organisation Host-driven commands enable read/write to secure areas of smart devices Flexible configuration fits a variety of applications Ultra low power mode for battery-operated devices Adjustable Bluetooth Smart read settings control overall power and read range of Mobile IDs, enabling flexibility for both close proximity “tap” and longer range “Twist and Go” activation Directional antenna enables long-range reading distances up to 2m in correct orientation

Patent-pending iON technology for unparalleled printer readiness, intelligent temperature control and energy savings Highly secure and cost-effective driverless card printing Retransfer printing in true 600 dpi via dye-sublimation for exceptional image quality Flat card printing for quiet and significantly expedited issuance when compared to embossing solutions Thoughtful design elements that foster low maintenance and easy access to card path

Provides efficient, standards-based criminal and civil enrollment capabilities to a wide range of law enforcement and governmental agencies, as well as commercial enterprises Designed to support the rapid, high-quality capture of multiple biometrics, Livescan Management Software’s intuitive user interface is easy to access and use, requires minimal training and incorporates time-saving features

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware

Smart cards incorporating iCLASS + MIFARE Classic or iCLASS + MIFARE DESFire EV1, are great for organisations with multiple reader types and for those transitioning from one smart card technology to another Options for smart cards include: Magnetic stripe, Contact smart chip (an embeddable card body or embedded by HID), PVC or composite card body, Visual security features, Corporate 1000, iCLASS Elite HID can also embed a wide range of commercially available contact chips, or customers can select HID's off-the-shelf Crescendo® multi-technology smart card, providing strong authentication options with logical access systems With options such as magnetic stripe and contact smart card chips, each card can be programmed based on customer specifications and can be fully personalised with a wide range of customisation offered through HID's Identity on Demand service

Capture fingerprint and palm print images through a non-hardware dependent biometric SDK Workflow management allows implementation of a structured process for biometric capture that matches the application requirement Workflows for ID Flats, ten-print, single finger, dual finger and palm capture, including handling of pre-captured fingerprints and/or missing fingers Workflow parameters and workflow steps can be changed and controlled dynamically at processing time, thus enabling a flexible adaption of application to all customer specific processing requirements User application receives status and error message during the capture process Configurable image file formats for PNG, WSQ, BMP, JPEG Flexible plug-ins infrastructure including out of the box implementations for quality and sequence check: standards for NFIQ (500 ppi) and Aware (500 + 1000 ppi)

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications Robust Network Security - Supports mutual authentication sing TLS 1.2 while running in a FIPS 140-2 approved operating environment on the intelligent controller IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware