HID Door access control

Ideally suited for in-field operations, the compact SEEK® Avenger is a fully certified biometric enrollment and credential reading solution purpose built to perform  in the harsh and challenging environments of the military, border security, and law enforcement Combines forensic-quality fingerprint, stand-off dual iris capture, high resolution facial and evidence imaging, and multiple format credential reading Optional 3G/4G wireless connectivity and an onboard watchlist of up to 250,000 records, eliminates the need to transport unknown subjects in uncertain conditions for enrollment or identification; further reducing operational risk. With the addition of the optional MRZ and RFID readers, the functionality expands to include the reading and verification of ePassports and other non-contact credentials.

HID Global, the worldwide leader in trusted identity solutions, has announced the most feature-rich implementation of the latest MIFARE DESFire EV3 credential. This new access control credential based on NXP MIFARE DESFire EV3 delivers this technology’s full range of advanced security and privacy capabilities and reinforces them with HID’s powerful model for identity data protection. This HID credential provides AES128 encryption, a secure channel for protecting card data from man-in-the-middle attacks, and a random unique identifier (UID) for protecting user privacy. The credential works with readers based on MIFARE DESFire EV1 and EV2 products and is interoperable with HID® Signo™, iCLASS SE®, and multiCLASS SE® readers. In addition to choosing standard or custom security profiles to meet their specific needs, users can take advantage of HID’s Secure Identity Object™ (SIO®) model that protects a credential’s identity data through key diversification, authentication signatures, and encryption. Users can create multi-technology cards with HID’s credential based on NXP MIFARE DESFire EV3 to provide a smooth migration path from vulnerable legacy, low-frequency 125 kHz-based systems to modern and secure credential technology. What are the benefits of HID Global’s MIFARE DESFire EV3 credential solution? Feature-rich security that offers profile choices to fit your needs Advanced security features that aren’t available elsewhere, such as modern encryption, mutual authentication and secure messaging and SIOs Key management and card formatting that adhere to the highest standards of data protection and governance Click here for more information.

HID® Signo™ Readers bring today’s organizations into the future of access control. Beyond its sleek, modern design, this cutting-edge reader platform provides flexible, reliable performance with support for an unmatched range of credential technologies. HID Signo extends the leadership position of HID Global in the access control industry while providing unrivaled security and powerful performance with the addition of new features to better fortify facilities and beyond. Upgrading your access control readers to HID Signo ensures convenience and security today while preparing you for whatever comes tomorrow—this is the signature promise of Signo. Key Features Highly Versatile - Support for the widest range of credential technologies, including HID Mobile Access via native Bluetooth and Near Field Communication (NFC) capability. Also features Apple’s Enhanced Contactless Polling (ECP) to support credentials in the Apple Wallet. Unparalleled Performance - Ultra secure storage of cryptographic keys on certified secure element hardware, plus a new surface detection feature that allows the reader to automatically recalibrate and optimize read range performance. Connected to the Future - All readers include out-of-the-box support for Open Supervised Device Protocol (OSDP) for secure bidirectional communication. Each reader is also designed to be connected and managed remotely without “sneakernet” or the need to be physically touched.

Simultaneously supports low and high frequency credentials, including iCLASS® Seos®, HID Prox®, iCLASS SE®, MIFARE® Classic and MIFARE DESFire® EV1; supports NFC and Bluetooth for mobile devices Firmware is field-upgradable to extend the lifecycle of customer installations Supports strictest security standards such as EAL5+ to ensure regulatory compliance and restricted access to corporate resources Offers third-party products the ability to securely interoperate with the iCLASS SE® platform, connecting access control across the organization Host-driven commands enable read/write to secure areas of smart devices Flexible configuration fits a variety of applications Ultra low power mode for battery-operated devices Adjustable Bluetooth Smart read settings control overall power and read range of Mobile IDs, enabling flexibility for both close proximity “tap” and longer range “Twist and Go” activation Directional antenna enables long-range reading distances up to 2m in correct orientation

Capture fingerprint and palm print images through a non-hardware dependent biometric SDK Workflow management allows implementation of a structured process for biometric capture that matches the application requirement Workflows for ID Flats, ten-print, single finger, dual finger and palm capture, including handling of pre-captured fingerprints and/or missing fingers Workflow parameters and workflow steps can be changed and controlled dynamically at processing time, thus enabling a flexible adaption of application to all customer specific processing requirements User application receives status and error message during the capture process Configurable image file formats for PNG, WSQ, BMP, JPEG Flexible plug-ins infrastructure including out of the box implementations for quality and sequence check: standards for NFIQ (500 ppi) and Aware (500 + 1000 ppi)

Compact and convenient – All the power of iCLASS® Seos® technology packed into a convenient, pocket-size key fob, designed to be neatly attached to a key ring for secure, versatile, and open standards-based access control. Highly secure – Seos is Secure Identity Object (SIO)-enabled, allowing for multilayered security beyond the card technology and protecting identity data from unauthorized access. Certified – Based on Common Criteria (CC) EAL 5+ hardware platform, ensuring a clear chain of evidence that the platform’s security attributes have been rigorously tested and independently verified. Multi-application – Part of the iCLASS SE® platform, an open and standards-based solution that supports data storage for multiple applications beyond traditional access control such as secure printing, time and attendance, cashless vending and biometric templates. Heightened privacy protection – Seos offers best-in-class data and privacy protection by incorporating mutual authentication and secure messaging mechanisms into stringent best practices for data protection. Greater durability – Molded housing for maximum protection in harsh environments, capable of withstanding elevated operating temperatures when compared with cards. Compatibility - Supports iCLASS SE single-technology and iCLASS SE Express reader deployments.

AES 128/256 bit data encryption Supports OSDP, OSDP Secure Channel, FICAM government profiles, keypads, biometric readers, Wiegand, clock and data, magnetic stripe, F/2F and supervised F/2F reader technologies RS-485 host connectivity High performance, reliable platform enables use of hardware with HID Mercury OEM partners’ software solutions Supports OSDP and Secure Channel protocol for device connectivity, file transfer and extended applications such as biometrics and federal government profile support Embedded crypto memory chip provides secured layer of encryption to protect sensitive data

The SIO processor enables devices to become TIP nodes and integrate easily and securely to HID’sTrusted Identity Platform. SIOs can reside on any card technology, microprocessor-based cards, NFC smartphones, USB tokens, computer drives and other formats. As part of HID’s SIO-enabled ecosystem, the SIO Processor is a technology-independent virtualized interpreter that enables reader manufacturers, developers and system integrators to quickly and easily integrate SIO and allows them to make their devices TIP nodes.

Proximity Cards available in several form factors: CX-CRD Clamshell Card. CX-PL5 .049" thick card equivalent to CASI ProxLite Card. CX-ISO XT Polyester composite card for applications requiring a heavy duty card. Photo imageable with optional mag stripe. CX-ISO Card: ISO Thin, Photo Imageable proximity card with optional mag stripe. CK-KEY Keyfob: Ultrasonically sealed for durability, perfect for sites where a convenient pocket size token is needed. Easily attaches to key ring or lanyard. Features of the CX Series CASI Compatible Prox Credentials: Indala Prox credentials programmed for use with CASI ProxLite readers. Same high quality credentials used in the standard Indala Prox line. Factory Programmed, 12 digit ID number. ISO thick proximity cards offered with optional mag stripe. Keyfob available for applications where Photo ID is not required.

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware

HID’s iCLASS® 13.56 MHz Embeddable read/write contactless smart card technology can be used for diverse applications such as access control, biometrics, cashless vending, public transportation, airline ticketing and customer loyalty programs.  Multiple, securely separated files enable numerous applications and support future growth. The iCLASS Prox Embeddable Card integrates iCLASS 13.56 MHz contactless read/write smart card and 125 kHz proximity technology on a single card with the ability to embed a smart chip of your choice along with adding a magnetic stripe, barcode, and anti-counterfeiting features including custom artwork or a photo identification directly on the credential.

The iCLASS Key II provides the security and convenience of iCLASS 13.56 Mhz contactless smart card technology in a molded plastic key fob that is durable in harsh environments. This credential can be placed on a key ring or lanyard for access control applications that do not require a Photo ID. iCLASS was specifically designed to make access control more powerful, more versatile, and more secure. iCLASS 13.56 MHz read/write contactless smart card technology provides versatile interoperability in applications such as access control, network log-on security, cashless vending, time and attendance, event management and biometric identification.

Multi-Protocol: FIDO U2F and 2.0 – Securely accesses online and cloud services such as Azure Active Directory, G Suite or DropBox Business without preinstalled software PIV – Utilizes Defense grade authentication OATH – Leverages open universal authentication standard Benefits: Is part of the HID High Assurance Certificate Authority and Authentication Solutions Can be used with standard NFC and contact smart card reader Features: Available in standard ISO smart card format in dual interface configuration Made of durable composite PET/PVC plastic that enables high quality printing with recommended HID Secure Issuance card printers Available as white cards or with customer specific artwork with advanced security features to prevent visual counterfeiting Physical Access Options: Supports SEOS™ MIFARE Plus® and MIFARE® DESFire® emulation with optional HID and Indala® Prox 

Update Reader Firmware in the Field – Empower reader technicians with the capability to introduce new functionality and security enhancements to HID readers post installation via firmware update Load HID Elite and Mobile Keys – Securely authenticate and manage HID reader keys, including the capability to roll standard to HID Elite custom authentication keys for additional security Enable and Disable Credential Technologies – Close the gap and complete a migration to secure credential technologies (such as Seos® and Mifare DESFire EV2) by disabling reader support for legacy credential technologies Personalize Every Reader – Adjust LED colors to match up with corporate themes or enable powerful features such as Intelligent Power Management to reduce power consumption

Supports mutual use of an SIO Technology-enabled solution for MIFARE DESFire EV1 and HITAG1 combined in one physical credential Supports iCLASS SE platform, providing superior privacy protection with AES standard cryptography for data authenticity and privacy through the multi-layered security of HID Global´s SIO data model Complies with ISO/IEC standards for thickness and use with all direct to card or thermal transfer printers Available with magnetic stripe Can be produced with visual security and anti-counterfeiting features or a custom logo via HID Global Secure Identity Services

Consisting of a fully functional hardware and firmware solution accompanied by an API integration package, HID Aero™ Controllers are ideal for access control providers who want to build solutions for small- to medium-size customers but do not want to incur the ongoing costs of designing, manufacturing, and maintaining panel hardware. The HID Aero controller product line is the successor to HID VertX® controllers. Key benefits of HID Aero include: Flexible—A future-proof platform that can protect end-user investment by its ability to adapt and grow to meet future needs. With its IP network base, HID Aero Controllers can connect to the internet or cloud-based systems for updates and offer interoperability with security systems. HID Aero also introduces powerful remote management capabilities for HID readers, enabling the simultaneous update of credential compatibilities for all HID Readers attached to an individual intelligent controller, at the touch of a button. Secure—Protect against costly exploits, vulnerabilities, and downtime with end-to-end security from credential to host, reducing attack vectors for system-level protection. HID Aero safeguards the entire security chain an identity travels along during the authentication process with TLS running in a FIPS 140-2 approved operating environment, OSDP secure channel and AES-256 encrypted communication. Trusted—Based on trusted HID Mercury™ technology to leverage the knowledge and expertise gained from 4+ million panels installed globally. HID Aero is also backwards compatible with VertX IO modules to protect current investments with HID Global. Future Proof and Highly Adaptable - HID Aero Controllers are built with openness and flexibility at their core. This open approach gives users unmatched freedom to choose from a wide range of HID-approved system manufacturers, as HID Aero is supported by a trusted network of software providers. This ecosystem reduces total cost of ownership by enabling users to migrate their existing systems over the entire deployment lifecycle. To enable our ecosystem of partners, HID Aero comes with a powerful API toolkit and full access to the developer environment. Beyond the freedom of choice, HID Aero is a future-proof controller platform that can adapt to the growing needs of small and medium-size organizations. Because HID Aero is IP-based, the controllers can connect to on-premise or cloud-based systems to perform access control configuration, command and control, and monitor system status. This also enables interoperability with parallel security systems. Furthermore, HID Aero Controllers run on Linux, an open source and standardized operating system that allows for quicker patch management as compared to proprietary systems. OSDP Verified - HID Aero controllers are SIA OSDP verified and provide interoperable solutions for open architecture access control applications. This further demonstrates that HID Physical Access Control Solutions comply to the Open Supervised Device Protocol (OSDP) standard, which reassures specifiers that they offer the intended interoperability and security. 

As an embedded computer packaged in a small form factor with pre-installed, updatable firmware, the pivCLASS® authentication modules (PAM) enables physical access control systems (PACS) upgrades to FIPS 201 compliance by performing the FIPS 140-certified cryptographic functions the typical PACS panel cannot. pivCLASS authentication module supports a range of commercially available contact, contactless and biometric readers, including the extensive line of pivCLASS® readers.

Smart cards incorporating iCLASS + MIFARE Classic or iCLASS + MIFARE DESFire EV1, are great for organizations with multiple reader types and for those transitioning from one smart card technology to another Options for smart cards include: Magnetic stripe, Contact smart chip (an embeddable card body or embedded by HID), PVC or composite card body, Visual security features, Corporate 1000, iCLASS Elite HID can also embed a wide range of commercially available contact chips, or customers can select HID's off-the-shelf Crescendo® multi-technology smart card, providing strong authentication options with logical access systems With options such as magnetic stripe and contact smart card chips, each card can be programmed based on customer specifications and can be fully personalized with a wide range of customization offered through HID's Identity on Demand service

OSDP Reader Support - Increases security and functionality with secure channel and bi-directional communications Robust Network Security - Supports mutual authentication sing TLS 1.2 while running in a FIPS 140-2 approved operating environment on the intelligent controller IO Module Encryption - Enhance security between intelligent controller and IO modules with AES encryption Crypto Chips - Protect against malicious attacks to keep keys and passwords safe Threat Levels - Define up to 7 different threat levels that are used to instantaneously adjust user access during lockdowns and lockouts High Amp Relays - Ensure controller protection from power hungry locks and enables wider choice of egress hardware Open Architecture – Work with a variety of software partners over time without any re-investment in hardware

Uses digital certificates protected by a PIN for client authentication Leverages platform support for smart card authentication Simplifies the deployment of credentials ensuring only authorized people can access sensitive data while enabling organizations to prevent data theft Enables organizations to provide instant, secure data access to visitors, temporary employees, remote workforces, etc. Utilizes the same ActivID Credential Management System for both Crescendo Mobile and physical Crescendo cards Compatible with existing infrastructure and applications supporting smart cards, including desktop operating systems and applications Bluetooth and NCF compatible Features: Personal Identity Verification (FIPS 201) card edge that allows the virtual credential to be compatible with the built in Windows PIV minidriver for basic authentication and signature or with ActivClient for full access to all PIV certificates NFC local issuance and credential use supported in Android devices Bluetooth local issuance and credential use supported in Android and iOS devices Remote issuance supported in Android and iOS devices

Provides efficient, standards-based criminal and civil enrollment capabilities to a wide range of law enforcement and governmental agencies, as well as commercial enterprises Designed to support the rapid, high-quality capture of multiple biometrics, Livescan Management Software’s intuitive user interface is easy to access and use, requires minimal training and incorporates time-saving features

The SIO Processor supports new SIO-enabled credentials based on a variety of technologies, such as iCLASS SE, iCLASS Elite and MIFARE Classic. It can also be configured to support standard iCLASS, providing compatibility with existing installations or card deployments. The SIO Processor allows developers to easily embed it into a new reader design using the surface mount technology chip, or integrate it into an existing reader design /infrastructure using the convenient pre-packaged ID-1/ID-000 card.

HID Global's iCLASS® Seos™ smart card is a high frequency solution for increased security, privacy and portability. As a secure, standards-based technology to manage and authenticate identities, the open-design credential can be used for physical and logical access control, cashless vending, transit and a variety of other applications; it can also be used across multiple form factors including Near Field Communications (NFC) smartphones and other mobile devices.

Meets the highest Payment Card Industry standards for Hardware Security Modules (HSMs) serving the financial market Supports the latest Visa® and Mastercard® requirements for contactless transactions which includes Offline Data Authentication (ODA) Efficiently designed for easy storage in a standard 1U 19” rack mount cabinet Designed to meet the unique security needs of financial card instant issuance, the HSM XT integrates with HID® TRISM™ Financial Instant Issuance Software

Patent-pending iON technology for unparalleled printer readiness, intelligent temperature control and energy savings Highly secure and cost-effective driverless card printing Retransfer printing in true 600 dpi via dye-sublimation for exceptional image quality Flat card printing for quiet and significantly expedited issuance when compared to embossing solutions Thoughtful design elements that foster low maintenance and easy access to card path

Ability to print up to 230 cards per hour (YMCK with transfer) Patent-pending iON™ technology for unparalleled printer readiness and intelligent temperature control Retransfer-based wasteless lamination Simultaneous print and retransfer GreenCircle® certified energy savings