Upload
buidiep
View
217
Download
0
Embed Size (px)
Citation preview
Data sheet
Page 1
BioGate The only Identity SwitchTM Unifying identity systems to create the foundation for a secure but flexible digital future
The world of identification is increasingly being challenged to
improve efficiency and accuracy while accommodating a
steady stream of new application, channels and technologies.
Many organizations have found it quite difficult or even
impossible to extend their identification systems to new initiatives
and have lost competitiveness trying to develop new or upgrade
legacy systems. Customers on the other hand expect the
greatest freedom with full protection of their personal information
whilst staying in control of their identity profiles.
It’s time for a new approach. It’s time to benefit from a system
that can function as the core-processing platform for every type
of identity transaction servicing every type of delivery channel.
Enterprise identification As the world’s first Identity SwitchTM, BioGate is an integrated platform to acquire,
authenticate, profile, route, switch and authorize identity based transactions across
multiple channels. BioGate provides a full range of functionality to support identity
transactions — both traditional (on the biometric terminal), mainstream transactions
(real-time at the central biometric store), as well as mobile and ecommerce transactions.
BioGate represents the next-generation authentication platforms. It is the culmination of
more than 15 years of experience in developing and integrating biometric solutions
across various sectors, leveraging the input of many customers and meeting the
demands of millions of individuals.
With BioGate, Ideco brings the best in functionality and fundamentals to a secure but
open systems environment with a unique enterprize architecture that enables
organizations to increase profitability, enhance customer service and improve flexibility in
an increasingly agile environment.
Data sheet
Page 2
Benefits As countries make the transition to biometric identification, organizations require a
solution that can be effectively deployed to meet their immediate mandates with a
growth path that will meet all future requirements.
IncreasedProfitabilityBioGate improves the cost efficiency of identity processing by allowing a common set of
identity transactions to support multiple channels and transaction types. This eliminates
the cost and complexity of consolidating or integrating disparate systems while providing
a single point of integration to future systems.
Through the use of modern integration protocols, BioGate enables organizations to
securely add new services for new delivery channels without disrupting existing
operations.
EnhancedcustomerserviceBioGate integrates real-time data from multiple sources to allow for a more
comprehensive view of each customer. This allows organizations to better manage
identity risk and personalize services with availability 24 hours a day.
BioGate provides continuous operation through a combination of application- and
platform-specific features. High performance, high availability and scalability are key to
our solutions. BioGate has demonstrated the capability of processing in excess of 2,400
transactions per second on a variety of platforms.
ImproveflexibilityOrganizations are under continual pressure to adapt to market demands and
technology changes. Too often, outdated processing systems can impede time-to-
market by requiring costly updates to support new transaction types, delivery channels or
business rules. With BioGate, organizations can leverage support for leading biometric
modalities, technologies, channels and host systems.
BioGate is engineered for scalability, accommodating growth in transaction volumes.
Rapid deployment of new functionality ensures speedy time-to-market and provides
feature-rich solutions that customers can trust.
ImprovedcustomerloyaltyBioGate helps ensure consistency of service levels and information across multiple
customer touch points. The application takes advantage of the best hardware platforms
for security, reliability and availability.
Organisations can tailor identification transactions by application type, channel type or
customer type, providing more personalized services to the end user. For example, a low
value financial transaction may require less stringent authentication criteria whilst issuing
a firearm license would consider multimodal authentication including other aspects such
as customer ratings — and approve the transaction accordingly. The result is higher
customer satisfaction and more profitable customer relationships.
ReduceriskWith BioGate, identity transactions are authorised based on profile information from a
variety of sources across multiple platforms. Add to that the ability to tailor authorization
parameters by customer type, and the system provides strong risk management
capabilities for fraudulent transactions, potential identity fraud and the risk profile of
customers.
“Citizens can enjoy the greatest freedom with full protection of their personal information”
Data sheet
Page 3
Data security is another important aspect of risk reduction in the identity environment.
BioGate offers a number of security layers and protections to biometric data, including
strong encryption methods and tokenization.
Product overview At the heart of any authentication process is an identity engine — one that must acquire,
profile, switch, route and authorize the transaction based on a variety of information.
BioGate is a powerful, resilient and scalable identity engine.
Multi-modal,multi-channel,multi-applicationsupportWherever the customer transaction originates from - voting stations, points of sale, mobile
devices or the internet - the core switching and routing features of BioGate will securely
acquire the identity transaction detail, route, switch and process it for real-time identity
clearing.
IdentityprofilingWhen using BioGate for identity profiling, a vast variety of information sources are
seamlessly and cost-effectively integrated to build a holistic profile of the identity at stake.
This may include multiple biometrics modalities to accommodate all the possible
identification methods at various customer touch points.
In addition, BioGate also manages the complete life cycle of the identity including
acquiring, issuing, activation and revoking with full management and reporting in every
stage of the profile.
UnifyinglegacysystemsBioGate allows organizations to centralize customer information to support the
issuance and acceptance of identity profiles. BioGate will also act as a multi-institution,
independent switch providing segmented services to a variety of transaction types,
removing the complexities and risks associated with maintaining various identity systems.
FullrangeofdevicesupportThe open system integration layer of BioGate allows for full supports of all biometric
modalities and systems giving flexibility in the choice of identification method to be use in
a specific instance. The message protocols ensure full control and easy maintenance of
these deices.
Support is also available to a full range of connections to organizational, national and
international identity schemes and host systems. As part of the product support program,
network interfaces are also kept up to date with system mandates and regulatory
development.
AfeaturerichswitchBioGate provides all the tools necessary to manage various programs. BioGate provides
tools to manage citizen registers throughout their full lifecycle, voter rolls, social benefit
programs, licensing programs, e-documents and much more. The solution allows
organisations to issue digital tokens with predefined or custom values.
The flexible underlying product architecture allows new functions to be easily added to
the system. Where specific needs are not met by configuration options, new transaction
types, channels, technology and host connections can be added without disrupting
existing services.
Data sheet
Page 4
IdentityclearingBioGate manages multiple concurrent programs for a single organization, allowing
maximum flexibility in the way identification is processed on an account or identity profile
level. It allows a variety of channels to request identity clearing at the customer touch
points, and allow their identification transaction to be reflected in available programs. All
customer identification transactions are stored encrypted in the database for maximum
protection.
MitigatingfraudThe real-time nature of the identity engine is designed to monitor transaction risk and
potential fraudulent activities. BioGate can help identify fraud and abuse at the
customer touch points, before they become liabilities and reduce profits. Through its
systematic approach to handling identity transactions, organisations can maintain
consistent and accurate identity clearing policies across multiple channels.
AuthorisationflexibilityAs an online Identity SwitchTM, government agencies, service providers or even
merchants can extend their existing services to include secure identity processing
through interoperability with BioGate, offering a complete solution with zero risk of identity
fraud. Acquiring identification at customer touch points requires simple integration and
BioGate will retrieve, encrypt, route, process and return either an approval or a decline
notice.
SecurecryptographicprocessingBioGate operates in a network environment where sensitive personal information is
processed. The system provides a full set of cryptographic functions, which can be
complemented using external hardware security modules (HSMs). Encryption of sensitive
data occurs during acquiring, logging, messaging, and in data storage.
IDECO has gone above and beyond the requirements including multiple encryption
types and leveraging the HSM for transaction security functions. In addition, biometric
data is de-serialised and physically separated from system data. Any form of ID stored
within the database can be encrypted along with limited personal information such as
last name and phone numbers.
OperationaltoolsCentralized, real-time and proactive monitoring of end-to-end services including the
network connections, means improved control, reduced administration and higher
service quality. This is complemented by automated end-of-day business processing and
extensive reporting tools to reduce the need for operational intervention.
HighavailabilityComputer systems are ever more resilient, but the BioGate architecture not only allows for
full scalability with managed process balancing, dynamic resource allocation ensures
consistency in quality of service. Ultimate availability is achieved through the dual site
with active : active option. Unplanned downtime is therefore a thing of the past with the
additional benefit of deploying new software versions without taking the system out of
service.
Data sheet
Page 5
System information
ArchitectureBioGate uses an object-oriented design and development style to implement its
enterprise services architecture. The use of object-oriented programming languages,
such as Java, enhances the extensibility of BioGate solutions and minimizes time-to-
market for new integrations, functions and services. By extending integration flexibility,
BioGate allows access to more customer information sources. This makes BioGate en
extremely versatile and flexible identification engine, capable of running on a number of
different hardware platforms and databases.
BioGate software components use this architecture to create flexible business services
that allow users to quickly deploy new products and deliver enhanced customer service.
The components are organized according to the function they perform to support
transaction processing as required by the various customer touch point. Each business
requirement performs a specific type of processing or controls a specific part of the
application stack.
The architecture of BioGate is designed for a multiple platform configuration. The
platform is defined as the hardware, operating system, integration system and file
system. However, platform-specific processing is isolated into specific components to
allow the rest of the application to be common across all platforms.
BioGate software components are organized according to the function they perform, as
shown in the following illustration.
Data sheet
Page 6
TheUserExperienceThe BioGate user interface employs Java technologies, which provide the user interfaces
needed to manage all application components.
The system’s built-in security engine assigns users’ roles that manage permission to
specific functions and tasks associated with various windows. Users are authenticated
during the logon process, thereby minimizing the risk associated with unauthorized user
access to functions they are not permitted to perform.
The audit function is responsible for maintaining a secure audit trail of all transactions
and activities and all modifications to user rights database are recorded.
CustomisationStrategyAlthough BioGate incorporates many configuration options, some customization may be
necessary. When customization is necessary, Ideco provides the product changes based
on the approved requirements.
Ideco’s customization strategy of minimizing customizations and incorporating product
change into product solutions, minimizes the effort required to upgrade to new releases
of the product, ensuring that users can take advantage of future product developments.
Product enhancements are changes that might be required in response to customer
requests, Ideco’s innovation, third party requirements and changes in industry rules and
the regulatory environment.
Our commitment to you Ideco is committed to providing quality products and services to our customers. With
every Ideco product sold, comprehensive support programmes are available to help
implement the solution and keep it operating at peak efficiency.
We recognise our obligation to help protect your investment and commit to providing
resources before, during and after installation. When required we will also transfer the
required skills to ensure the level of sustainability and optimum return on investment.
© Copyright 2016 Ideco Biometric Security Solutions (Pty) Ltd. The information contained
herein is subject to change without notice. Ideco shall not be liable for technical or
editorial errors or omissions contained herein.
The Ideco logo and Identity Switch are trademarks or registered trademarks in South
Africa, other countries or both. Other parties’ trademarks referenced are the property of
their respective owners.
Learn more at:
www.ideco.co.za
or contact us at:
+27 83 556 6833
Full multimodal Rich functionality Platform independent Flexible architecture”