Bioscrypt VPROXAH4065 V-Prox, A User Manual VeriSeries UserManual

Bioscrypt, Inc. V-Prox, A VeriSeries UserManual

Contents

users manual 1

© Copyright 2002, Bioscrypt Inc. All rights reserved.VeriProx / VeriFlex / V-PASS / V-SmartOO PERATIONS PERATIONS MM ANUALANUAL
1© Copyright 2002, Bioscrypt Inc. All rights reserved.NoticesThe Veri-Series line of products has been tested for compliance with all applicableinternational standards. The resulting approvals are listed below, and are additionallyprinted on the labeling located on the rear panel of the product.The power supply offered by Bioscrypt is CE and CSA approved and UL listed.Veriflex FCC, UL, ULC, CEVeriproxFCC, UL, ULC, CEV-Pass FCC, UL, ULC, CEV-Smart FCC, UL, ULC, CEFCC Information to UsersThis equipment has been tested and found to comply with the limits for a Class A digital device,pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonableprotection against harmful interference when the equipment is operated in a commercialenvironment. This equipment generates, uses, and can radiate radio frequency energy and, ifnot installed and used in accordance with the instruction manual, may cause harmfulinterference to radio communications. Operation of this equipment in a residential area is likelyto cause harmful interference in which case the user will be required to correct the interferenceat his own expense.Warning to UsersWarning: Changes or modifications not expressly approved by Bioscrypt Inc. could void theuser’s authority to operate the equipment.V-Smart, A Information for UsersThe V-Smart, A includes a contact-less smart card reader (GemEasyLink680SL). This is aradio-transceiver with the following characteristics:Operating Frequency Range: 13.553-13.567 MHzRF Power Rating: 0.0 WattsRF Output Impedance: 50 Ohms
2© Copyright 2002, Bioscrypt Inc. All rights reserved.V-Prox, A, H Information for UsersThe V-Prox, A, H includes a HID contact-less proximity reader. This device has the followingcharacteristics:Transmit Frequency: 125 KHzExcite Frequency: 125 KHzDisclaimerThe instructions in this document have been carefully checked for accuracy and arepresumed to be reliable. Bioscrypt, Inc. and its writers assume no responsibility forinaccuracies and reserve the right to modify and revise this document without notice.It is always our goal at Bioscrypt, Inc. to supply accurate and reliable documentation. Ifyou discover a discrepancy in this document, please e-mail your comments tosupport@bioscrypt.com, or contact Bioscrypt Technical Support at the telephonenumber listed below.No part of this publication may be placed in a retrieval system, transmitted, orreproduced in any way, including, but not limited to, photograph, photocopy,computer disk or other record, without prior agreement and written permission from:Bioscrypt Inc.5000 Van Nuys Blvd., Suite 300Sherman Oaks, CA 91403Phone (818).501.3908Fax (818).461.0843http://www.bioscrypt.com
3© Copyright 2002, Bioscrypt Inc. All rights reserved.Trademark DisclosuresBioscrypt has made every effort to provide disclosures when using trademarks owned byother companies. Trademarked designations appear throughout this publication. Thepublisher states that it is using the designations only for editorial purposes, and to thebenefit of the trademark owner with no intent to infringe upon that trademark. Thefollowing trademarks are found in this manual:• Microsoft™, and Windows 95™, Windows 98™, Windows NT™, Windows2000™, and Windows XP™ are trademarks of the Microsoft Corporation.• VeriProx ®, VeriFlex ®, V-PASS ®, V-Smart ®, MV1100 ®, MV1200 ® areregistered trademarks of Bioscrypt, Inc.• HID™ is a trademark of the HID Corporation.• Motorola™ Indala™ are trademarks of the Motorola Corporation.• MIFARE™ is a trademark of Philips Electronics N.V.
4© Copyright 2002, Bioscrypt Inc. All rights reserved.Bioscrypt Warranty PolicyBioscrypt, Inc. warrants its products to be free from defects caused by faulty materialsor poor workmanship for a period of one year from date of shipment from Bioscrypt.Bioscrypt makes no warranty that its products are fit for the use or purpose to which theymay be put by the buyer, whether or not such use or purpose has been disclosed toBioscrypt in specifications or drawings previously or subsequently provided, or whether ornot Bioscrypt's products are specifically designed and/or manufactured for buyer's use orpurpose.Bioscrypt's liability is limited to replacing, repairing or issuing credit, at its option, for anyproducts that are returned by the original purchaser during the warranty period.Bioscrypt's liability on any claim for loss or damage arising out of the sale, resale or useof any of its products shall in no event exceed the selling price of the products. The buyeris responsible for making any claims for shipment damage (evident or concealed) withthe carrier. Bioscrypt must be notified within 30 days of shipment of incorrect materials.This warranty is voided if any component, subsystem, or element of the product(s) hasbeen subject to electrical or physical abuse, tampering (such as opening a sealedhousing or removal of a product serial number tag), or improper operation as determinedby Bioscrypt. This warranty is also voided for failure to comply with Bioscrypt's returnprocedures as given in the Bioscrypt Technical Support Guide. Any service provided byunauthorized personnel voids the warranty.Bioscrypt offers three (3) options to our customers that have a problem with one of ourproducts.1) Warranty Service if the unit is covered under either the factory one-year warrantyperiod or any extended warranty the buyer may have purchased.2) Fee-based Service if the unit is not covered under a warranty.3) Return for credit if less than 30 days from the original date of shipment.Service can be provided by Bioscrypt, the manufacturer.Service can be provided by Authorized Service Representatives – contact Bioscrypt orvisit our web site (http://www.bioscrypt.com) for a service representative near you. Noservice can be performed without first notifying Bioscrypt.Service can be provided by Authorized Repair Center – contact Bioscrypt or visit our website (http://www.bioscrypt.com) for a repair center near you. No service can be performedwithout first notifying Bioscrypt.Any service provided by unauthorized personnel voids the warranty. No product may bereturned, whether in warranty or out-of-warranty, without first obtaining approval fromBioscrypt. No credit will be given nor repairs made for products returned without suchapproval as described in the Returned Merchandise Authorization procedure as given inthe Bioscrypt Technical Support Guide. Products must be returned, prepaid, to aBioscrypt service center (no C.O.D. or Collect Freight shipments will be accepted). The
5© Copyright 2002, Bioscrypt Inc. All rights reserved.status of any product returned later than 30 days after the issuance of a returnauthorization will be subject to review. After Bioscrypt's examination, warranty or out-of-warranty status will be determined. If, upon Bioscrypt's examination, a warranted defectexists, the product(s) will be repaired at no charge and shipped, prepaid, back to thebuyer. If the buyer desires an airfreight or other expedited return, the product(s) will beshipped collect, charged to the buyer’s account with airfreight carrier, or charged to thebuyer’s account with Bioscrypt. Warranty repairs do not extend the warranty period.Repair work is warranted for 90 days from the date of shipment. Replacementcomponents are warranted for one year from the date of shipment. Returned product(s),whether warranty or out-of-warranty, diagnosed as "No Problem Found" will be subject toa $150 handling charge and will be returned as is, at the buyer's expense.Privacy StatementBioscrypt’s unique approach to fingerprint recognition provides the maximum in userprivacy protection. Instead of storing a graphic representation of the user’s finger (i.e., apicture), the VeriSeries products store a template, which is a highly processedmathematical model of the ridge pattern. This means that no direct personal data aboutthe user is stored by the system.
6© Copyright 2002, Bioscrypt Inc. All rights reserved.Table of ContentsNotices ........................................................................................................................................................ 1FCC Information to Users............................................................................................................................1Warning to Users.........................................................................................................................................1V-Smart, A Information for Users................................................................................................................1V-Prox, A, H Information for Users..............................................................................................................2Disclaimer................................................................................................................................................... 2Trademark Disclosures ...............................................................................................................................3Bioscrypt Warranty Policy............................................................................................................................4Privacy Statement........................................................................................................................................5Introduction..............................................................................................................................................10Terminology.............................................................................................................................................11About Veri-Series Products.................................................................................................................12About the VeriProx.....................................................................................................................................12About the VeriFlex.....................................................................................................................................12About the V-PASS .....................................................................................................................................12About the V-Smart.....................................................................................................................................13Veri-Series – Physical Layout....................................................................................................................14Concepts of Operations........................................................................................................................16The VeriProx..............................................................................................................................................16The VeriFlex...............................................................................................................................................18The V-PASS...............................................................................................................................................20The Proximity Card....................................................................................................................................21User Cards ..............................................................................................................................................21Command Cards ......................................................................................................................................21Basic System Administration.....................................................................................................................22Enrollment ...............................................................................................................................................22Templates................................................................................................................................................22Multiple Readers ......................................................................................................................................23Backing-Up Templates..............................................................................................................................23Lights..........................................................................................................................................................24VeriAdmin Management Software .....................................................................................................25Concepts of Operation..........................................................................................................................26Transmit ID..............................................................................................................................................26Ports .......................................................................................................................................................26Serial Port Settings and Baud Rates...........................................................................................26Installing the Software ...............................................................................................................................28Setting up the ID File .................................................................................................................................29ID File Format ..........................................................................................................................................29Communication Settings file......................................................................................................................30Setting up a Network..................................................................................................................................31Icons, Commands and Drop Downs .........................................................................................................33Template Manager..................................................................................................................................36Edit Templates...........................................................................................................................................37QUICK Enrollment .....................................................................................................................................38Delete Templates.......................................................................................................................................39Verify Template..........................................................................................................................................40Transfer Templates ...................................................................................................................................40Download from Unit to PC.........................................................................................................................40
7© Copyright 2002, Bioscrypt Inc. All rights reserved.Download from Unit to Smart Card............................................................................................................41Upload from PC to Unit.............................................................................................................................42Upload from PC to Smart Card..................................................................................................................43Broadcast PC Template ............................................................................................................................44Edit PC Template.......................................................................................................................................46Command Card Manager (VeriProx / VeriFlex)...............................................................................47Administering Command Cards ................................................................................................................47Creating Command Cards.........................................................................................................................47Reviewing Command Cards......................................................................................................................47Removing Command Cards ......................................................................................................................48Using Command Cards .............................................................................................................................48Enroll Command Card ..............................................................................................................................48Delete Command Card .............................................................................................................................49Communication Settings......................................................................................................................50Unit Parameter Settings........................................................................................................................51Network Identification Number ..................................................................................................................53Global Security Threshold .........................................................................................................................53Setting the Security Threshold...................................................................................................................53MV1200 VeriSeries Port MODE................................................................................................................54Host Port Protocol......................................................................................................................................54Host Port and Aux Port Baud Rates..........................................................................................................54Quick COMM Test.....................................................................................................................................55Biometric Verification.................................................................................................................................55Finger Detect (V-PASS only!)....................................................................................................................55Wiegand Settings.......................................................................................................................................55Wiegand FORMAT...................................................................................................................................55FailString Out...........................................................................................................................................55Alt Site Code............................................................................................................................................55On Fail Send Inverse Parity ......................................................................................................................56Enable INPUT..........................................................................................................................................56Enable OUTPUT......................................................................................................................................56ALWAYS OUTPUT...................................................................................................................................56Pulse Width.............................................................................................................................................56Pulse Interval...........................................................................................................................................56Wiegand PASS-THRU formats..................................................................................................................56Creating USER DEFINED PASS-THRU Format Options.............................................................................58AUX PORT SECURITY.............................................................................................................................60Broadcast Parameters ..........................................................................................................................61Network Status........................................................................................................................................62Advanced Enrollment............................................................................................................................64LED Table Settings ................................................................................................................................71Sensor Configuration............................................................................................................................72Update Firmware ....................................................................................................................................73Restore Factory Defaults......................................................................................................................74Template Conversion............................................................................................................................76Verification Action Response.............................................................................................................78Wiegand Utilities.....................................................................................................................................79Getting Service and Support...............................................................................................................80Technical Support......................................................................................................................................80Customer Service and Sales Support.......................................................................................................80
8© Copyright 2002, Bioscrypt Inc. All rights reserved.World Wide Web Site ................................................................................................................................80Appendix A – Quality and Content....................................................................................................81Section A.1 - Basic Biometric Concepts ...................................................................................................81Biometric Definitions.......................................................................................................................81Scanning an Image...................................................................................................................................82Storing User Templates on the Unit...........................................................................................................82Section A.2 - Proper Finger Placement.....................................................................................................83Common mistakes....................................................................................................................................83Image quality ...........................................................................................................................................83Image consistency....................................................................................................................................84Section A.3 - Using Content and Quality during Enrollments...................................................................85False Acceptance and False Rejection......................................................................................................85Quality.....................................................................................................................................................86Content....................................................................................................................................................87Content and Quality Summary...................................................................................................................88Recommended Enrollment Process...........................................................................................................88Appendix B – Understanding the BROADCAST option in RS-485 Based Networks...........89Appendix C – V-PASS Template Differences..................................................................................90Appendix D – V-Smart Operations.....................................................................................................92Administrator’s Note...................................................................................................................................92V-Smart Terminology.................................................................................................................................93V-Smart Smart Card Placement................................................................................................................94Section D.1 – HOST Mode versus SLAVE Mode Operation....................................................................95Section D.2 – Transferring a Template to a Smart Card ..........................................................................96Section D.3 – Enrolling a Template Directly to a Smart Card...................................................................97Section D.4 – Using the Smart Card Manager..........................................................................................98Best Performance Practices / Finger placement ....................................................................................105Appendix E – V-Smart Administrator SiteKey Management....................................................106What is a SiteKey? ..................................................................................................................................106Why do I Need a SiteKey?.......................................................................................................................106What is the “Default” SiteKey? ................................................................................................................107Where is the SiteKey Stored? .................................................................................................................107What is the Difference Between PRIMARY and SECONDARY SiteKeys?...........................................107How do I Initially Set a SiteKey for V-Smarts at My Installation?...........................................................108How do I Set the SiteKey on Individual Smart Cards?...........................................................................110How do I Change the SiteKey if I Already Have a User Base of Previously Created V-Smart SmartCards?.....................................................................................................................................................111What Happens if I FORGET My SiteKey?...............................................................................................112What Happens if Someone Else Learns My Installation’s SiteKey?.......................................................112What is the 1-Way Hashing Function Option In VeriAdmin for SiteKeys?.............................................113Bioscrypt Contact Information .........................................................................................................114
9© Copyright 2002, Bioscrypt Inc. All rights reserved.Notes
INTRODUCTION10 © Copyright 2002, Bioscrypt Inc. All rights reserved.IntroductionBioscrypt, the leader in fingerprint identification and verification systems, presents theVeriProx Fingerprint Verification System. Technology by Bioscrypt has been applied invarious unique applications including Access Security, Time and Attendance, PoliticalPolling, Computer Logon, and other applications where an individual must be clearlyidentified as being solely responsible for specific actions.Bioscrypt (formerly BiometricID) was founded in 1996 with a mission to provide fingerprintrecognition technology with the highest degree of accuracy at a reasonable cost while stillbeing easy to use. Bioscrypt has successfully migrated technology once found only ingovernment or military applications, toward private industry and small businesses aroundthe globe.It has been known for years that each person has unique fingerprints. Using fingerprintsas a means of identification ensures a unique identifier for each tracked user, andprotects users from the vulnerabilities associated with lost keys or identification cards.After installing Bioscrypt’s product in your application, your company will be able toaccurately identify, track, and automatically act according to each individual’sidentification and permissions.
TERMINOLOGY11 © Copyright 2002, Bioscrypt Inc. All rights reserved.TerminologyThis document is intended for use with Bioscrypt’s Veri-Series products. This includesthe VeriProx, VeriFlex, V-PASS, and V-Smart hardware products. Although differing inexact function, these 4 products share many common aspects. When this manual refersto the ‘VeriProx’, unless specifically stated otherwise, you can assume that the entireVeri-Series is being described.This document also refers to Bioscrypt’s MV1100 and MV1200. The MV1100/MV1200 isthe internal hardware biometric engine that is the core of all Veri-Series products. Thiscircuit board contains the DSP processor, support hardware, and interface to a variety offingerprint sensors. The MV1100/MV1200 also contains firmware. The firmware is thelow level software that controls the mathematical instructions that perform the actualfingerprint enrollment and verification processes.
ABOUT VERI-SERIES PRODUCTS12 © Copyright 2002, Bioscrypt Inc. All rights reserved.About Veri-Series ProductsAbout the VeriProxBioscrypt’s VeriProx combines patented fingerprint verification technology with anindustry-standard proximity card reader in a mullion-mountable case. This ensuresgreater security for the card issuer and the card user. Requiring that the fingerprint of theperson seeking entry matches the identity of the cardholder eliminates access via lost orstolen proximity cards. Suitable for both standalone and network use, the system workswith existing 26-bit proximity card infrastructures.The unit operates in conjunction with administration software hosted on a PC. Onceinstalled users simply present their identification cards when entering the secure areaand then touch a fingertip to the recessed area on top of the unit. The system validatestheir fingerprint against a previously enrolled template stored in flash memory.The VeriProx system provides security features that can minimize fraud and can toleratechanges to the user’s finger like scarring or swelling. The VeriProx returns accurate passand fail decisions in 99.99% of all cases.Each VeriProx unit stores thousands of fingerprint templates, in a non-volatile memory.Response time is less than five seconds for fingerprint enrollment and less than1.5 seconds for fingerprint verification. The system is compact, versatile, and configuredto allow standalone, PC-connected, and multiple-unit operation.About the VeriFlexBioscrypt’s VeriFlex includes all features found in the VeriProx except it does not includethe internal proximity card reader. External connections to Wiegand devices still existand allow the VeriFlex to be added to installations that already have supported Wieganddevices installed. Whereas the VeriProx can operate as a standalone device, theVeriFlex requires an external device (such as an external Wiegand reader or PC) thatinitiates enrollment, verification, and template administration activities.About the V-PASSBioscrypt’s V-PASS is similar in construction to the VeriFlex but incorporates an entirelydifferent biometric algorithm. Whereas the VeriProx and VeriFlex will perform a 1:1matching verification where an ID number is required, the V-PASS performs a searchingalgorithm that will compare the user’s fingerprint with every stored template to find apotential match. This ability removes the requirement of telling the unit the ID number toverify. With the V-PASS, the user simply places their finger on the sensor, and a PASS /FAIL is determined. No external or internal Wiegand input device is required. Once thefingerprints are enrolled on the unit, the V-PASS can operate in a standalone mode. A V-PASS can still be connected to Wiegand Input devices similar to a VeriFlex. If arecognized Wiegand signal is received identifying an ID number, the V-PASS will performa simple 1:1 verification and not a searching operation. PLEASE NOTE: the V-PASS
ABOUT VERI-SERIES PRODUCTS13 © Copyright 2002, Bioscrypt Inc. All rights reserved.fingerprint templates are different the smaller VeriProx and VeriFlex fingerprint templates.Please see Appendix C for further details.About the V-SmartBioscrypt’s V-Smart provides all the capability of the Veriflex and includes an internalsmart card reader. Fingerprint templates are securely stored on a smart card rather thanthe reader and carried by the employee or user. This allows for an unlimited populationof users. The smart card is presented to the V-Smart and the template is read from thesmart card and verified against the employee’s live image. Storing the template on thesmart card allows the V-Smart to have an unlimited user base and removes the need fora physically-wired network. Wiegand communication formats of up to 64 bits can also bestored on the smart card and optionally used with a Wiegand device.
ABOUT VERI-SERIES PRODUCTS14 © Copyright 2002, Bioscrypt Inc. All rights reserved.Veri-Series – Physical LayoutFigure 1: Top View Figure 2: Bottom ViewFigure 3: Bottom Panel – closed Figure 4: Bottom Panel – openTop LEDFront LED(power on)SensorRidgeLockPower OnLightBottomAux PortCover(closed)LockingScrewLockingScrewRJ-11AuxiliaryPort
15 © Copyright 2002, Bioscrypt Inc. All rights reserved.Figure 5: Veri-Series Unit and Mounting PlateFor additional information on installing and connecting your Veri-Series unit,please refer to the VeriProx Installation Manual.MountingPlatePart and SerialNumber TagPigtailConnector
CONCEPTS OF OPERATIONS16 © Copyright 2002, Bioscrypt Inc. All rights reserved.Concepts of OperationsThe VeriProxThe VeriProx integrates an industry-standard proximity card reader withBioscrypt’s MV1100 fingerprint verification technology. A typical operation isdescribed below.• A user waves the proximity card near the front of the VeriProx.• The ID number is read from the internal proximity card reader.• The ID is transferred to the MV1100.o If the ID is invalid, the LED on the top of the VeriProx will glow red.o If the ID presents a valid previously enrolled template, the LED onthe top of the reader will glow amber; indicating the user shouldplace their finger on the sensor on the top of the reader. • The User should place the correct finger on the scanner using the BioscryptRidgelock.• The amber light will turn off, signaling the finger can be removed.• The scanned image is compared with the data that is stored under the IDnumber in the memory of the VeriProx.o If the verification is positive, the top LED will glow green and the unitwill emit an audible beep.o If the authentication fails, the LED will glow red and no beep will begenerated.• When authentication is successful a Wiegand string that contains the sitecode and ID number read from the proximity card is sent out for use by astandard door controller.• Optionally, the VeriProx can be configured to send out a pre-determined“failure” ID whenever an unsuccessful verification occurs. An additionaloption allows the site code to be replaced with another number.The VeriProx has several communication options. It is equipped with both a Hostport and an auxiliary port. The Host port may be configured to operate in RS-232mode or RS-485 mode. The auxiliary port is always set to RS-232. The Host portconnections are made through the wiring pigtail on the back of the reader. Theauxiliary port is accessed from an RJ-11 jack that is hidden under a door on thebottom of the VeriProx. This door is held shut with a security screw.
CONCEPTS OF OPERATIONS17 © Copyright 2002, Bioscrypt Inc. All rights reserved.The VeriProx can be used as a stand-alone reader or multiple units can beconfigured on an RS-485 network. The manner in which you choose to install theVeriProx will determine which communications settings are most convenient foryour configuration. Certain administrative functions are common to anyinstallation. You must have a way to “enroll” users into the system, that is, youmust be able to associate their fingerprint data with a specific proximity card IDnumber. You must have a way to distribute this user information to all otherreaders in your installation. The VeriAdmin Management Software is provided forthis purpose.
CONCEPTS OF OPERATIONS18 © Copyright 2002, Bioscrypt Inc. All rights reserved.The VeriFlexThe VeriFlex is similar to the VeriProx except that an external Wiegand device isused. A typical operation is described below.• A user initiates the action with the external Wiegand device.• The ID number is read from the external reader.• The ID is transferred to the MV1100 inside the VeriFlex.o If the ID is invalid, the LED on the top of the VeriFlex will glow red.o If the ID presents a valid previously enrolled template, the LED onthe top of the reader will glow amber; indicating the user shouldplace their finger on the sensor on the top of the reader. • The User should place the correct finger on the scanner using the BioscryptRidgelock.• The amber light will turn off, signaling the finger can be removed.• The scanned image is compared with the data that is stored under the IDnumber in the memory of the VeriFlexo If the verification is positive, the top LED will glow green and the unitwill emit an audible beep.o If the authentication fails, the LED will glow red and no beep will begenerated.• When authentication is successful a Wiegand string that contains the sitecode and ID number read from the external Wiegand device is sent out foruse by a standard door controller.• Optionally, the VeriFlex can be configured to send out a pre-determined“failure” ID whenever an unsuccessful verification occurs. An additionaloption allows the site code to be replaced with another number.The VeriFlex has several communication options. It is equipped with both a Hostport and an auxiliary port. The Host port may be configured to operate in RS-232mode or RS-485 mode. The auxiliary port is always set to RS-232. The Host portconnections are made through the wiring pigtail on the back of the reader. Theauxiliary port is accessed from an RJ-11 jack that is hidden under a door on thebottom of the VeriFlex. This door is held shut with a security screw.
CONCEPTS OF OPERATIONS19 © Copyright 2002, Bioscrypt Inc. All rights reserved.The VeriFlex can be used as a stand-alone reader (with external Wiegand reader)or multiple units can be configured on an RS-485 network. The manner in whichyou choose to install the VeriFlex will determine which communications settingsare most convenient for your configuration. Certain administrative functions arecommon to any installation. You must have a way to “enroll” users into the system,that is, you must be able to associate their fingerprint data with a specific WiegandID number. You must have a way to distribute this user information to all otherreaders in your installation. The VeriAdmin Management Software is provided forthis purpose.
CONCEPTS OF OPERATIONS20 © Copyright 2002, Bioscrypt Inc. All rights reserved.The V-PASSThe V-PASS is similar to the VeriProx and VeriFlex, but no Wiegand input deviceis required. The V-PASS will automatically detect when a finger is placed on thesensor, compare that fingerprint with all currently enrolled fingerprint templatesand determine if there is a match. A typical operation is described below.• The V-PASS top LED is yellow to indicate it is ready for a finger.• A user initiates the action by placing their finger on the fingerprint sensor.• The User should place the correct finger on the scanner using the BioscryptRidgelock.• The V-PASS will recognize that a finger has been placed and will take animage of that finger’s print.• The amber light will turn off, signaling that the image has been scanned andthe finger can be removed.• The scanned image is compared with ALL enrolled templates in thememory of the V-PASS (maximum of 200).o If the verification is positive, the top LED will glow green and the unitwill emit an audible beep.o If the authentication fails, the LED will glow red and no beep will begenerated.• When authentication is successful a Wiegand string can optionally be sentout for use by a standard door controller.The V-PASS has several communication options. It is equipped with both a Hostport and an auxiliary port. The Host port may be configured to operate in RS-232mode or RS-485 mode. The auxiliary port is always set to RS-232. The Host portconnections are made through the wiring pigtail on the back of the reader. Theauxiliary port is accessed from an RJ-11 jack that is hidden under a door on thebottom of the V-PASS. This door is held shut with a security screw.The V-PASS can be used as a stand-alone reader or multiple units can beconfigured on an RS-485 network. The manner in which you choose to install theV-PASS will determine which communications settings are most convenient foryour configuration. Certain administrative functions are common to anyinstallation. You must have a way to “enroll” users into the system, that is, youmust be able to associate their fingerprint data with a specific Wiegand ID number.You must have a way to distribute this user information to all other readers in yourinstallation. The VeriAdmin Management Software is provided for this purpose.
CONCEPTS OF OPERATIONS21 © Copyright 2002, Bioscrypt Inc. All rights reserved.The Proximity CardFigure 6: Veri-Series CardThere are three types of proximity cards split into two basic categories:• User Cards• Enroll Command Cards• Delete Command CardsUser CardsThe VeriProx / VeriFlex can be programmed to use a given card ID number as astandard “user card”. The majority of your cards will be of this type.Command CardsCommand Cards can be created to add and remove users from a VeriProx /VeriFlex reader without using the PC based Administrative Software. These canbe useful for creating and removing temporary visitor’s badges or administeringthe system when your PC is down or unavailable. There are two types ofCommand Cards associated with the VeriProx / VeriFlex:• Enroll Command Cards• Delete Command CardsNote: The command cards must be created using the Administration Software.Once a card has been designated as one of the three types, it will remain that typeunless it is deleted and re-enrolled (see Edit Templates on page 37).n-01234Prox CardSite NumberDesignatorCard Number
CONCEPTS OF OPERATIONS22 © Copyright 2002, Bioscrypt Inc. All rights reserved.Basic System AdministrationEnrollmentNew users are entered into the system through the process of “enrollment”. Thisprocedure scans the users fingerprint and produces a fingerprint template, acollection of data that is stored in memory on the Veri-Series product. Thisincludes:• User Name• User Finger Identifier• Template Security Threshold• Template ID• Template Index Number• A mathematical model of the fingerprint ridge patternTemplatesEvery template on a Veri-Series unit has a unique identification tag consisting of aTemplate ID and a Template Index. Each time a fingerprint is enrolled a newtemplate is generated using the number from the proximity card or PC as theTemplate ID number. Unless specifically defined, the Veri-Series product willautomatically assign a unique index value to each template.NOTE: The Template Index number will be the lowest value available forthat ID number unless specially defined using an external PC application to definea specific Index. Figure 7: Template ID NumbersPlease see Appendix A – Quality and Content for a technical description of whatconstitutes a good enrollment. A quality enrollment will ensure peak performancefrom the Bioscrypt fingerprint recognition algorithm.Template IDNumberTemplateIndexNumber
CONCEPTS OF OPERATIONS23 © Copyright 2002, Bioscrypt Inc. All rights reserved.Multiple ReadersIf your installation includes multiple Veri-Series readers that are used by acommon population of users, you will need to distribute the fingerprint template ofeach user to all the readers.Note: It is recommended that you designate oneBioscrypt Unit as the “administration reader” andenroll all new users on this unit.After a new user is enrolled on the administration unit, the template can be copiedto the other readers. If the units are networked, you can broadcast the newtemplate to the other readers over the RS-485 lines using the VeriAdminManagement Software. If the readers are not interconnected, a laptop can beused to download the templates from the administration reader and thenuploaded to each reader through its Aux Port.Backing-Up TemplatesTemplates can be “backed-up” by downloading them to a PC. On the PC, templatefiles are of the type “.tem” for 1:1 verification templates used with the VeriProx /VeriFlex / V-Smart and “.mtm.” for the larger searching templates used with a V-PASS (see Appendix C). The name of the file is derived from the Template IDNumber and the Template Index Number. For example, the first file (1_4.tem) inFigure 8 below is of Template ID 1 and Template Index 4 (referred to as Template1 4).Figure 8: Template files on the PCNOTE: when the template is uploaded from the PC to a Veri-Series reader, theTemplate ID Number and Index Number is taken from data within the file, not fromthe file name. Therefore, even if you change the name of the file on your PC, the
CONCEPTS OF OPERATIONS24 © Copyright 2002, Bioscrypt Inc. All rights reserved.Template ID and index will remain the same. Please use the VeriAdminManagement Software to modify Template ID numbers.LightsFigure 9: Top LEDSteady Amber the unit is requesting that a finger be placed on the sensor. Thismay be for verification or for enrollment. The user may removethe finger when the light goes out.Blinking Amber the unit is requesting a proximity card be waved for enrollmentinto the reader. The blinking amber light is seen when an EnrollCommand Card is used to add a new user to the reader.Steady Green the unit is indicating the successful completion of one of thefollowing operations:• Verification• Enrollment• DeletionA steady green light is accompanied by an audible beep.Steady Red the unit is indicating the current operation has failed.Blinking Red the unit is requesting a proximity card be waved. The card IDnumber will be deleted from the reader. The blinking red light isseen when a Delete Command Card is used to remove anexisting ID from the reader.The LED on top of the unitcan illuminate in differentcolors and patterns.
VERIADMIN MANAGEMENT SOFTWARE25 © Copyright 2002, Bioscrypt Inc. All rights reserved.VeriAdmin Management SoftwareThe VeriAdmin Management Software is designed to run on Windows-based PC platforms andcommunicate with Bioscrypt’s MV1100 and MV1200 based fingerprint recognition devices.Although oriented more towards the Veri-Series products, the application works well with anyMV1100/MV1200-based device. In this documentation, the terms “unit” and “reader” are usedas a generic term to refer to any MV1100/MV1200-based device. At this time, the VeriAdminManagement Software does NOT communicate with Bioscrypt’s V2100 fingerprint recognitionterminal.Use the VeriAdmin Management software to perform the following functions:• Enroll new user fingerprint templates.• Edit user templates.• Distribute the user templates from the administration reader or PC to other Bioscryptreaders in the installation.• Create “command cards”; proximity cards with the privilege to enroll or delete other usercards when the unit is used in conjunction with a Proximity Reader as in VeriProx.• Adjust the parameters (baud rate, security level, port configuration, Wiegand settings,etc) of individual units, or of all readers connected on an RS-485 network.• Configure the layout and operation of Smart Cards (for V-Smart only)NOTE: The recommended operating system for use with the VeriAdmin Management Softwareis Windows 2000™, Windows XP™, or Windows NT™ 4.0 (Service Pack 3 or greater).Operation is possible on Windows 98™ or ME™, however occasional communication packetscan be dropped when multiple applications are running in the background. It is also possible torun the software on Windows 95™, however, this is not recommended due to communicationsirregularities in that version.
CONCEPTS OF OPERATION26 © Copyright 2002, Bioscrypt Inc. All rights reserved.Concepts of OperationTransmit IDOn the tool bar of the Administration Software, there is a drop-down list titledTransmit ID (see Figure 10 below). The ID number that appears in the field is thereader with which the software currently is communicating. For this reason, eachreader must be assigned a Network ID, even if your installation consists of a singleunit (the default setting is 0).Figure 10: Transmit ID Drop-downA special transmit ID number, “-1”, is assigned as a broadcast ID. All units on thecurrent COMM Port will respond to this broadcast ID. For functions labeled“broadcast” the software uses the broadcast ID and all readers on the network willaccept these commands. Using Broadcast commands is only recommended foradvanced users. (See Appendix B for further understanding of the benefits andissues with Broadcasting commands.)If the transmit ID is set to a number that is not assigned to any unit on the network,the software will report that there is no communication.If two units on the network have the same ID assigned, there also will becommunication problems, since both units would respond to commands sent tothat ID. This causes the information packets to “collide” and become jumbled,resulting in communication errors.PortsBioscrypt readers “talk” to the VeriAdmin Software using either the Host orAuxiliary (AUX) port. The Host port may be configured to use RS-232 or RS-485protocol. The Host port is connected through the pigtail-wiring bundle at the backof the unit. Different wires are used for RS-485 versus RS-232. The Aux port isaccessed using the RJ11 jack at the bottom of the VeriProx. Please refer to theVeriSeries Installation Guide (included on the Bioscrypt CD) for details.Serial Port Settings and Baud RatesOnce the reader(s) have been connected to the PC, the next step is to identifywhich ports on the PC are talking with which readers.
CONCEPTS OF OPERATION27 © Copyright 2002, Bioscrypt Inc. All rights reserved.As usual, the serial ports on the host PC are designated as COM1, COM2, etc.You may connect up to 31 Veri-Series readers to each COM line (using RS-485).You must provide the Administration Software with the information as to whichNetwork ID has been assigned to which COM line.This information is stored in an initialization file that is read by the software onapplication startup. The file is labeled “UNITIDS.DAT” and is located at thefollowing path:<Install Dir>\UNITIDS.DATWhere <Install Dir> indicates the directory where the VeriAdmin ManagementSoftware was installed). The default installation path is:C:\Program Files\BioID\VeriAdminPlease refer to the Setting up the ID File section on page 29 for details.In addition the baud rate may be set on each reader. It is essential that the baudrate used by the PC match the baud rate setting on the reader and that all readerson the network are set to the same baud rate.The following settings are the factory defaults:A VeriProx/VeriFlex/V-PASS should arrive with these settings in place:Network ID: 0Port Mode: Mode 1 (Host RS-485 / Aux RS-232 (RJ11))Host Port baud rate: 9600 baudAux Port baud rate: 57600 baudA V-Smart should arrive with these settings in place:Network ID: 0Port Mode: Mode 0 (Host RS-232 / Aux RS-232 (RJ11))Host Port baud rate: 57600 baudAux Port baud rate: 57600 baud
CONCEPTS OF OPERATION28 © Copyright 2002, Bioscrypt Inc. All rights reserved.Installing the SoftwareTo install the software, run the setup.exe file on the VeriAdmin Management CD.You may accept the default path or choose an alternate directory in which to installthe software. The default path is:C:\Program Files\BioID\VeriAdminLike most Windows based installations, you will step through a number of windows(approximately 5) that will request basic installation information, such as, file nameand directory location. It is recommended that the default settings are used,however, they can be changed.Once the installation is complete, a short-cut icon for theAdministration Software will appear on your desktop.
CONCEPTS OF OPERATION29 © Copyright 2002, Bioscrypt Inc. All rights reserved.Setting up the ID FileOnce you have installed the software on your PC, you will need to set up acommunications port ID file. The software will use the information in this file tocommunicate with the VeriSeries reader(s) connected to the Host Port.You can create and edit the file using the any standard Text Editor programprovided with Microsoft Windows.Access the file, UNITIDS.DAT located in the Install Directory. The default path is:C:\Program Files\BioID\VeriProx\UNITIDS.DATID File FormatThe file format is as follows:Line 1: Name the COMM port on the PCLine 2: List the IDs for all units on this port. Identify V-PASS units byappending a “:M” to the corresponding ID. Separate each ID by a space.Line 3: Type a % to end the COMM port.Example:COM#: 1UNITIDS: 0 1 2:M 3 4:M 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 2223 24 25 26 27 28 29 30%COM#: 2UNITIDS: 31 32:M 33%Notice how the line for the Unit IDs for COMM 1 wraps; the software willcontinue to read the line until the %. A space should appear between eachreader ID number and after the keywords “COM#:” and “UNITSIDS:”. In theexample above, IDs #2, #4 and #32 are designated as V-PASS units. It isimportant to designate V-PASS units appropriately to assist theVeriAdmin software in proper template management. Also, if this isnot done, a “mismatch” message will appear when a network status isperformed.Once you have completed editing the file, save it under the same name andto the same location.Note: The VeriAdmin Software will first look for thisfile in the current directory. If not found, thesoftware will then look in the Install Directoryfor this file.
CONCEPTS OF OPERATION30 © Copyright 2002, Bioscrypt Inc. All rights reserved.The default UNITIDS.DAT file looks like this:COM#: 1UNITIDS: 0 1 2 3 4 5 6 7 8 9%Thus the software will initialize expecting to find 10 readers on the host portwith assigned ID numbers of “0” through “9”. There should be nocommunication problems if there are other readers on the network as longas each reader is configured correctly and with a unique ID number.Communication Settings fileThere is a second initialization file that is used by the Administrative Software. Thisis the CommParameters.cfg file. The program automatically writes this file whenit is closed. The next time the program is opened, this file is read and thecommunication parameters are set to match their state when the program was lastshut down.The first time you run the VeriAdmin Management software this file does not exist.You will see the following dialog appear. Fill out the desired Transmit ID, CommPort, and Baud Rate. Press the TEST button to verify these settings are correct,and then press ACCEPT and the initial CommParameters.cfg file will be created.Figure 11: Modify Communications Settings
CONCEPTS OF OPERATION31 © Copyright 2002, Bioscrypt Inc. All rights reserved.Setting up a NetworkAs described above, when setting up a network you will need to assign unique IDnumbers to each Veri-Series reader and confirm the communication settings. Theeasiest way to do this is to cycle through each reader, setting the parameters byplugging into the Aux port. When using the Aux port you can set the transmit ID to–1 (broadcast). Since you are plugged into only one reader, you are assured thatno other Veri-Series units will be responding to your commands. If the ID on theunit has been changed from its default you can still be confident it will respond tothe Broadcast ID. After you set the parameters for each unit through the Aux Portyou can connect them to your 485 network. To review, the recommended stepsare:1Supply power to the proper wires in the pigtail on the back of the Veri-Series unit (Consult the Installation Manual for a wiring diagram).When power is applied, the front LED will glow green, and the top LEDwill blink amber, then turn OFF for VeriProx/VeriFlex/V-Smart orremain ON for V-PASS units.2Plug into the Aux Port using the RJ-11 jack on the bottom of the unitand connect the cable to one of the serial ports on your PC3Access the Communication Settings window by clicking on the iconor using the menu.5Click the Modify button.Set the Transmit ID to –1. Set the COMM Port setting to match thedesignation for the port you are using on the PC (e.g. COM1, COM2)6Set the baud rate setting to 9600 baud (the factory default).7Press the test button.8If necessary, use the Baud Search button to have the software testdifferent baud rate settings and report which baud setting works. (Forthis function to succeed a valid transmit ID and valid COMM port mustbe set.9Click the Accept button to change the settings.10 You can now set Network ID on the reader. Click the UNIT PARAMSbutton on the Modify Communications Settings dialog.11 Type the desired ID number in the Assign Unit Network ID field. Pressthe “Set” button to make the change. Note this will change the ID inflash on the reader and will also modify the transmit ID that is beingused by the PC so that you may continue to communicate withoutusing the broadcast ID. The lower portion of this dialog box shows thecurrent communication settings.
CONCEPTS OF OPERATION32 © Copyright 2002, Bioscrypt Inc. All rights reserved.12 Select the appropriate baud rate from the Host Port Baud Rate dropdown list (9600 is recommended). Keep in mind that you are currentlytalking over the AUX port, but you are changing the Host Port settingsthat will be used when you connect to the unit through the Host Portwires on the back of the unit.13 Set the Host Port Protocol to RS-485 if you will be using a networkedenvironment. Alternatively you may choose RS-232 if you will not benetworking the VeriProx. Remember that the RS-232 and RS-485connections are made through different wires on the pigtail. (Consultthe installation guide).Make sure that the Network IDs in the UNITIDS.DAT file match those assigned tothe readers. If not, update accordingly.
CONCEPTS OF OPERATION33 © Copyright 2002, Bioscrypt Inc. All rights reserved.Icons, Commands and Drop DownsFigure 122: VeriAdmin ToolbarOnce you have the software installed and running, you will be able to access thefeatures mentioned above either through the icons on the toolbar or through thecommand menus.Template Manager (page 36)IconCommand Path File > Template ManagerCommand Card Manager (page 47)IconCommand Path File > Command Card ManagerSmart Card Manager (page 98)IconCommand Path File > Smart Card ManagerCommunication Settings (page 50)IconCommand Path Configure > Communication Settings
CONCEPTS OF OPERATION34 © Copyright 2002, Bioscrypt Inc. All rights reserved.Unit Parameters (page 51)IconCommand Path Configure > Unit ParametersBroadcast Parameters (page 61)IconCommand Path Configure > Broadcast ParametersNetwork Status (page 62)IconCommand Path File > Network StatusAdvanced Enrollment (page 64)IconCommand Path Configure > Advanced EnrollmentQuick Enrollment (page 38)IconCommand Path Configure > Quick EnrollmentTransmit IDDrop DownThe Transmit ID number refers to the IDs given to individual Veri-Series units.Whichever number appears in the box is the unit with which the software iscommunicating. If you have networked more than one unit, you can use theTransmit ID drop down box to access a specific unit by its ID number.The ID numbers show in the drop down list come from the “UNITIDS.DAT” filedescribed in the ID File Format section.
CONCEPTS OF OPERATION35 © Copyright 2002, Bioscrypt Inc. All rights reserved.Current Communication SettingsThe current Network ID and COMM Port are displayed here. These values willupdate as different communication and different settings are used throughout theVeriAdmin Management Software.
TEMPLATE MANAGER36 © Copyright 2002, Bioscrypt Inc. All rights reserved.Template ManagerThe Template Manager allows you to:• Edit Templates• Enroll Templates• Delete Templates• Verify Templates• Transfer templates to and from a PC, from one unit to another, or to a Smart Card• Edit Templates Stored on the PC• Verify Templates Stored on the PC• Broadcast a Template from the PC to ALL units identified in the UNITIDS.DAT file Figure 13: Template ManagerClick thisbutton toupdate thewindow.Click thisbutton toVERIFY atemplatestored onthe PC.
TEMPLATE MANAGER37 © Copyright 2002, Bioscrypt Inc. All rights reserved.Edit TemplatesTo edit a template, select the appropriate ID number(s) in the Templates windowand click the Edit button. Alternatively, you make double-click on the ID number inthe window and an Edit box will open.Note: While you can use the Shift and Ctrl keys to select multipletemplates, realize that a separate window will open for eachtemplate you select.A window like the one below will open.Figure 14: Template ViewerFrom here you can view and edit the attributes of the template such as theEmployee Name and Security Threshold. You can then save the template to theCurrent Unit specified by the current communication settings.
TEMPLATE MANAGER38 © Copyright 2002, Bioscrypt Inc. All rights reserved.QUICK EnrollmentWhen you select the Quick Enroll button on the Template Manager window, thefollowing window will appear: Figure 13: Quick Enrollment ScreenThe process to enroll a new template is as follows:1In the Template ID Number field, type the desired ID number (for VeriProx,VeriFlex, and readers wired to a proximity reader or Wiegand input device,use the proximity card. Do not include a site code designation). OR Press the“From Reader” button (although the Wiegand ID can come from sources otherthan a prox reader) and wave the card in front of the Wiegand INPUT deviceto read the ID directly from the cardNote: If you are using a V-Smart and have selected Read/Write WiegandString during Enroll/Verify from the Smart Card Manager, VeriAdmin willexpect to receive the Wiegand String from the reader and will warn you ifnone was provided.Info anddirections willappear hereA visualizationof thefingerprintIMAGE willappear here ifthe option ischeckedA visualizationof thefingerprintTEMPLATEwill appearhere
TEMPLATE MANAGER39 © Copyright 2002, Bioscrypt Inc. All rights reserved.2Click the Enroll button.The light on the VeriProx will glow amber requesting the enrollee to place afinger on the sensor. Nestle the Ridgelock into the first joint line on the finger.The finger may be removed when the amber light goes out and VeriAdmininstructs you to remove the finger.3The light will glow green and the unit will beep once to acknowledge that thefingerprint has been captured.If a finger is not placed within ten seconds, the light will glow red and the unitwill time out. Similarly the light will glow red if the unit was unable to image thefingerprint. (See the appendix for a discussion of proper enrollment).4On the Quick Enrollment screen, the Quantity and Content fields each willdisplay from one to five stars indicating how well the print was read. Inaddition, a sample of the print will appear in the left center of the screen.A rating of at least three stars in each field is recommended.5If you are unsatisfied with the read, repeat steps 3 and 4 above.6Press the Accept button to continue with the enrollment.At this point, the Edit Template window will open (see page 37). Complete theUsername field, identify the finger that was scanned, and select a SecurityThreshold. You may change the index if you are enrolling more than onefinger under the same ID, but normally this should be zero.7Select the user type. This is either User ID, Enroll ID, or Delete ID dependingon the type of card you are enrolling. The default is User ID.Note: remember that if the card number already has been designated as oneof the three types, then any subsequent templates assigned to the card mustbe of the same type.Note: if you have more than one unit networked together, it is recommended thatyou broadcast the new enrollment to the other units at this time.Delete TemplatesUse this option to delete one or more templates from a single unit (if you are in anetworked environment, see the BROADCAST PARAMETERS section).Select the appropriate ID number(s) in the Templates window and click the Deletebutton (recall that you can use the Shift and Ctrl keys to select multiple templates).Note: You WILL NOT receive a warning when you are deletingtemplates unless you are deleting all of them. Therefore, be
TEMPLATE MANAGER40 © Copyright 2002, Bioscrypt Inc. All rights reserved.sure to confirm that you have selected the correct ones thefirst time.Verify TemplateUse this option to initiate a VERIFY function on the unit identified by the CurrentUnit specified by the current communication settings. Only one template can beselected for this operationTransfer TemplatesThere are six primary ways you can transfer templates:• Transfer selected Templates from unit to unit• Download selected Templates from the unit to the PC• Download selected Templates from the unit to a Smart Card• Upload selected Templates from the PC to the unit• Upload selected Templates from the PC to a Smart Card• Upload from the PC to ALL units defined in NetworkDownload from Unit to PCFigure 16: Download Template(s) to PC1In the Template Manager window, select the template(s) you wish toFile names are derivedfrom the Template ID #and the Template Index #: e.g., this is Template1122 0Default type is basedon whether unit is V-PASS or VeriFlex /VeriProx / V-Smart
TEMPLATE MANAGER41 © Copyright 2002, Bioscrypt Inc. All rights reserved.transfer.2Click the From Unità PC button.3When the screen in Figure 16 appears, confirm the download path anddirectory; make any applicable changes.4Click the OK button.When completed the files will be loaded in the designated directory onyour PC.Note: If you are in a networked environment, you only need to download from oneunit since the template should be the same on all units.Download from Unit to Smart CardDownloading a template from the unit to a Smart Card requires that the currentSite Key be entered which matches both the Site Key on the ESI and the Site Keyon the Smart Card.Figure 17a: Download Template(s) to Smart CardThen present the Smart Card close to the reader and hold it until instructed toremove the card.Figure 17b: Download Template(s) to Smart Card
TEMPLATE MANAGER42 © Copyright 2002, Bioscrypt Inc. All rights reserved.If successful, the following message will be displayed:Figure 17c: Download Template(s) to Smart CardUpload from PC to UnitYou can transfer templates from your PC to any unit. When you click the FromPCàUnit button, a window like the one below will open: Figure 14: Upload Template(s) to Unit1Click the From PCàUnit button.2Use the window to browse for the correct directory.3Select the appropriate template(s).4Click the Open button.Please note that when the template is uploaded, the Template ID Number andIndex Number is taken from data within the file, not from the file name. Therefore,even if you change the name of the file on your PC, the Template number willremain the same. To change a Templates ID or index, always use theTEMPLATE EDIT feature within the application.
TEMPLATE MANAGER43 © Copyright 2002, Bioscrypt Inc. All rights reserved.Upload from PC to Smart CardThe operation is similar to uploading from the unit and will require the current SiteKey after selecting the desired template(s) from the PC.
TEMPLATE MANAGER44 © Copyright 2002, Bioscrypt Inc. All rights reserved.Transfer from Unit to UnitUse this option when you are in a networked environment. Figure 15: Transfer Templates from Unit to UnitTo transfer templates between units,1In the Template Manager window, select the template(s) you wish totransfer.2Click the Unit to Unit button.3When the screen in Figure 15 appears, highlight the IDs of the units towhich you wish to transfer the templates.Broadcast PC TemplateThis option will allow template(s) stored on the PC to be Broadcast to all unitsdefined in the UNITIDS.DAT file. The process is as follows:1. The templates will be read one-by-one from the PC.2. Each specific template will be erased from all units on the network.These are theNetwork IDs forthe BII readersaccording to theUNITSIDS.DATfile.
TEMPLATE MANAGER45 © Copyright 2002, Bioscrypt Inc. All rights reserved.3. The template will be transferred using the ID of –1 on each definedCommunication Port.If the VERIFY BROADCAST is selected, the VeriAdmin software will attempt toverify that steps 2 and 3 where completed successfully. After step 2, each unit willbe polled to determine if each template was removed correctly. If the templatewas NOT removed, another DELETE attempt will be made. After step 3, each unitwill be polled to confirm that the template now exists on the each unit. If thetemplate does NOT exist on a particular unit, the TRANSFER function will beretried. Please see Appendix B for details of the benefits and potential issues withusing Broadcast commands.
TEMPLATE MANAGER46 © Copyright 2002, Bioscrypt Inc. All rights reserved.Edit PC TemplateTo edit a PC template, click the Edit PC Template button. A standard WindowsFile Selection window will open to allow the user to choose the template file to edit.Use the TYPE dropdown box to select between displaying VeriProx / VeriFlex / V-Smart templates (Verification Templates) and V-PASS templates (SearchingTemplates). Once chosen, the following window is opened: Figure 16: Edit PC TemplateWithin this window, all template data can be modified and saved back to the PC bypressing the SAVE button within the PC group box. You may optionally save tothe unit or a Smart Card if desired.NOTE: The filename is determined by the Template ID number and the TemplateIndex number (See Figure 20). If these do not change, pressing SAVE (under thePC group box) will replace the previous file. If either value is changed, a NEW fileis created.
COMMAND CARD MANAGER (VERIPROX /VERIFLEX)47 © Copyright 2002, Bioscrypt Inc. All rights reserved.Command Card Manager (VeriProx / VeriFlex)Command Cards allow administrators to add and remove user IDs directly fromthe VeriProx or VeriFlex units without having to access the software. These can beuseful for creating and removing temporary visitor’s badges or administering thesystem when your PC is down or unavailable.Administering Command CardsCreating Command CardsTo create command cards, use the Template Manager (see QUICK Enrollment onpage 38).Reviewing Command CardsBy clicking the Command Card icon on the toolbar or selecting the option from themenu, the window below will appear. You will notice that the cards are listed bytheir Template ID numbers; all indices for each template are implied. Figure 17: Command Card ManagerLists all DeleteCommandCardsLists all EnrollCommandCards
COMMAND CARD MANAGER (VERIPROX /VERIFLEX)48 © Copyright 2002, Bioscrypt Inc. All rights reserved.Removing Command CardsTo remove a command card, highlight the ID number in either the Enroll IDs orthe Delete IDs window and click the Delete Entry button directly beneath thewindow. This will delete the template for all associated indices.Note: You will not receive a warning when you click the button, therefore, makesure that you have selected the correct ID.Using Command CardsOnce you have created Enroll and Delete Command Cards, they can be used asfollows:Enroll Command CardTo enroll a user:1Wave the Enroll Command Card near the front of the VeriProx /VeriFlex unit.The light will glow amber directing the Administrator to place his/herfinger on the unit.2If the Administrator is authorized to use the Command Card, the lightwill glow green and the unit will beep. Continue with the next step.If not, the light will glow red. Return to Step 1 or stop.3The light will flash yellow, indicating the system is ready to enroll thenew card. Wave the user card to be enrolled. The light will stopflashing.The light will glow amber directing the User to place his/her finger onthe unit.4If the print is accepted, the light will glow green and the unit will beepindicating that the card has been enrolled.
COMMAND CARD MANAGER (VERIPROX /VERIFLEX)49 © Copyright 2002, Bioscrypt Inc. All rights reserved.Delete Command CardTo delete a user:1Wave the Delete Command Card near the front of the VeriProx /VeriFlex unit.The light will glow amber directing the Administrator to place his/herfinger on the unit.2If the Administrator is authorized to use the Command Card, the lightwill glow green and the unit will beep. Continue with the next step.If not, the light will glow red. Return to Step 1 or stop.3The light will flash red, indicating the system is ready to delete the card.Wave the user card to be deleted.4The light will glow green and the unit will beep indicating that the cardhas been deleted.
COMMUNICATION SETTINGS50 © Copyright 2002, Bioscrypt Inc. All rights reserved.Communication SettingsFrom the Communication Settings dialog, you can modify the Transmit ID, the PC CommPort, and the Communication Baud rate.Figure 18: Communication Port SettingsClick the Modify button to change the displayed settings.Figure 19: Modify Communications SettingsNote: Change only one setting at a time and be sure to test the change beforeclicking the Accept button.Click if you’reuncertain ofthe baud rateSame as the NetStatus button onthe Toolbar
UNIT PARAMETER SETTINGS51 © Copyright 2002, Bioscrypt Inc. All rights reserved.Unit Parameter SettingsThe Unit Parameter Settings window aids the Administrator in the following:• Assigning a Network Identification Number to a unit• Setting a Global Security Threshold for a unit• Enabling/Disabling Wiegand Formats, Out Failure code, and Site codes• Modify the Host and Aux Port baud rates• Change the Host Protocol• View the current statuses and settings of the various ports• Performing a Quick COMM test that will flash the top LED and beep the current unit• The ability to Password Protect the AUX port• Setting of Wiegand PASS-THRU formats• The ability to turn off biometrics (no recommended)Select the change desired and press the corresponding Set button to transmit the change to thecurrent unit.
UNIT PARAMETER SETTINGS52 © Copyright 2002, Bioscrypt Inc. All rights reserved. Figure 20: VeriProx Parameter SettingsNote: Changes made to Unit ID and Host Baud Rate will also change the Current Transmit IDand Current PC Baud rate so that communications is still possible with the unit.Currentstatuses andsettings
UNIT PARAMETER SETTINGS53 © Copyright 2002, Bioscrypt Inc. All rights reserved.Network Identification NumberIn a networked environment, a unique number must be assigned to each unitbefore adding that unit to the network (The default setting from the factory is “0”).If two or more units have the same Network ID on the same COMM Port, datacollisions will cause poor communication on that COMM Line (See “Concepts ofOperations” section).Setting the Number1In the Assign Unit Network ID field, type the new Network IDnumber.2Click the Set button.Global Security ThresholdThere are two types of security settings: the local security level associated with theindividual template; and, the global security level associated with the individualVeri-Series unit. You may recall that the system will authorize using the lower ofthe two. See the appendix for a discussion of security settings and algorithmperformance.Example: If the template is set for Very High, and the unit is setfor Medium, the authorization will be performed at theMedium setting.Because of the unit’s high accuracy rate, which practically negates the possibilityof a false read, the above affords the unit a high rate of true authorization.Setting the Security ThresholdSelect the threshold level:• Very High• High• Medium• Low• Very LowClick the Set button.
UNIT PARAMETER SETTINGS54 © Copyright 2002, Bioscrypt Inc. All rights reserved.MV1200 VeriSeries Port MODEIn the MV1200 based versions of the VeriSeries products, certain combinations ofports and protocols are not allowed. To simplify this, each available mode is listedin a dropdown. This will only be enabled if the unit is a MV1200 based unit.1In the MV1200 VeriSeries Port MODE section, select the appropriatemode from the drop down list.2Click the Set button.If the display in the lower right corner does not update, close and re-open the window.Warning: Changing this may cause you to lose communication with the unit(s).If changing to mode 2 with a V-Smart, be sure you have an RS-485 converter!Host Port ProtocolThis dropdown is enabled only for older MV1100 based devices. The usualprotocol settings are as follows:RS-232 stand alone devicesRS-485 networked devices1In the Host Port Protocol section, select the appropriate protocol fromthe drop down list.2Click the Set button.If the display in the lower right corner does not update, close and re-open the window.Warning: Changing this may cause you to lose communication with the unit(s).Host Port and Aux Port Baud RatesYou can change the baud rates of both the Host and Aux ports to match your PCand/or other networked devices.In order to maintain communication, if you change the baud rate on the port youare using, the PC’s baud rate automatically will update.1In the appropriate section (Host Port or Aux Port), select theappropriate baud rate from the drop down list.2Click the Set button.If the display in the lower right corner does not update, close and re-open the window.
UNIT PARAMETER SETTINGS55 © Copyright 2002, Bioscrypt Inc. All rights reserved.Quick COMM TestThe button will perform a quick COMM TEST with the device identified by thedisplayed Current COMM settings. The test will flash the LED each color thensound the buzzer.Biometric VerificationThis option allows the user to turn biometric verification on and off. Check oruncheck this option and press the SET button. Unchecking the box will cause theunit to bypass the core fingerprint authentication (i.e., no finger required) andallows for Wiegand pass-thru authentication alone. Turning this off will result ina less secure system and is not recommended! The user assumes all riskassociated with disabling biometrics.Finger Detect (V-PASS only!)This section will show the current setting of the Auto Finger Detect function of theV-PASS product. The user can select the option desired and press the SETbutton to modify the setting on the current unit. This section is disabled when thecurrent unit is not a V-PASS.Wiegand SettingsThis section allows you to send coded messages to your Wiegand device (whereapplicable). Pressing the SET button will transfer all WIEGAND SETTINGSvalues at once.Wiegand FORMATThis section allows you to select the desired Wiegand format for both INPUT andOUTPUT. 26-bit Standard is the default format. Other custom formats areavailable and can be selected using the dropdown box.NOTE: the format for BOTH INPUT and OUTPUT will be the sameFailString OutWhen you check the FailString Out box, whatever code you type into the FailureCode field will be sent to the Wiegand device when a failed authorization occurs.The string is numeric and ranges from 0 to 65535.If the box is unchecked then no string will be sent when a verification fails.Alt Site CodeWhen you check the Alt Site Code box, whatever code you type in the Site Codefield will override the site code on all cards used on the unit.
UNIT PARAMETER SETTINGS56 © Copyright 2002, Bioscrypt Inc. All rights reserved.The string is numeric and ranges from 0 to 255.If the box is unchecked the site code read from the proximity card will be passedthrough in the Wiegand out string.On Fail Send Inverse ParityWhen you check the On Fail Send Inverse Parity box, a failed verify will result inthe Wiegand string being sent on the Wiegand out lines with inversed parity toindicate the failure.Enable INPUTThis option in the Wiegand Settings section will enable Wiegand INPUT whenchecked and sent to the BII_UNIT. This allows all WIEGAND INPUTcommunications. If this option is unchecked and sent to the BII_UNIT, allWIEGAND INPUT data will be ignored.Enable OUTPUTThis option in the Wiegand Settings section will enable Wiegand OUTPUT whenchecked and sent to the BII_UNIT. This causes the WIEGAND OUTPUT string tobe sent whenever a WIEGAND INPUT is received (see PASS_THRU sectionWiegand Output related to Pass-Thru formats). If this option is unchecked andsent to the BII_UNIT, all WIEGAND OUTPUT data will be ignored unless theALWAYS OUTPUT is selected.ALWAYS OUTPUTThis option in the Wiegand Settings section will enable Wiegand OUTPUT on ALLVerifications regardless of whether initiated by a Wiegand INPUT, a PC or anyother devicePulse WidthUnchecking the USE DEFAULT option will allow the user to enter a custom PulseWidth duration for Wiegand Output. This is NOT recommended unless the user isvery familiar with the device connected to the BII_Unit.Pulse IntervalUnchecking the USE DEFAULT option will allow the user to enter a custom PulseInterval duration for Wiegand Output. This is NOT recommended unless the useris very familiar with the device connected to the BII_Unit.Wiegand PASS-THRU formatsWhen used with MV1100/MV1200 firmware version 2.50 or higher, theVeriAdmin software allows expanded Wiegand compatibility by allowing definition
UNIT PARAMETER SETTINGS57 © Copyright 2002, Bioscrypt Inc. All rights reserved.of a PASS-THRU format. In order to use this ability, the following information isrequired:• Total number of Wiegand bits in Wiegand String (maximum = 64 bits)• Start Bit of the ID FIELD (where first bit is bit 0)• Number of bits in the ID FIELD (must be contiguous bits)Using these 3 pieces of information, when a card is presented to the BII_Unit, itwill attempt to decode the ID FIELD and use that information as the TEMPLATE IDnumber. All SITE codes, Parity, and any other data are ignored. Using this ID, theBII_Unit will attempt to VERIFY the template corresponding to the decoded ID.If the ID is not found or if the VERIFICATION attempt FAILS, no Wiegandoutput is sent. To the controller, it will appear as if nothing was presented.If the ID is valid and a SUCCESSFUL VERIFICATION is performed, theoriginal Wiegand INPUT string (with SITE code, Parity, etc) will “PASS-THRU” tothe WIEGAND OUTPUT unchanged.Although this PASS-THRU option does not allow FAIL STRINGS, changingthe SITE code or checking PARITY, it does provide a mechanism for using a widevariety of Wiegand formats.

Navigation menu