BioSmart - BioSmart FinGuard

BioSmart-FinGuard firmware complex is intended for personal computer protection against unapproved access based on security system of OS Windows 2000/XP/2003 with the use of person authentication principle based on fingerprints.

Instead of traditional login and password input it is enough for user to apply a finger to a fingerprint scanner and BioSmart-FinGuard system automatically recognizes the fingerprint and gives access to an informational resource.

Thanks to a method of dactylographic person identification «BioSmart-FinGuard» system possesses a number of benefits over traditional identification systems of PC users and networks using passwords, electronic keys and magnetic cards:

User registration is made by means of BioSmart-FinGuard software and the bbiometric scanner for PC connecting to the USB port of a PC. Registration can occurs both on a work place of an administrator and work place of a client. It is possible to register up to 10 fingerprints for each user.

Users and fingerprints information is kept as encrypted data in Active Directory base in the memory of a domain controller or in a local database. On a client workplace and domain controller there works a service that establishes encrypted communication channel between the client (Finger Logon) and server for identification data transfer from server to client.

When entering the system a user has to apply a finger to the biometric scanner. In case of domain authentication received fingerprint will be compared with the model which is kept on the server. Otherwise comparison is made with local database on the user's PC. At successful identification there is an authorization of user in the system

This version is intended for identification of network users by fingerprints database which is kept in the memory of a domain controller.

Full integration with Active Directory allows you to use in full built in Active Directory technologies:
- means of data storage and replication;
- users and group policies management technology;
- audit means;
- Kerberos authentication protocol.
Support of users database integration with existing or off-site DBMS (database management system), for example, MySQL.
Users data (fingerprints' templates, passwords) are always kept encrypted in Active Directory or MySQL databases.
Simple authentication of users in the system. It is enough for user to apply any of registered fingers to the biometric scanner instead of trying to remember and input a complicate password. It is possible to register up to 10 fingerprints for a user.
Ease-to-use and simple system administration:
- possibility of automatic password generation, up to 128 symbols;
- possibility of latent password generation (password will be unknown for a user and a system administrator);
- transfer of a password to the third party, forgetfulness and loss are excluded.
Use of Microsoft Crypto API encryption technology. This technology allows fast and effective implementation of new encryption methods.
System journaling in OS Windows;
Support of IPSec protocol for authentication data encryption. This does not reduce throughput of a local network and does not occupy computational resources of the system in whole.
Possibility of network users' fingerprints registration from any personal computer of a domain zone.
Scalability of the system. Possibility to work in networks of any topology against domain controllers (primary, second, confidential).

Licensing policy: Electronic key is installed into USB port in the memory of a server (domain controller), this key contains information about number of users with fingerprints authorization possibility. Simultaneously users with password authentication can be also located at the network.

Licensing policy: License is interwoven into the biometric scanner for PC. Freeware goes together with the product. Simultaneously users with password authentication can be also located at the network.

It is intended for users identification on a local workstation with access to informational recourses.

«Life finger Detection (LFD)» technology - is a patented process developed by Futronic for significant information access prevention carried out by intruder by means of fingerprint model made of silicone, rubber and etc.

This technology uses active live finger recognition sensors. Futronic sensors use separate special signal for finger authentication according to a principle «alive- lifeless». This signal passes through finger skin and returns back to the sensor of scanner. Returning signal from a finger of a live person is unique, unlike returning signal from a replica.

Futronic has developed special algorithm for returning fingerprint of a live person signal recognition and detection of a model application attempts. Accordingly, any bbiometric scanner used by «Prosoft-Systems» scans fingerprints of a live finger only generating a signal about model application attempts.

Replicas made of silicone, rubber and other materials can't be used for access obtaining through biometric scanners using LFD technology.

For this technology a user has to apply a finger with more precision and accuracy. It is necessary to place a finger in precisely the correct spot on the scanner for the LFD-sensor response and its signal processing

Below you can find visual illustrations of correct finger position on the scanner for LFD-technology use - i.e. for full-grown use of such a powerful device as biometric scanner.

If you touch the scanner with a finger not so precisely as it is shown on the picture - it is possible that the scanner can recognize your finger as a replica as scanner couldn't indicate a finger of live person.