User’s Guide for Precise 100 SC Fingerprint Identification System for Windows NT/2000 Precise 100 SC
Notice Electromagnetic Compatibility (EMC) Notices For Europe: This digital equipment fulfils the requirements for radiated emission according to limit B of EN55022: 1994 and the requirements for immunity according to EN55024: 1998 residential, commercial and light industry. For the U.S.A.: FCC This device complies with part 15, subpart B, class B of the FCC Rules demonstrated by compliance with EN55022: 1994, class B.
Content Chapter 1 Introduction 5 Precise 100 SC – the Fingerprint Reader Why Use Fingerprint About Precise 100 Family 6 7 8 Possible configuration 9 Icons and Conventions 10 Chapter 2 Installation 11 Minimum System Requirements Preparing Installation Setting the Parallel Port Connecting the Fingerprint Reader to the Computer Installing the Fingerprint Identification Software Installing the Precise 100 Client Software Precise Demo Port Configuration 12 13 13 14 15 16 17 18 Attaching the Fingerp
Chapter 4 NOTE: Chapter 4 is for administrators. Users without administrator rights do not have access to the BioManager.
Chapter 1 Introduction Congratulations on selecting Precise Biometrics’ Fingerprint Identification System! Using your fingerprint for identification is an easy and secure way to prove your identity. Please read this chapter before you install and use the system.
Precise 100 SC – the Fingerprint Reader Congratulations – you are about to use the Precise 100 SC for secure, cost-effective and convenient logon! diode fingerprint sensor smart card slot The Precise 100 SC fingerprint reader The fingerprint reader includes a sensor for reading fingerprints and a smart card reader for reading and writing information on smart cards. When you place your finger on the fingerprint reader, the part of the finger that touches the sensor is read.
Why Use Fingerprint Technology? In modern society, there is a vast need for secure identification at for instance logon to a computer network. An unauthorised person who obtains access to computer files constitutes a major risk to many companies. In order to prevent unauthorised access, network users have previously identified themselves with a password entered together with the username when logging into a network. The disadvantages of passwords are: • Unreliable identification.
About Precise 100 Family Precise 100 SC Server – Biometric logon for the NT network, Precise 100 SC Server provides security and convenience. Precise 100 SC Server supports biometric network logon to the domain server from NT clients using the Precise 100 A and/or Precise 100 SC systems. Precise 100 SC Server includes administrator support tools. Precise 100 A Client – For Windows 98/NT/2000, local or in an NT domain.
Possible configuration With the Precise Biometrics server software an administrator can administrate all users. To enable biometric logon to domain server acconts, user´s fingerprints must be registered here. Domain server, with Precise 100 SC Server installed With Precise 100 A installed, users can log on to local accounts and/or domain server accounts, depending on where the fingerprints are registered.
Icons and Conventions • Key names on the keyboard appear in italics, for example Caps Lock, Ctrl, Enter. • Names of fields, text boxes and buttons appear in bold type, for example Username, User, OK. • Keys that you should press and hold down together appear as the key names and the plus (+) sign, for example Ctrl + Alt + Delete. • An arrow is used to separate icons or menu options that should be selected in succession, for example Start > Settings > Control Panel.
Chapter 2 Installation The installation consists of two parts. Start by following the instructions in the Preparing Installation section. Then continue with the Installing the Fingerprint Identification Software section. NOTE: If you are using a Precise 100 SC with parallel port connector, it is very important that the parallel port is set to ECP mode before using the fingerprint reader. Otherwise, the fingerprint reader will not function properly. See Setting the Parallel Port in this chapter.
Minimum System Requirements In order to install the software included on the enclosed CD-ROM, your computer must meet the following system requirements: • PC with 200 MHz Pentium processor or equivalent • 10 MB hard disk space available • USB port or Parallel port with ECP support and PS/2 keyboard/mouse port • Windows NT Workstation 4.0 operating system, with Service Pack 3 or higher, or Windows 2000.
Preparing Installation The Precise 100 SC fingerprint reader comes in two versions: Precise 100 SC PAR and Precise 100 SC USB. The Precise 100 SC PAR communicates with the computer through the computer’s parallel port and the keyboard port or mouse port is used to power the fingerprint reader. The Precise 100 SC USB communicates with the computer through the computer’s USB port.
Connecting the Fingerprint Reader to the Computer 1. Turn off the computer. 2. Make sure that the parallel port is set to ECP mode. fingerprint reader Precise 100 SC pass through PS/2 connector parallel port connector 3. Connect the fingerprint reader to the parallel port at the back of the computer by using the connector. Make sure that the connector is secured, so that it can not be disconnected by mistake. parallel port connector pass-through PS/2 connector keyboard PS/2 connector 4.
5. Connect the keyboard/mouse PS/2 connector to the pass-through PS/2 connector. 6. Power on the computer. Continue with next step – Installing the Fingerprint Identification Software. Installing the Fingerprint Identification Software NOTE: Only users with administrator rights can install the software. The fingerprint identification software, Precise 100 Client, is needed to read your fingerprints and to save and retrieve information about your fingerprints, accessible domains, etc.
Installing the Precise 100 Client Software NOTE: After installation, the computer has to be restarted before you can use the software. 1. Log into your local computer as administrator. It is strongly recommended that all Windows programs are closed and no disk is in the disk driver. 2. Insert the enclosed Precise 100 Client software CD into your computer’s CD-ROM drive. The Master Setup screen appears. Master Setup screen NOTE: If the CD does not start automatically, start the CD by clicking Start > Run.
5. To install the Precise 100 Client software, click the Precise 100 Client button and follow the instructions. The software will guide you through the installation. Use the Back and Next buttons to navigate through the screens. 4. Click Finish to complete the installation. The computer has to be restarted after the installation is completed. Remove the software CD from the CD-ROM drive before restarting the computer. The software is now saved on your hard drive. 5.
Port Configuration If you are using Windows NT (only) and your system is equipped with multiple parallel ports, you can specify which parallel port the fingerprint reader is connected to. This is done in Precise Biometrics Registry Settings. In the rare case you should experience compatibility problems with other software, you may also need to turn interupts on or off. 1. Click Start > Settings > Control Panel. The Control Panel screen appears. 2. Double-click on the Precise Biometrics logo.
Attaching the Fingerprint Reader If preferable, the fingerprint reader can be attached to, for example the side of your monitor. Simply use the adhesive tape at the back of the fingerprint reader. The adhesive tape is very durable and will keep the fingerprint reader attached for many years. The fingerprint reader can be removed and attached again. If the adhesive tape loses its stickiness, replace it with one of the enclosed adhesive tapes.
Chapter 3 Using the Fingerprint Reader As with most new technology, it might take some training to feel at home logging on using your fingerprint. When you log on and verify your fingerprint, it is important that you place your finger on the fingerprint reader in a proper way. The following chapter contains some examples of good and bad ways of placing your finger on the fingerprint reader.
Placing Your Finger Correctly on the Fingerprint Reader When you place your finger on the fingerprint reader sensor to identify yourself, please remember two things: 1. It is important that you use the correct finger. For example, if you place your left index finger on the sensor, you will not be granted access if the system expects you to use your left middle finger. When logging on, a screen shows you which finger you are expected to use – it is marked with a dot. 2.
Poor image: rotated fingerprint. Rotated finger Poor image: off-centre fingerprint. Skew finger – too far to the right.
Poor image: off-centre fingerprint. Finger placed too far down on the sensor Good image: fingerprint in the middle, medium pressure to the sensor.
If the placement is correct, but too much or too little pressure is used, the images will look like this: Poor image: faint fingerprint caused by insufficient pressure. The finger may also be very dry. Poor image: too dark fingerprint caused by excessive pressure. The finger may also be wet. When you are placing your finger on the fingerprint reader sensor, it is important that you use the finger marked in the Verify Fingerprint window.
Template stored in database Good image from the sensor Above is a good fingerprint, which will not result in a match since the fingerprint is not matched with its corresponding template. You may have placed the wrong finger on the sensor, or it could be an unauthorised person trying to log into your account. The system will deny access. To learn more about how to position your finger on the fingerprint reader, use the Precise Demo.
Fingerprint Reader Maintenance It is very important that the sensor surface is kept clean. If the sensor is dirty or scratched, there is an increased risk that a fingerprint can not be successfully matched with its corresponding template stored in the database. • Protect the fingerprint reader from any kind of physical damage. • If necessary, clean the surface with a clean cotton cloth. You can dampen the cloth slightly with a cleaner.
The BioManager Chapter 4 The BioManager is the heart of the fingerprint identification system. This chapter addresses the process of enrolling a user into the fingerprint database system and registering a user’s fingerprint data. NOTE: Chapter 4 is for administrators. Users without administrator rights do not have access to the BioManager.
Introduction to the BioManager In the BioManager, information about users, fingerprints, preferences and accessible domains is stored. Administrators can: • Add and delete users • Register fingerprints • Turn password users into biometric users • Decide whether a biometric user is allowed to use a password as backup • Change properties for users • Set the security level for the system Users are listed in the BioManager with a symbol next to each username.
About Primary Logon Fingers The primary logon finger is the finger normally used to log on. The system assumes that the selected primary logon finger is placed on the fingerprint reader when a user logs into or unlocks a workstation. The fingerprint on the sensor is then compared to the primary logon fingerprint template in the database. The user can not change primary logon finger, but he or she can easily choose to verify another registered finger when logging on.
About the Security Level The security level is an important part of the identification system. A higher security level reduces the risk of an unauthorised person logging into an account. An administrator can set the security level for biometric users. The security level is set globally; i.e. the set security level affects all biometric users in the domain. The False Acceptance Rate, FAR, is a parameter used to indicate the probability that an unauthorised user is given access to an account.
Security level 4 is recommended to guarantee a reliable system that grants easy access to authorised users while barring unauthorised users. When should the higher and lower levels be selected? A lower security level is selected when there is little risk of an unauthorised user attempting to log on, and a very fast verification process is desirable. A higher security level is selected when security is the main concern. In this case, the verification process may take a little longer.
Passwords and Security Level If an administrator allows users to log on with a password, a high security level loses part of its function. Even if the system is very restrictive when fingerprints are verified, the security might suffer from users who write down passwords on notepads or choose a very simple password, which can easily be cracked. Fingerprint Registration In order for a user to use a fingerprint to log on, the fingerprint must be read and stored in a database – i.e. it has to be registered.
3. Type the user’s name in the Username field. 4. Type the user’s complete name in the Full Name field. 5. Type the user description in the Description field. 6. Choose where to save the fingerprint data. 7. Click Next. See Continue Fingerprint Registration in is this chapter for information on how to continue. Beginning Fingerprint Registration of an Existing User If a user has an account registered, his or her username is listed in the BioManager.
4. Type the full name in the Full Name field. 5. Type the description in the Description field. 6. Choose where to save the fingerprint data. 7. Click Next. See Continue Fingerprint Registration in this chapter for information on how to continue.
Continue Fingerprint Registration When you click Next in the introduction screen of the Fingerprint registration wizard, the fingerprint collection screen appears: 1. Select the finger to register by clicking in one of the checkboxes. Let the user follow the instructions on the screen. Make sure the selected finger is placed on the fingerprint reader sensor. NOTE: Instruct the user to place the middle of the finger pad on the sensor, to ensure an image rich in fingerprint information. 2.
5. If desired, select the Possibility to log on using password checkbox. This enables the user to log on using either a password or a fingerprint. Type the password in the Password field. Confirm the chosen password in the Confirm field. NOTE: If a current password user is enrolled, the current password is no longer valid. A new password must be typed, in order for the user to log on with a password as a backup. 6. Click Next. The saving screen appears. 7. Click Finish.
Checking and Changing a User’s Properties An administrator can check and change the set properties for an enrolled user: • Full name • Description • Register fingerprints • Primary logon finger • Possibility to log on using a password 1. Log on as administrator. 2. Click Start > Programs > Precise Biometrics > BioManager. The BioManager screen appears. 3. Double-click on a username. You can also click on a username and then click User > Properties. The Fingerprint registration wizard appears. 4.
Deleting a User When a user is removed from the username list, he or she cannot log into the associated account anymore. 1. Click Start > Programs > Precise Biometrics > BioManager. The BioManager screen appears. 2. Click on the username that you want to delete from the list. 3. Click User > Delete. 4. Click OK to delete the user. 5. Click OK to confirm operation. The user is now deleted and can no longer log into the system.
Chapter 5 Logging on When an administrator has registered your fingerprints, you can log into the system using the fingerprint reader. Fingerprint logon is a very secure and simple way to log on. If you want detailed information on how to place a finger on the fingerprint reader, please see Placing Your Finger Correctly on the Fingerprint Reader in the Using the Fingerprint Reader chapter.
Logging on with fingerprint stored on smart card NOTE: You can only log into a domain account using the fingerprint reader once an administrator has enrolled your fingerprints on the domain server. You can only log on with a fingerprint that has been enrolled and stored on the hard disk or on a smart card. To begin logon from the Begin Logon screen 1. Insert your smart card as shown on the screen.
The Verify Fingerprint screen appears. Your primary logon finger will be selected. 2. Make sure the Username and Domain are correct, in other words, that it is your card. 3. Place your finger pad (the area of your finger containing the fingerprint) on the fingerprint reader sensor. The yellow light starts flashing. NOTE: To place another finger on the sensor, select that finger on the Verify Fingerprint screen – you must of course have more than one of your fingerprints stored on the smart card. 4.
Logging on with a Fingerprint To log on from the Begin Logon screen: 1. Place your primary logon finger on the fingerprint reader sensor. The Verify Fingerprint screen appears. 2. Keep your finger placed on the sensor as long as the yellow light is flashing. The system verifies your fingerprint and access rights for the selected domain and displays the Windows desktop. NOTE: The system will try to identify you as the most recent user. If you are not the most recent user, follow the instructions below: 1.
2. Type your username in the Username field. 3. Select your domain from the Domain pull-down list. 4. Click Verify. The Verify Fingerprint screen appears. 5. Place your primary logon finger on the sensor. The yellow light starts flashing. NOTE: To use another finger on the sensor, select that finger on the Verify Fingerprint screen – assuming that the fingerprint is previously registered. 6. Keep the finger placed on the sensor until the yellow light ceases to flash.
Logging on with a Password NOTE: You can only log on using a password if the administrator asked you to type a password when you were enrolled and registered your fingerprints. Once your fingerprints have been registered, any previous password is no longer valid for logon. To begin logon from the Begin Logon screen: 1. Press Ctrl + Alt + Delete. The Logon Information screen appears. 2. 3. 4. 5. Type your username in the Username field. Type your password in the Password field.
Chapter 6 Locking and Unlocking When you leave your workstation temporarily, it is recommended that you lock it to prevent others from using it and accessing your files. The screen saver function can be used to automatically lock the computer.
Locking a Workstation To lock the workstation you are working on: 1. Press Ctrl + Alt + Delete. The Windows Security screen appears. 2. Click Lock Workstation. The system locks the workstation. You are the only one who can unlock your workstation. An administrator can log you off.
Unlocking a Workstation Unlocking with fingerprint stored on smart card To unlock a workstation from the Workstation Locked screen: 1. Insert your smart card into the smart card slot on the fingerprint reader as shown on the screen. The Verify Fingerprint screen appears. 2. Place the selected finger on the sensor. 3. Keep your finger placed on the sensor as long as the yellow light is flashing. The system verifies your fingerprint and displays the Windows desktop.
Unlocking with a Fingerprint To unlock a workstation from the Workstation Locked screen: 1. Place your primary logon finger on the fingerprint reader sensor. The Verify Fingerprint screen appears. Your primary logon finger will be selected. 2. Keep your finger placed on the sensor as long as the yellow light is flashing. The system verifies your fingerprint and displays the Windows desktop.
Unlocking with a Password To unlock a workstation from the Workstation Locked screen: 1. Press Ctrl + Alt + Delete. The Unlock Workstation screen appears. 2. Type your password in the Password field. Click OK and your Windows desktop will be displayed. If the unlocking fails, please check the spelling of the password.
Chapter 7 Troubleshooting Fingerprint Troubleshooting If the fingerprint verification fails, the red light on the fingerprint reader is turned on. • Lift your finger and put it back on the sensor. Try to slightly adjust the positioning of your finger. • Make sure you placed the right finger on the sensor, i.e. the finger marked with a dot on the Verify Fingerprint screen. • Try to log on using another registered fingerprint. • Place your finger flat on the sensor – not rotated in any direction.
Smart Card Troubleshooting If your smart card can not be read, remove it from the fingerprint reader. • Insert the smart card with the chip end first and the chip facing upwards. • Make sure the chip is not dirty. You can clean it by gently rubbing a softcotton cloth over the chip surface. • If you are using the parallel port, it must be set for ECP mode. See Setting the Parallel Port in the Installation chapter for more information. • Check that the computer and fingerprint reader are properly connected.
Chapter 8 Uninstalling Only users with administrator rights can uninstall the Precise Biometrics software. The consequences of uninstalling are: 1. No user accounts will be affected in any way. 2. Users without backup password will have to get a password to access their user account. The password used before biometric conversion is no longer valid. 3. Backup passwords registered in the BioManager can be used as standard Windows password. 4.
Uninstalling the Precise 100 Client Software on Windows 2000 1. Click Start > Settings > Control Panel. The Control Panel screen appears. 2. Double-click Add/Remove Programs. The Add/Remove Programs screen appears. 3. Click Precise 100 Client. 4. Click Remove. 5. Confirm by clicking Yes. 6. Click Yes to restart the computer. The Precise 100 Client software is uninstalled. Uninstalling the Precise 100 Parallel Drivers 1. Double-click uninstall.exe. This program can be found in the directory ..
Glossary Biometric A biometric is a measurable, unique, physical characteristic. For example, the pattern on your retinas and your fingerprints are biometrics. ECP/Enhanced Capabilities Port The Precise 100 A PAR and Precise 100 SC PAR readers communicates with the computer via the computer’s parallel port. To make the fingerprint reader and computer communicate properly via the parallel port, the parallel port must be set to a mode called ECP – Enhanced Capabilities Port.
Fingerprint registration See Registration Fingerprints Your fingerprint can be described as a pattern of lines or ridges with valleys in between. The lines form specific patterns that are observable to the naked eye. Loops, arches and whirls are examples of patterns found in a fingerprint. Some finger print structures Ending ridge Ridge Bifurcation or fork The fingerprints also include so-called minutiae points. Minutiae points are the points, where a ridge begins, ends or splits.
Registration When an administrator enrols you into the fingerprint database system, your fingerprints will be registered. You will have to place each finger pad on the fingerprint reader sensor four times. The best image will be saved in a database. Registered fingerprints are used when you log into the system. For example, if your right index finger has been registered, you can place your right finger on the fingerprint reader sensor to verify your identity when you log on.
