Training Your Puppy® Unit Page 1
Training Your ® FIU-810 Puppy Unit A Guide to Installing and Using Your Sony® FIU-810 Fingerprint Identity Token with Sony’s Puppy Suite™ Personal Software Revision 1.
Sony Media & Application Solutions 1 Sony Drive Park Ridge, NJ 07656 www.sony.com/Puppy ©2004 Sony Electronics Inc. All rights reserved. Features and specifications are subject to change without notice. Sony, Puppy, Puppy Suite, the Puppy logo, and Like No Other are trademarks of Sony. Microsoft and Windows are registered trademarks of Microsoft Corporation. Adobe and Acrobat are trademarks of Adobe, Inc. Other trademarks are property of their respective owners.
INTRODUCTION 5 SECTION 1: YOU AND YOUR PUPPY® FINGERPRINT IDENTITY TOKEN 6 THE UNIT CONNECTIONS FINGERPRINTS 6 6 6 SECTION 2: INSTALLING THE SOFTWARE 8 SYSTEM REQUIREMENTS FOR PUPPY SUITE™ PERSONAL SOFTWARE INSTALLATION 8 9 SECTION 3: INITIAL SETUP 11 PUPPY SUITE™ PERSONAL SOFTWARE AND THE FIU-810 PUPPY® TOKEN FIRST…PLUG IT IN! FINGERPRINT AND PUPPY PASSWORD (PIN) ENROLLMENT PRIVATE FILE STORAGE SETUP SETTING UP YOUR WINDOWS ACCOUNT FOR FINGERPRINT LOGON 11 11 11 14 15 SECTION 4: USING PUPPY S
Introduction Thanks for purchasing (shall we say adopting?) a Sony® Puppy® fingerprint identity token. We think you’ll find it to be easy-to-use and a convenient tool in your day-to-day interactions with your computer. Just think…you won’t need to worry about typing passwords any more! And you can be assured that your fingerprints are protected, as they are being matched, processed, and stored on the portable unit sitting on your desk.
Section 1: You and Your Puppy® Fingerprint Identity Token You will be quite happy with the performance and capabilities of your Puppy unit, if you follow some general guidelines, The Unit The Sony® FIU-810 Puppy® Fingerprint Identity Token is the latest in Sony’s line of biometric products for the enterprise market.
some difficulty reading your fingerprint. situation! Here are some things you can do to avoid this 1. The Puppy® unit reads the patterns of ridges and valleys on the portion of your finger between the tip and the first bend in your finger. Do not simply put the tip of your finger on the sensor and hope for the unit to detect it! And don’t turn your finger to the right or the left, or place it upside down… use the finger guide on the device to judge correct finger placement.
Section 2: Installing the Software System Requirements for Puppy Suite™ Personal Software Hardware • • • • • Intel® Pentium® 300MHz or higher processor (Pentium II 400MHz or higher recommended) 64MB or higher (128MB or higher in Windows® XP) 5MB of free hard disk space CD-ROM Drive Available USB Port: Puppy unit must be connected directly to PC or via self-powered hub.
Installation IMPORTANT: You must be an administrator or have administrative rights on your computer in order to install the Puppy Suite Personal software. IMPORTANT: If you have another version of the Puppy Suite software installed (i.e. for the FIU-600 Puppy) or any other biometric security software, you must uninstall this software first to prevent any conflicts. 1. Insert the Puppy Suite 810 CD-ROM into a CD-ROM drive. The [Puppy Suite 810] dialog box will appear.
8. Necessary files will be copied into the hard disk and the [InstallShield Wizard Complete] dialog box will appear. 9. Choose [Yes, I want to restart my computer now] and click [Finish]. If you see any message boxes, read carefully and click [OK]. Your PC will be rebooted and the installation will be complete.
Section 3: Initial Setup Puppy Suite™ Personal Software and the FIU-810 Puppy® Token The FIU-810 fingerprint identity token scans, stores, and matches fingerprints on-board the device. Each Puppy unit can hold up to 10 fingerprints of a single user. Each device is therefore unique to an individual user.
choose [Fingerprint OR Password]. You can improve the security of this choice by making your Windows password more complex (add numbers, letters, symbols, upper/lowercase) and also making the Puppy password (see Step 4) a ‘complex’ password. In any case, it’s always a good idea to keep a copy of your Windows password in a safe, secure place, just in case something happens to your Puppy or your PC. You can always add or change the authentication methods later. 4.
• Retry after breathing on your finger or wetting it to moisten your skin (when your finger is too dry) • Retry after drying your finger (when your finger is too wet) • Wipe off dirt and dust from the sensor with a soft, dry cloth • Try another finger 6. The [Select Finger] dialog box will appear. Click a finger you want to register. When you select a finger, a small circle will appear at the top of the selected finger. Click [Next]. Figure 2: Right index has been selected. 7.
If verification succeeds, the [Register] button will be available. You can register now by clicking [Register]. If verification fails, the [Register] button won't be available. Please verify again or re-scan your fingerprint 3 times by clicking [Back]. 8. When you finish registering your fingerprint, you will be asked to register another fingerprint. If you click [Yes], you will repeat the enrollment process and register another fingerprint. Sony strongly suggests enrolling more than one fingerprint.
Note • As part of setting up the private storage area, all files in the public storage area [except fingerprint data, password data, certificate(s), cryptographic key(s) and User Manager software] will be deleted. Please backup files in the public storage area before doing this operation, if needed. 1. Start User Manager and click [Resize]. 2. The [Resize Private Storage Area] dialog box will appear. You can slide the bar on the right side to set the size of the private storage area.
Note Accounts registered into the Puppy unit must exist on the current Windows system. If you add a Windows account which does not exist, the account will not be added to Windows. For more information about how to add a new Windows account, see Windows Help. Figure 1: Account Manager Screen and Button Description 1. Start Account Manager by choosing [Start Account Manager] by clicking [Start] in the Taskbar -> [Programs] -> [Puppy Suite 810] or via the [Puppy Suite] icon in the System Tray. 2.
Section 4: Using Puppy Suite™ Personal Software This section provides you with the basic tools needed to use your Puppy® device with Puppy Suite software: • Windows® Logon • Password Provider • Access Files & Lock/Unlock Private Storage Area • Encrypt/Decrypt Files • Open Applications with the Touch of a Finger (Finger-Click) • Use Digital Certificates • Disconnect/Connect Actions and Issues • Puppy Suite Settings Important: Your encrypted passwords are stored on the FIU-810 unit itself.
Figure 1: Puppy Suite Personal Windows Logon Screen 1. Make sure that a User Name registered in Account Manager is displayed in the [User Name] box. If not, choose a user name from the drop down list. 2. Choose an authentication method from the drop down list. o [Fingerprint] Fingerprint Authentication only. Fingerprints must be registered. o [Password] Password Authentication only. A password must be registered. o [Fingerprint AND Password] Fingerprint and password Authentication.
Note If you edit the Windows password in Account Manager, the password in Windows itself will NOT be changed. Also, if your password was changed by your administrator, you will need to go into Account Manager and change the information manually. 1. Log on without the Puppy unit connected*, and type in your username and new password. 2. Plug in the Puppy unit after you reach the desktop, click [Connect Puppy] after clicking on the [Puppy Suite] system tray icon. 3.
Password Provider: Register and Automatically Enter Information for Websites and Application Dialog Boxes The Password Provider application allows you to automate the entry of usernames, passwords and so on by placing your finger on the Puppy unit. You will need to register username and/or password information before using this functionality. No more remembering or typing passwords! Note There are some websites and applications which do not appear to be recognized by the Puppy Suite software.
4. Type identifying information into the [Label] box. This [Label] will be displayed in the [List of registered data] dialog box. 5. Set [Auto] check box. If you check this box, the [Login] dialog box will appear automatically when the registered web site or application dialog box is opened or becomes active. If not, the [Login] dialog box won't appear until the [Display Login Dialog] key (Default [F12] key) is pressed. 6. Click [Register]. The [Login] dialog box will appear. 7.
• If the [Auto] check box is OFF, the [Login] dialog box won't appear automatically when you open the registered web site or application dialog box. In this case, press the [Display Authentication Dialog] key to display it. • There may be some websites or applications where the ID(s) and/or password(s) are automatically entered into the dialog boxes, but buttons like [OK] & [Submit] are not automatically 'clicked' by the Password Provider. Simply click these buttons manually if this is the case.
Accessing Files on Your FIU-810 Unit Once you have set up your private storage area on the device as outlined in Section 3, two removable drives (with separate drive letters) will be displayed in My Computer. You can choose to name these drives, if you wish. The private storage area is displayed as an empty disk drive on your PC. After unlocking, the private storage area can be used (‘mounts’) as a normal disk drive.
Accessing the Private Storage Area: Unlock from User Manager 1. Start User Manager and click [Unlock]. If, instead, the [Lock] button is displayed, the private storage area is already unlocked. 2. The [Login] dialog box will appear. Authenticate your fingerprint and/or password. After successful authentication, the private storage area will be unlocked. 3. The [Unlock] button will change to the [Lock] button after the private storage area is unlocked.
• The file name will be changed to "(original file name).ps8" and the icon will also be changed. The encrypted file is stored in the same directory as the original file and the original file is deleted by default. If you change the setting, you can keep the original file. • If you don't want to alter the time stamp of the original file, be sure to check [Compress the file] in the Crypto Manager Settings. • The encryption key for files encrypted with Crypto Manager is stored on-board the FIU-810 unit.
Finger Click: Register Web Site or Application Figure 1: Finger Click Settings Screen 1. Click the [Puppy Suite] icon in the System Tray and choose [Finger Click Settings]. The [Login] dialog box will appear. 2. Verify your finger on the Puppy unit. The [Finger Click Settings] dialog box will appear. 3. Click a finger to link to a particular web site or application. 4. Enter a web site (URL) or application file (.exe) into the box. You can specify an application file by clicking [Search]. 5. Click [Exit].
higher security into your PC and network environment. (Links to additional information on PKI and digital certificates are provided in the Puppy Suite Help file.) The Puppy unit can generate and store up to 2048-bit RSA key pairs and store their associated digital certificates to communicate with applications utilizing certificates through either the CryptoAPI or PKCS#11 cryptographic module interfaces.
Certificate Manager: Managing your Digital Certificates Figure 1: Certificate Manager Screen To start Certificate Manager, choose [Start Certificate Manager] after clicking on the [Puppy Suite] icon in the System Tray or click [Start] in the Taskbar -> [Programs] -> [Puppy Suite 810]. Verify your finger on the Puppy unit to open the display.
1. Start Certificate Manager. 2. Click the [Personal] tab. Your "Personal" certificate(s) will be displayed. 3. Click [Import], [Export], or [Delete]. Import Certificate 1. The [Open File] dialog box will appear. 2. Choose the certificate file you want to import into the Puppy unit and click [Open]. The [Input Password for Certificate] dialog box will appear. 3. Type the password for the certificate file and click [OK]. 4. Choose whether or not the private key can be exported.
Certificate Manager: Registering Certificates to the Windows Certificate Store, Import/Export/Delete Certification Authority (CA) Certificates Detailed instructions on these operations can be found in the Puppy Suite Help file, accessible from the [Start menu] or the [Puppy Suite] icon in the System Tray.
When complete, • Click [OK] to make your changes effective and close the dialog box. • Click [Apply] to make your changes effective. • Click [Default] to return all settings to their default values. • Click [Cancel] to cancel the changes and close the dialog box. Figure 1: Puppy Suite Settings Screen Puppy Suite Settings: Password Provider • [Start automatically whenever possible] Check Box Check if you want the Password Provider software to start when Windows starts. This is checked by default.
Puppy Suite Settings: Crypto Manager • [Compress the file] Check Box Check if you want to encrypt a file after the file is compressed. The time stamp (modified date) is not changed in the compressed and encrypted file. • [Delete original file] Check Box Check if you don't want to keep the original file when the file is encrypted/decrypted.
Section 5: Uninstalling the Puppy Suite Personal Software Important: You must be logged in as an Administrator to uninstall the software. You can uninstall the Puppy Suite software and also add/delete individual components. Uninstalling the software does not erase your fingerprints, windows account info, passwords, or any other data stored on the Puppy unit. In fact, you can uninstall and reinstall the software without worrying about your user data or experience.
4. The message below will appear when complete. Click [OK].
Section 6: Troubleshooting & Frequently Asked Questions (FAQ) Troubleshooting Check First… • Have you correctly connected the Puppy unit to your PC? • Are you using the USB cable included with the Puppy unit? • Does your PC meet the System Requirements? • Is your OS supported? To check an Edition or Service Pack, see the [Properties] of Windows by right-clicking on My Computer. Symptom • The "Puppy has not been connected" message appears.
• • Does your computer's hard disk have over 20 MB available? Is the CD-ROM drive working correctly? The Puppy Suite software CD-ROM may be dirty. • Wipe it off with a soft, dry cloth. You are more likely to fail fingerprint registration/verification under the following circumstances.
Frequently Asked Questions (FAQ) How does the FIU-810 unit read my fingerprint? The Puppy® device offers robust fingerprint imaging technology based on a technique known as capacitance, which digitally reads the fingerprint without leaving ink residue on your finger. Capacitance sensors cannot be fooled by paper copies and do not require cleaning. Do I need to clean the sensor? No, the Puppy unit does not require regular cleaning. However, if you notice debris (dust, etc.
…if your finger is too moist, to rub your finger on your slacks or sleeve and then place your finger on the unit. What happens if I lose my FIU-810 unit? The Puppy Suite Personal software was designed with both convenience and security in mind. If you lose your device, and you had set your authentication method to [Fingerprint OR Password], the software will default to a standard Windows username and password (not your Puppy password) dialog box. Simply type in this information to gain access to your PC.
• …and more. More information is available at www.sony.com/Puppy. Depending on the size of your organization, you may also want to contact software solution providers supporting the FIU-810 product. I get an error when I verify my fingerprints after enrollment. One or more of the prints do not match. How can I prevent this from happening? You are not placing your finger consistently on the unit. During enrollment be sure to place your finger in a similar fashion per the instructions in Section 1.
to logon with your Puppy unit and your fingerprint. However, some software packages, particularly ones that tie in with Windows authentication mechanisms install their own GINA component. Therefore, there may be a conflict between the Puppy GINA and other installed GINAs. Only one GINA can be active at a time. Visit www.sony.com/Puppy for more information and possible solutions, or contact our Technical Support Center at 866-347-7669 or email us at fiuinfo@am.sony.com.
Section 8: Glossary C Capacitance A method of capturing a fingerprint image via measurement of the varying capacitance values (electrical field) between the fingerprint sensor and the ridges and valleys of a fingerprint. Certification Authority (CA) A trusted organization that issues digital certificates. CryptoAPI Cryptographic API (Application Programming Interface) provided by Microsoft.
P PKCS#11 Cryptographic Token Interface Standard provided by RSA Data Security. T Template The file that is generated and stored after enrollment of a fingerprint (or other biometric). The raw image of the fingerprint is not stored. Typically, the file is substantially smaller than the original raw image, and cannot be reverse-engineered into the original image.
Section 9: Who to Contact? If you have any problems with your Puppy® unit or the Puppy Suite™ software, need more information on other Sony products, or have specific questions relating to your installation, please contact Sony via the information provided below. • Check this first!! Information, Software Updates / Patches: www.sony.
