Secure Solutions. EntryPointTM Access Readers TrustPointTM Access Readers EntryPointTM Single-Door System PIV-I Compatible Cards Accessories

Transcription

1 Secure Solutions l l l l BridgePointTM solutions that will take your security system to the next level EntryPointTM Access Readers TrustPointTM Access Readers EntryPointTM Single-Door System PIV-I Compatible Cards Accessories

2 1-FACTOR CREDENTIAL READERS 1-FACTOR CONTACT READER Contact Card Authentication P/N Contactless Card Authentication P/N Contact and Contactless Card Authentication P/N EntryPoint Contact Reader interfaces with industry standard Wiegand based access control systems enabling an agency to upgrade existing systems to utilize PIV credentials. Interoperable with smart card credentials equipped with contact interface (ISO- 7816). FEATURES Reads all CAC, PIV, TWIC, FRAC and PIV-I Credentials Accepts BridgePoint CryptoID Cards with Contact Interface Red, Green and Yellow Status Indicator LED s Vertical Card Slot with Protective Shutter Resists Foreign Objects and Wind Driven Rain Illuminated Card Slot Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Contact Card Connector rated at 500,000 insertions Forward Compatible - Field Flash Programmable via USB Port 1-FACTOR CONTACTLESS READER EntryPoint Contactless Reader interfaces with industry standard Wiegand based access control systems enabling an agency to upgrade existing systems to utilize PIV credentials. Interoperable with smart card credentials equipped with contactless interface (ISO-14443). FEATURES Reads all CAC, PIV, TWIC, FRAC and PIV-I Credentials with an operating contactless antenna. Accepts BridgePoint CryptoID Crds with Contact Interface Red, Green and Yellow Status Indicator LED s Reliably Reads PIV Credential at 1.5 Inches within 1.0 Sec. Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Flash Programmable via USB Printer Port 1-FACTOR DUAL INTERFACE READER EntryPoint Dual-Interface Reader includes both Contact and Contactless interfaces to operate with industry standard Wiegand based access control systems. Upgrades existing systems to be interoperable with most smart card credentials. FEATURES Reads all CAC, PIV, TWIC, FRAC and PIV-I Credentials Accepts all BridgePoint CryptoID Contact & Contactless cards Red, Green and Yellow Status Indicator LED s Reliably Reads Contactless at 1.5 inches within 1.0 Sec. Illuminated Vertical Card Insertion Slot with Protective Shutter Resists Foreign Objects and Wind Driven Rain Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Contact Interface Provides Redundancy for Failed Contactless Interface on CAC and PIV Credentials Forward Compatible - Field Flash Programmable via USB Printer Port SOME CONFIDENCE (LEVEL 1) SOME CONFIDENCE (LEVEL 1) SOME CONFIDENCE (LEVEL 1)

3 1-FACTOR CREDENTIAL READERS 2-FACTOR CONTACT READER WITH KEYPAD Contact Card + PIN Authentication P/N Contactless + Pin Authentication P/N EntryPoint Contact Readers interface with industry standard access control systems enabling an upgrade of legacy systems to utilize PIV credentials. Interoperable with all types of government issued smart card credentials that conform to ISO Reads all CAC, PIV, TWIC, FRAC and PIV-I Credentials Accepts BridgePoint CryptoID Contact Cards Illuminated Card Slot with Protective Shutter Resists Foreign Objects and Wind Driven Rain Card Connector Rated to 500,000 insertions Durable Weatherized Telephone Style Keypad with Metal Keys PIN is submitted to Card per FIPS-201 Standard Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Forward Compatible - Field Flash Programmable via USB Printer Port 2-FACTOR CONTACTLESS READER WITH KEYPAD Contact or Contactless + PIN Authentication P/N EntryPoint Contactless Readers interface with most legacy access control systems enabling an agency to upgrade a legacy PACS to interoperate with all types of government issued smart card credentials. Reader supports ISO contactless cards. Reads all CAC, PIV, TWIC, FRAC and PIV-I Credentials Accepts BridgePoint CryptoID Contactless Cards Durable Weatherized Telephone Keypad Illuminated Keypad for Night Use Supports Pin to System (Panel) on Contactless Interface Contactless Card Read Time less than 1.0 sec at 1.5 Inches Terminal Block & RJ-45 Connectors with Wiegand, RS-485 and Mag Stripe Communication Flash Programmable via USB Printer Port 2-FACTOR DUAL INTERFACE READER WITH KEYPAD EntryPoint Dual-Interface Readers function with most legacy access control systems enabling an agency to upgrade a legacy PACS to interoperate with all smart card credentials. Reader supports ISO 7816 contact cards and contactless cards. Reads all CAC, PIV, TWIC, FRAC and PIV-I Credentials Accepts all BridgePoint CryptoID Contact & Contactless Cards Vertical Card Slot for Contact Cards with Protective Shutter Resists Foreign Objects and Wind Driven Rain Illuminated Card Slot and for Night Use Durable Weatherized Telephone Style Keypad Supports PIN to Card on Contact Interface Supports Pin to System (Panel) on Contactless Interface Contact Card Read Time less than.75 sec Contactless Card Time less than 1.0 sec at 1.5 Inches Terminal Block & RJ-45 Connectors with Wiegand, RS-485 and Mag Stripe Communication Forward Compatible - Field Flash Programmable via USB Printer Port SOME CONFIDENCE (LEVEL 1) SOME CONFIDENCE (LEVEL 1) SOME CONFIDENCE (LEVEL 1)

4 CREDENTIAL VERIFICATION READERS 1-FACTOR CONTACTLESS READER Contactless Card Authentication P/N Contact with PIN Authentication & PKI to PAK P/N TrustPoint Contactless Readers interface with industry standard Wiegand based access control systems enabling an agency to upgrade existing systems to utilize PIV credentials. Interoperable with all government issued PIV or CAC credentials equipped with contactless interface (ISO-14443) and a FIPS-201 Card Authentication Certificate. The Reader issues a PKI Challenge and verifies the Card Authentication Key (CAK) over the contactless interface in less than 2.5 seconds on RSA-2048 certificates. TrustPoint delivers the most secure form of single factor authentication available per NIST FEATURES On-board Cryptographic Engine with Hardware Acceleration Supports RSA, AES, 3DES, ECC and SHA algorithms Transmits FASC-N in Format Compatible to Access System Durable Polycarbonate Housing Red, Green and Yellow Status Indicator LED s Reliably Reads and Challenges CAK in 2.5 seconds for most PIV credentials Terminal Block & RJ-45 Connectors Wiegand, RS-485 and Mag Stripe Communication Flash Programmable via USB Printer Port 2-FACTOR CONTACT READER WITH PKI TrustPoint Contact Reader is designed for securing access to High Security Level III facilities. Reader is interoperable with all PIV and CAC credentials. TrustPoint Readers perform a PKI Challenge to verify the Personal Authentication Key (PAK) over the contact interface in less than 1.0 seconds after PIN entry for most PIV credentials with RSA-2048 certificates. Entry of the user s PIN is required to perform this operation. TrustPoint delivers the most secure form of two factor authentication available per NIST On-board Cryptographic Engine with Hardware Acceleration Supports RSA, AES, 3DES, ECC and SHA algorithms Reader Performs PKI Challenge to the Personal Certificate Key (PAK) in less than 1.5 seconds after PIN Entry. Transmits FASC-N in Format Compatible to Access System Vertical Card Slot with Protective Shutter Resists Foreign Objects and Wind Driven Rain LED illuminated Card Slot & Keypad for Night Use Durable Weatherized Telephone Keypad Terminal Block & RJ-45 Connectors with Wiegand, RS-485 and Mag Stripe Communication Supports ISO 7816 Standard Forward Compatible - Field Flash Programmable via USB Printer Port SOME PLUS (LEVEL 2) HIGH (LEVEL 3)

5 CREDENTIAL VERIFICATION READERS 2-FACTOR CONTACTLESS READER WITH PKI Contactless with Pin Authentication & PKI to CAK P/N with PIN Authentication & PKI P/N TrustPoint Contactless Readers interface with industry standard Wiegand based access control systems enabling an agency to upgrade existing systems to utilize PIV credentials. Interoperable with all government issued PIV or CAC credentials equipped with contactless interface (ISO-14443) and a FIPS-201 Card Authentication Certificate (CAK). Contactless Reader with Pin is designed for securing access to facilities where there is a need for high throughput and two factor authentication. The Contactless Reader supports Pin to system (panel). The TrustPoint Reader issues a PKI Challenge and verifies the Card Authentication Key (CAK) response over the contactless interface in less than 2.5 seconds for RSA TrustPoint delivers the most secure form of two-factor authentication available per NIST On-board Cryptographic Engine with Hardware Acceleration Supports RSA, AES, 3DES, ECC and SHA algorithms In Contactless Mode, Performs PKI Challenge to the Card Authentication Key (CAK) in less than 2.5 seconds Transmits FASC-N in Format Compatible to Access System Durable Weatherized Telephone Keypad with LED illumination for Night Use Terminal Block & RJ-45 Connectors with Wiegand, RS-485 and Mag Stripe Communication Supports ISO Standards Forward Compatible - Field Flash Programmable via USB Printer Port 2-FACTOR DUAL INTERFACE READER WITH PKI EntryPoint Reader performs a PKI challenge-response over both the contact and contactless interface for High Security Level III facilities. Reader is interoperable with all PIV, PIV-I and CAC credentials. On-board Cryptographic Engine with Hardware Acceleration Supports RSA, AES, 3DES, ECC and SHA algorithms In Contactless Mode, Performs PKI Challenge to the Card Authentication Key (CAK) in 2.5 seconds for RSA-2048 certificates In Contact Mode, Performs PKI Challenge to the Personal Certificate Key (PAK) in 1.5 seconds after PIN Entry. Transmits FASC-N in Format Compatible to Access System Vertical Card Slot with Protective Shutter Resists Foreign Objects and Wind Driven Rain Durable Weatherized Telephone Keypad LED illuminated Card Slot & Keypad for Night Use Terminal Block & RJ-45 Connectors with Wiegand, RS-485 and Mag Stripe Communication Supports ISO 7816 and Standards Forward Compatible - Field Flash Programmable via USB Printer Port SOME PLUS (LEVEL 2) HIGH (LEVEL 3)

6 3-FACTOR READERS WITH BIOMETRIC OPTION 3-FACTOR FLUSH MOUNT READER WITH BIO TrustPoint 3-Factor Reader performs PIN verification and BIO match over both the contact and contactless interface for Level III High Security installations. Reader interoperates with all PIV, PIV-I and CAC credentials. Designed for heavy-duty use in turnstile and lane applications. with PIN & BIO Authentication and PKI P/N : Dual Interface Contactless Read Performance: Reads FASC-N from CHUID in 2.5 seconds at 1.5 inches Contact Read Performance: Reads FASC-N from CHUID in 1.0 second after insertion and entry of PIN Transmits FASC-N in Wiegand Format Compatible to Legacy Access Systems Can be set by Access System to Function in PIN to Card (Contact) or Pin to System (Contactless) Modes Equipped with Secugen FIPS-201 approved Biometric Scanner 2 line by 12 Character LED Display Guides User Through Access Process Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Supports ISO 7816 and Standards Forward Compatible - Field Flash Programmable via USB Printer Port Can be switched between 1-Factor, 2-Factor and 3-Factor Authentication Modes by relays from PACS Panel. HIGH (LEVEL 3) 3-FACTOR SURFACE MOUNT READER WITH BIO TrustPoint 3-Factor Reader performs PIN verification, BIO match over both the contact and contactless interface for Level III High Security installations. Reader interoperates with all PIV and CAC credentials. Designed for demanding indoor and outdoor installations (optional Weather Shield recommended for outdoor installations). with PIN & BIO Authentication and PKI P/N: (Dual Interface) Contactless Read Performance: Reads FASC-N from CHUID in 2.5 seconds at 1.5 inches Contact Read Performance: Reads FASC-N from CHUID in 1.0 second after insertion and entry of PIN Certificate (PAK) in 1.0 seconds after PIN entry Transmits FASC-N in Wiegand Format Compatible with Legacy Access Systems Can be set to Operate in PIN to Card (Contact) or Pin to System (Contactless) Modes Equipped with Secugen FIPS-201 approved Biometric Scanner 2 line by 12 Character LED Display Guides User Through Access Process 2 line by 12 Character LED Guides User Through Access Process Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Meets ISO 7816 and requirements Forward Compatible - Field Flash Programmable via USB Printer Port Can be switched between 1-Factor, 2-Factor and 3-Factor Authentication Modes by relays from PACS Panel. HIGH (LEVEL 3)

7 3-FACTOR READERS WITH BIOMETRIC & PKI OPTION 3-FACTOR FLUSH MOUNT READER WITH PKI & BIO with PIN & BIO Authentication and PKI P/N : Dual Interface w/ PKI TrustPoint 3-Factor Reader performs PIN verification, BIO match and PKI challenge-response over both the contact and contactless interface for Level III (High) and Level IV (Very High) installations. Reader interoperates with all PIV and CAC credentials. Designed for heavy-duty use in turnstiles and lane applications. Contactless Read: Performs PKI Challenge to the Card Authentication Key (CAK) in 2.5 seconds at 1.5 Inches Contact Read: Performs PKI Challenge to the Personal Certificate Key (PAK) in 1.0 seconds after PIN entry Transmits FASC-N in Format Compatible to Legacy Access Systems Can be set by Access System to Function in PIN to Card (Contact) or Pin to System (Contactless) Modes 2 line by 12 Character LED Display Guides User Through Authentication Process Equipped with Secugen FIPS-201 approved Biometric Scanner Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Supports ISO 7816 and Standards Forward Compatible - Field Flash Programmable via USB Printer Port VERY HIGH (LEVEL 4) 3-FACTOR SURFACE MOUNT READER WITH PKI & BIO with PIN & BIO Authentication and PKI P/N: : Dual Interface w/ PKI TrustPoint 3-Factor Reader performs PIN verification, BIO match and PKI challenge-response over both the contact and contactless interface for Level III (High) and Level IV (Very High) installations. Reader interoperates with all PIV and CAC credentials. Designed for demanding indoor and outdoor installations (optional Weather Shield recommended for outdoor installations). Contactless Read: Performs PKI Challenge to the Card Authentication Key (CAK) in 2.5 seconds at 1.5 inches Contact Read: Performs PKI Challenge to the Personal Certificate (PAK) in 1.0 seconds after PIN entry Transmits FASC-N in Wiegand Format Compatible with Legacy Access Systems Can be set to Operate in PIN to Card (Contact) or Pin to System (Contactless) Modes 2 line by 12 Character LED Guides User Through Authentication Process Equipped with Secugen FIPS-201 approved Biometric Scanner Terminal Block & RJ-45 Connectors. Wiegand, RS-485 and Mag Stripe Communication Meets ISO 7816 and requirements Forward Compatible - Field Flash Programmable via USB Printer Port VERY HIGH (LEVEL 4)

8 SMART CREDENTIALS CONTACT ONLY CREDENTIAL FOR SHORT TERM ACCESS TO LOW SECURITY AREAS with PIN Authentication & PKI P/N P/N (extra durable) The CryptoID Contact Credential conforms to the ISO 7816 standard for contact smart cards and is interoperable in the BridgePoint EntryPoint and TrustPoint readers. The Credential is the ideal low-cost solution where there are short-term visitors and the customer is seeking a low-cost access solution. The Credentials support PIN Challenge and the PIN can be reset via the BridgePoint Card Manager Application. Meets ISO-7816 Standard for Contact Smart Cards Low Cost Fast and reliable Supports PIN Challenge Operates in BridgePoint contact and dual-interface readers N/A CONTACTLESS ONLY CREDENTIAL FOR SHORT TERM ACCESS TO LOW SECURITY AREAS The CryptoID PIV Compatible Contactless Credential is fully interoperable with contactless BridgePoint Readers operating with access systems based on the FIPS-201 Standard. The Credential utilizes DESfire technology and includes FIPS-140 approved 3DES crypto engine for secure key generation and encryption. Best used for visitors and contractors who require extended access to controlled facilities employing medium security levels. N/A with PIN Authentication & PKI P/N P/N (with Secure Channel) FEATURES Meets ISO Standard for Contactless Operation Supports customer personalization with Customer Managed Card Diversification Security Keys (3DES) Ultra fast reading at 1.5 inches Available pre-printed or blank white for printing by customer PIV-I COMPATIBLE DUAL INTERFACE CREDENTIAL WITH CAK CHALLENGE RESPONSE The CryptoID PIV-Compatible Credential is fully interoperable with access systems based on the FIPS-201 Standard. The PIV-C credential is built per the guidelines set forth in the Personal Identity Verification for non-federal issuers of PIV Credentials. The PIV-C Credential contains all of the security objects on the Federal Issued PIV Credential except for the personal certificate, which requires a background check that confirms to the Federal Bridge Requirements. N/A Ideal for Government location desiring to be fully FIPS-201 compliant with PIN Authentication & PKI P/N Produced from FIPS-140 and 201 Credential Stock Supports PIN entry over the contact interface Dual Interface Contact and Contactless Operation Available in blank white for standard card printing.

9 READER ACCESSORIES WEATHER SHIELD FOR 2-FACTOR READERS Weather Shield protects Reader from direct exposure to rain. Also protects against casual observers seeing PIN code entry. Impact Resistant Polycarbonate Construction. Easy Installation N/A P/N CONDUIT BOX FOR 1 & 2-FACTOR READERS Conduit Box facilitates installation on masonry walls by providing space for wiring termination and service loop. Deep enough for drilling holes to mate with standard conduit. Durable Polycarbonate Construction. Easy Installation N/A P/N

10 APPLICATION NOTES READER APPLICATION NOTES 1. EntryPoint and TrustPoint Readers can be configured with Wiegand bit streams compatible with most legacy access systems from suppliers such as General Electric, Software House, Honeywell, Lenel, Quintron, AMAG, Galaxy, TAC-Andover and others. Contact BridgePoint with legacy system details for format availability. 2. EntryPoint and TrustPoint Readers interoperate with all Federal Government issued smart credentials including CAC1, CAC-NG, CAC-EP and PIV. Default Wiegand outputs are as follows: CAC1: Least significant 64 bits of Card Unique Identifier (CUID) CAC-NG, CAC-EP & PIV: 14-digit (48 bit) FASC-N (Federal Agency Smart Credential Number). FASC-N includes System Code, System Code and Credential Number). 3. Minimum Wiegand Configuration: BridgePoint strongly recommends against using EntryPoint and TrustPoint Readers on legacy access systems that cannot perform a true match of the credential bit stream as described above in No. 2 above. Systems that cannot perform this true credential number match must hash down or truncate the credential number which results in a loss of identity data and the strong possibility of collisions in the card ID number and a significant security risk. NOTE: The warranty on any Reader is null and void if used on a legacy access system that does not perform a complete 64 bit match on a CAC1 credential or a 48 bit match on a PIV compliant credential. 4. TrustPoint High Security and very High Security PKI Readers support RSA-1024, RSA-2048, 3-DES, AES-128, AES-256, SHA-1, SHA-2 and ECC algorithms. Challenge-response time at the Reader typically adds 1.5 seconds to the transaction dime, depending on the time the credential takes to transmit the certificate and sign the challenge. 5. All EntryPoint and TrustPoint Readers are forward compatible via field flash-reprogrammable technology. Readers can be upgraded either through a USP port on the back of the reader. 6. EntryPoint and TrustPoint Readers include a one-year warranty (see product Warranty statement for details). BridgePoint also offers an extended warranty to cover future software upgrades and PIV Credential formats. 7. Power Requirements: Input power is Volt AC; 350 ma at 12 VDC 8. Cable Recommendations: Readers can be located up to 300 feet (maximum) from most panels with a Cat 6 or 18 AWG cable. Maximum distance using a Cat 5 cable is 150 feet.