BCEPS upgraded with AFIS

sd_bceps2b

Sybu Data upgraded the Biometric Co-Enrollment Prevention System (BCEPS), developed for the South African Medical Research Council,  to utilize the latest Automated Fingerprint Identification System (AFIS) from Innovatrics.

The system provides secure, high performance, low latency, identification and matching of participants from various organizations and research facilities.

The system was successfully rolled-out by the MRC countrywide to  organizations during August 2015.

Read more on the system in the South African Medical Journal.

 

SuperSign – Biometric Security Application

img-setup-whatsnew@2x

 

SuperSign has been purchased in 2017 by Amanzi Asset Management which are the new owners.
Please contact Amanzi directly for any further sales and technical enquiries.

 

The information below is for historic purposes only.

 

SuperSign, is a password replacement solution makes passwords a thing of the past.

People cannot share, lose, forget or steal them. They simply sign on with a fingerprint. At the same time, SuperSign prevents and deters fraud by creating Identity Chains that link users to their transactions, compiling an audit trail of who did what, where and when.

Solution Overview

Overview

System Architecture

Architecture 3-Tier Client Server architecture,  with presentation tier, logic tier and data tier.
Hardware platform Intel x86 or compatible.  Intel Itanium
Software platform Windows 2008 Server R2 Standard, Enterprise.  Windows 7 32, 64 bit. Windows XP SP2, SP3.

Component Overview

SuperSign Client Client module for password replacement and fingerprint logon to Windows forms, Web logons and logon to mainframe transversal systems.
SuperSign Server Server module. Handles requests from SuperSign Clients, Enrollment, Administration, Management and Reporting and Snap-in modules.   Supported directory services: Microsoft Active Directory and Novell eDirectory.
SuperSign GINA Biometric logon for Windows Workstation (PC Logon) for Windows XP
SuperSign Credential Provider Fingerprint logon for Windows Workstation (PC Logon) for Windows Vista, Windows 7 (32bit) and Windows 7 (64 bit)
SuperSign Databases SuperSign user profiles and audit logs are stored in encrypted SQL Server database.Optional databases can be utilized for user identification and enrollment policies and also for storage of sensitive transactional data.
SuperSign NMAS LCM Novell Client Login Method.
ss_lcm
SuperSign NMAS LSM Novell Server Extension (Login Method)Support for NovellOES2 on SUSE Linux , Linux64ss_lsm
Form Capture SuperSign form capture allow administrators to declare new application logon forms, that will be replaced by biometrics.
SuperSign Enrollment Enrollment module.Verification of enrollment officer and optional witness.Supports fingerprint identification against central matching services.Enrollment policies configured by administrator with Administration Module.ss_enrollment
SuperSign Administration Administation module to define usage policies, enrollment policies, strong password generation policies, logon form assignment and credential set management.
SuperSign Management Console, Snap-in and Reporting Module Management console uses functional snap-in modules based on rights and role of authenticated user.Various reports and database tamper detection. Support for fingerprint image export in WSQ format.ss_reporting
SuperSign Terminal Client Support for biometric logon to application running in Windows Remote Desktops.
SuperSign API The SuperSign API is exposed as a .NET Class Library which may be referenced by developers of 3rd party applications. The API has support for client integration and management functions.
SuperSign API for 3rd party client applications
SuperSign API for management functionality

Event Notification System

The Event Notification System (ENS) monitors employees attendance and access and compare it with roster and shift definitions.  When time or grace periods are violated managers will be notified.

Scheduled imports of shift information, employee and manager data is done from external systems. Real-time clock data is received from a time and attendance (T&A) system of employee clock-in and clock-out actions.

  • Definitions of late clock-in and early clock-out grace periods per job grade.
  • Notification to managers by either SMS or e-mail or both through a workflow process.
  • Printing of following shifts for employee upon clock-out.
  • Printing of following shifts for employee upon clock-in if shifts have changed since last print.
  • Notification of employee being late, absent, late to clock-out, failure to clock-out, and clock-in on an off-shift
  • Location-aware clock actions supported.

 

 

Sybu Data developed Web based Co-Enrollment Database with fingerprint matching


The Co-Enrolment Database is a web-based system for managing participants in clinical trials.

  • Multiple levels of access rights for users
  • Biometric enrolment and identification of both users of the system and participants in clinical trials and research initiatives.
  • Multiple sites each with its own studies may be created.
  • Visibility of information is restricted to the site the user is associated with.
  • ASP.NET web application.

The solution is comprised of three parts:

Web-based interface

The Co-Enrolment Database web-interface is a ASP.NET custom developed web application. The application features role-based security, thus limiting the capabilities of each particular user based upon their individual role within the organization.

The solution features both conventional username/password authentication and biometric identification for login purposes. All biometric identification is performed server-side.

The solution allows for multiple locations to be created. Each user is associated with a single location and may view only information pertaining to that location. Information owned by a location with which the user is not associated with is replaced with the particular location’s contact information.

A user may create and manage studies within the system. Participants enrolled for a study are first checked to ensure they aren’t currently part of another conflicting study by means of biometric identification. The history of each participant within the system can be tracked.

Active Matcher Service

The Active Matcher is employed to manage biometric matching. The matcher is loaded with the most recently used set of fingerprints. As new participants are enrolled, the matcher is continually kept up to date. Upon a identification request, the matcher searches for a matching record. If no matching record is found, the next set of fingerprints are loaded until either a match is found, or no more record are available for loading. This allows the solution to perform matches on a much larger set of fingerprints than conventionally allowed by the Sagem Active Matcher.

ActiveX Fingerprint Reader Interface Control

Each terminal is fitted with a Sagem fingerprint reader. The solution uses a custom developed ActiveX component by which to interface with the fingerprint reader from within the web browser. The control is embedded within the webpage is controlled by scripts within the webpage. The fingerprint templates obtained from the reader are passed to the server in a hidden form variable for server-side matching.