Sagem Securite MorphoAccess J-Bio, User Manual

Page 1: ...MORPHOACCESS J SERIES USER GUIDE Copyright 2010 Sagem S curit Osny France Sagem S curit Document Reproduction and Disclosure Prohibited DOCUMENT SSE 0000077399 01 Version 1 0 May 2010...

Page 2: ...ut notice and do not represent a commitment on the part of Sagem S curit No part of this document may be reproduced or transmitted in any form or by any means electronic or mechanical including photoc...

Page 3: ...J SERIES User Guide Revision History REVISION HISTORY REVISION HISTORY REVISION HISTORY REVISION HISTORY REVISION HISTORY REVISION HISTORY Revision History This Document table contains the history of...

Page 4: ...REV 2 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Revision History MORPHOACCESS J SERIES User Guide...

Page 5: ...e information 4 USA information 4 Section 2 Terminal presentation 1 Interfaces presentation 9 User interface 9 Power supply interface see figures 2 and 3 10 Administration interface see figures 2 and...

Page 6: ...ng the firmware 24 6 Downloading adding a licence 25 Section 4 Stand alone modes networked or not 1 Recognition mode synthesis 29 2 Adding a user s record in the database 30 3 Access control presentat...

Page 7: ...ontactless card mode 50 Bypassing the biometric control in authentication 51 Multi factor mode 53 Section 7 Proxy Mode 1 Proxy mode or slave presentation 57 2 Proxy mode activation 58 Section 8 Termin...

Page 8: ...e waiting for finger on the sensor 85 8 No database or empty database 86 9 USB mass storage key can be removed 87 10 Terminal maintenance 88 11 Sensor start up error 89 Section 10 Appendix 1 MorphoAcc...

Page 9: ...CONTENTS TABLE OF CONTENTS TABLE OF CONTENTS MORPHOACCESS J SERIES User Guide Table of contents DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 TOC 5 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE...

Page 10: ...TOC 6 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Table of contents MORPHOACCESS J SERIES User Guide...

Page 11: ...een a Host System and a MorphoAccess J Series 20 Figure 3 4 MorphoAccess configuration tool 22 Figure 4 1 Recognition mode synthesis 29 Figure 4 2 Adding a fingerprint in MorphoAccess J Series termina...

Page 12: ...LOF 2 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED List of figures MORPHOACCESS J SERIES User Guide...

Page 13: ...SECTION 1 INTRODUCTION...

Page 14: ...for each individual even identical twins The MorphoAccess J Series integrates Sagem S curit image processing and feature matching algorithms This technology is based on lessons learned during 25 years...

Page 15: ...f the document I NTRODUCTION I NTRODUCTION I NTRODUCTION I NTRODUCTION I NTRODUCTION I NTRODUCTION 1 Scope of the document This guide deals with the use of the MorphoAccess J Series which is made up o...

Page 16: ...tion In case of building to building connection it is recommended to connect 0V to ground Ground cable must be connected with the terminal block 0V GND Europe information Sagem S curit hereby declares...

Page 17: ...d used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this eq...

Page 18: ...6 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Safety instructions MORPHOACCESS J SERIES User Guide...

Page 19: ...SECTION 2 TERMINAL PRESENTATION...

Page 20: ...8 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...

Page 21: ...INAL PRESENTATION T ERMINAL PRESENTATION 1 Interfaces presentation User interface Figure 2 1 MorphoAccess J Series front view The MorphoAccess J Series terminals offer a simple and ergonomic man machi...

Page 22: ...one of these modes depending on POE implementation on your local Ethernet network A hardware reset button executes when pressed a power down power up sequence 14 This reset button is located under th...

Page 23: ...T ERMINAL PRESENTATION T ERMINAL PRESENTATION T ERMINAL PRESENTATION T ERMINAL PRESENTATION T ERMINAL PRESENTATION DataClock RS485 5 two LED IN inputs one for access granted one for access denied in...

Page 24: ...RE PROHIBITED Interfaces presentation MORPHOACCESS J SERIES User Guide Figure 2 3 MorphoAccess J Series with a USB mass storage key Figure 2 4 MorphoAccess J Series with a Wi FiTM adapter The MorphoAc...

Page 25: ...SECTION 3 TERMINAL CONFIGURATION...

Page 26: ...DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide This chapter details how to configure the MorphoAccess J Series terminal A parameter can be changed directly using a US...

Page 27: ...ess The MorphoAccess J Series terminal can run in stand alone mode but a TCP IP connection is required to download records in the terminal and to configure its recognition mode It is possible to speci...

Page 28: ...to change TCP IP parameters without connecting the terminal on a network This operation only requires a standard USB Mass Storage key FAT16 formatted 1 Gb maximum A decicated PC application USB Networ...

Page 29: ...on Tool This configuration file contains new network parameters This file must be stored on a USB mass storage key Figure 3 1 Build a setting file on a USB mass storage key Apply changes on a standalo...

Page 30: ...e stored into files organized in sections and values For example a file named app cfg contains all the parameters defining the main application settings Configuration organization The application crea...

Page 31: ...TION T ERMINAL CONFIGURATION Modifying a parameter There is one way to modify a parameter remotely through Ethernet or Wi Fi link with a client application running on the Host System Notation In this...

Page 32: ...he terminal Some available remote operations are Biometric record addition Configuration key reading Access Control settings modification Local database deletion Biometric record deletion Access contr...

Page 33: ...re biometric records in this base Network factory settings By default the terminal IP address is 134 1 32 214 This address can be changed through IP Configuration Tool or with a USB flash drive USB Ne...

Page 34: ...hoAccess Wi Fi Licence is loaded in the terminal cf paragraph Downloading a licence the terminal must not be connected to a network with an Ethernet cable Wi Fi connection and Ethernet cable connectio...

Page 35: ...description in paragraph Wi Fi configuration NOTE A MorphoAccess Wi Fi Licence is mandatory If the terminal is configured to use the Wi Fi connection with the Wi Fi USB adapter plugged in and if ther...

Page 36: ...ssible to upgrade current MorphoAccess firmware through IP Ethernet or Wi Fi The firmware can be obtained on a CD ROM package from factory or downloaded from Sagem S curit Website login and password r...

Page 37: ...orphoAccess J Series can match a fingerprint against a database of 500 users The MA 3K USERS licence extends MorphoAccess J Series recognition capabilities to a database of 3 000 users 2 fingers per u...

Page 38: ...26 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Downloading adding a licence MORPHOACCESS J SERIES User Guide...

Page 39: ...SECTION 4 STAND ALONE MODES NETWORKED OR NOT...

Page 40: ...PRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide The MorphoAccess J Series terminals works according to two biometric recognition modes identification or authentication Identifica...

Page 41: ...SERIES User Guide Recognition mode synthesis S TAND ALONE MODES NETWORKED OR NOT S TAND ALONE MODES NETWORKED OR NOT S TAND ALONE MODES NETWORKED OR NOT S TAND ALONE MODES NETWORKED OR NOT S TAND ALON...

Page 42: ...nt of the MorphoAccess internal biometric database can be done remotely by a Host System The user is enrolled on an Enrolment Station typically a PC station with MEMS and biometric templates are expor...

Page 43: ...k and physical access command Figure 4 3 Typical access control system architecture MorphoAccess J Series biometric database management The management of the MorphoAccess internal biometric database c...

Page 44: ...1 versus N In this mode the user which requires the access is unknown and the terminal searches for its identity The captured fingerprint is compared will all the fingerprints stored in the database...

Page 45: ...terminal local database Figure 4 5 Authentification with contactless card If the user is authenticated access is granted If the user is not recognized access is denied See section Access control by au...

Page 46: ...User Id Emission The User ID of the recognized user can be sent through the Wiegand output The format of the frame may be user defined The message format includes only the user identifier which must...

Page 47: ...iTM Instead of Ethernet connection the terminal can be connected using a wireless b g connection Please refer to paragraphs Network Wi Fi configuration and Wi Fi configuration The message format and t...

Page 48: ...l application of the terminal is not used but only the biometric features identification authentification and the user input output features the contactless card reader In that case the access control...

Page 49: ...SECTION 5 ACCESS CONTROL BY IDENTIFICATION...

Page 50: ...RSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide This section only relates to terminals equipped with a contactless smartcard reader se...

Page 51: ...on process If the identification is successful the terminal triggers the relay or returns the corresponding User ID to central security controller The user ID can be sent through various interfaces Pl...

Page 52: ...40 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Access control by identification MORPHOACCESS J SERIES User Guide...

Page 53: ...SECTION 6 ACCESS CONTROL BY AUTHENTIFICATION...

Page 54: ...42 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...

Page 55: ...MIFARE cards It is then necessary to configure the parameters listed in the next sections so as to set the wished recognition mode using contactless smart card Note that when app contactless enabled p...

Page 56: ...card MORPHOACCESS J SERIES User Guide Recognition with MIFARE cards supposes that the user swipes a MIFARE card containing some structured data identifier biometric templates Data are localized on the...

Page 57: ...ess card Captured fingerprints are matched against templates read on the card PK Identifier and fingerprints must be stored on the card It is also possible to skip the biometric control in this case t...

Page 58: ...ternal database is not used To enable this mode set app bio ctrl authent PK contactless to 1 To disable this mode set app bio ctrl authent PK contactless to 0 To start the authentification process the...

Page 59: ...database the MorphoAccess performs an authentication using the biometric templates associated to this ID The ID can be stored into a TLV structure typically a card encoded by MEMS or directly read at...

Page 60: ...troller Once the user authentication is done the terminal automatically loops back and waits for an other user s card presentation Required tags on card Card structure is described in MorphoAccess Con...

Page 61: ...defined A user s record with the same User ID value and user s fingerprint templates must exist in the local database of the MorphoAccess Authentication process is exactly the same as the one presente...

Page 62: ...46 Read at sector 15 It is possible to configure the MorphoAccess Wiegand output to add parity bits Authentication based on contactless card mode In this mode the user s card decides of the type of co...

Page 63: ...tactless Card Specification Bypassing the biometric control in authentication When this option is activated only the user ID is required on the user s card This option can be combined with any of the...

Page 64: ...a smart card reader In this configuration the MorphoAccess reads binary data on card and send it without verification ID Card Mode PK1 PK2 PIN BIOPIN bypass authenticati on Yes No No No No No Disabli...

Page 65: ...dentification if user places his finger on the sensor operation identical to identification mode running an authentication if the user presents his contactless card operation identical to authenticati...

Page 66: ...54 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Access control by authentication MORPHOACCESS J SERIES User Guide...

Page 67: ...SECTION 7 PROXY MODE...

Page 68: ...56 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...

Page 69: ...a set of biometric and databases management commands In Proxy mode the access control is performed remotely by the Host System the MorphoAccess works as a slave waiting for external commands such as...

Page 70: ...roxy all identification and authentication modes must be disabled It means that all controls must be turned off the terminal becomes a slave of the host system the access control application is runnin...

Page 71: ...SECTION 8 TERMINAL CUSTOMIZATION...

Page 72: ...60 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...

Page 73: ...er presents a bad finger he can replace his finger without presenting his card again The result is sent only after this second attempt It is possible to set the finger presentation timeout and to deac...

Page 74: ...CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Setting up recognition mode MORPHOACCESS J SERIES User Guide In authentication mode a finger presentation period can be defined Setting up the au...

Page 75: ...ecurity Controller When convenience is the most important factor the FNMR must be low and conversely if security is more important then the FMR has to be minimized Different tunings are proposed in th...

Page 76: ...urity level than an installation with a central access controller which is the only one allowed to open the door Relay external activation This function controls the relay with a push button connected...

Page 77: ...OMIZATION T ERMINAL C USTOMIZATION T ERMINAL C USTOMIZATION T ERMINAL C USTOMIZATION T ERMINAL C USTOMIZATION Figure 8 1 Internal relay activated by LED IN Typically the MorphoAccess relay controls th...

Page 78: ...justable timeout for the closure of a switch between LED1 and GND or between LED2 and GND 3 The controller checks the user s access rights 4 The controller sets LED1 to GND to grant the access or sets...

Page 79: ...MorphoAccess will wait for an acknowledgement signal from the CSC through LED IN signals If the controller has only one LED signal dedicated to access authorized this signal must be connected to LED1...

Page 80: ...t creates a record per access request The created record includes the date and the time of record creation the result of the access control granted or denied and if denied for which reason the identif...

Page 81: ...activate a physical device such as a door electric lock This section is only an introduction about the MorphoAccess interfaces Please refer to MorphoAccess Remote Messages Specification for complete d...

Page 82: ...ult messages to a controller through the following protocols Wiegand Dataclock RS485 IP TCP or UDP or SSL through Ethernet or Wi Fi TM For further information about the SSL on MorphoAccess please refe...

Page 83: ...d by monitoring anti tamper switches the terminal is removed from the wall by monitoring the anti pulling switches When one of those event is detected the MorphoAccess J Series terminal acts as requir...

Page 84: ...e same lines only one of these protocols shall be enabled at one time else priority is given to Wiegand then Dataclock then RS485 Those configuration keys are app send ID wiegand enabled app send ID d...

Page 85: ...ID To be validated configuration key app failure ID enabled must be set to 1 In Wiegand and Dataclock the alarm ID is sent like other Failure Ids See the documentation MorphoAccess Remote Messages Sp...

Page 86: ...nd ID wiegand enabled must be set to 1 and the configuration key app tamper alarm level must be set to 2 alarm and buzzer The configuration key app failure ID alarm ID must be set to 62221 to link the...

Page 87: ...p time mask When using MEMS a time mask feature is available This mode enables the access according to its time mask Time mask is defined by slots of 15 minutes over a week To use this feature the loc...

Page 88: ...76 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Setting up time mask MORPHOACCESS J SERIES User Guide...

Page 89: ...SECTION 9 MAN MACHINE INTERFACE...

Page 90: ...78 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...

Page 91: ...HINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE 1 Convention Intermittent Pulse led is 1 second OFF 0 05 second ON For example Intermittent blue Pulse Fast P...

Page 92: ...SION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Identification Waiting for a finger on the sensor MORPHOACCESS J SERIES User Guide 2 Identification Waiting for a finger...

Page 93: ...MORPHOACCESS J SERIES User Guide Authentification waiting for user s contactless card M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE...

Page 94: ...0 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Multi factor mode waiting for user s finger or contactless card MORPHOACCESS J SERIES User Guide 4 Multi factor mode waiting for user s...

Page 95: ...ACCESS J SERIES User Guide Access granted M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE 5 Access...

Page 96: ...ODUCTION AND DISCLOSURE PROHIBITED Access denied MORPHOACCESS J SERIES User Guide 6 Access denied The user is not recognized or the access is not allowed to this user by Time Mask feature or by Centra...

Page 97: ...r finger on the sensor M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE 7 Timeout while waiting for...

Page 98: ...MENT REPRODUCTION AND DISCLOSURE PROHIBITED No database or empty database MORPHOACCESS J SERIES User Guide 8 No database or empty database The selected access control mode requires at least one record...

Page 99: ...E M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE 9 USB mass storage key can be removed When a USB Mass Storage key is used...

Page 100: ...ion key value change access request log file acquisition etc Normal process will be available again as soon as the configuration operation is completed This signal is displayed during remote managemen...

Page 101: ...error M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE M AN M ACHINE I NTERFACE 11 Sensor start up error The terminal fails...

Page 102: ...90 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED Sensor start up error MORPHOACCESS J SERIES User Guide...

Page 103: ...SECTION 10 APPENDIX...

Page 104: ...92 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...

Page 105: ...SURE PROHIBITED MORPHOACCESS J SERIES User Guide MorphoAccess 100 and 500 Series compatibility A PPENDIX A PPENDIX A PPENDIX A PPENDIX A PPENDIX A PPENDIX 1 MorphoAccess 100 and 500 Series compatibili...

Page 106: ...94 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MorphoAccess 100 and 500 Series compatibility MORPHOACCESS J SERIES User Guide...

Page 107: ...ontactless smartcard reader Contactless authentication with ID on card template in local database cfg Maccess Admin mode 4 app bio ctrl authent ID contactless 1 Contacless authentication card mode cfg...

Page 108: ...RSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MorphoAccess 200 and 300 Series compatibility MORPHOACCESS J SERIES User Guide cfg Maccess Admin mode 5 multi factor mo...

Page 109: ...ese templates Send ID if authentication is successful 0 0 1 0 Authentication with templates on card Read ID and templates on contactless card Biometric authentication using these templates Send ID if...

Page 110: ...e Authentication with templates on card biometric control disabled Read ID on contactless card Send ID 0 1 0 1 Card mode authentication biometric control disabled Read card mode ID templates if requir...

Page 111: ...t supported BIOPIN biometric PIN not supported Operations ID Card Mode PK1 PK2 PIN BIOPIN Authentication with templates in database Yes No No No No No Authentication with templates on card Yes No Yes...

Page 112: ...s not reachable Use USB Network Tool to set a valid network address in your terminal Refer to USB Network Tool User Guide Sensor is off Verify that the base contents at least one record Check that ide...

Page 113: ...w biometric terminals com login and password required Administrator Information Installation Information MorphoAccess J Series User Guide This document describes operating mode and terminal settings M...

Page 114: ...commands MorphoAccess Remote Messages Specification Details how the MorphoAccess sends the access control result to a Central Security Controller MorphoAccess Contactless Card Specification This docum...

Page 115: ...SECTION 11 SUPPORT...

Page 116: ...104 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...

Page 117: ...em S curit SAV Terminaux Biom triques Boulevard L nine BP428 76805 Saint Etienne du Rouvray FRANCE Phone 33 2 35 64 55 05 Hotline Sagem S curit Support Terminaux Biom triques 18 Chauss e Jules C sar 9...

Page 118: ...106 DOCUMENT SSE 0000077399 01 VERSION 1 0 MAY 2010 SAGEM S CURIT DOCUMENT REPRODUCTION AND DISCLOSURE PROHIBITED MORPHOACCESS J SERIES User Guide...