www.TURNSTILES.us * Facial Recognition Access Control

Technical Specification

FaceVACS® TECHNOLOGY Face Recognition engine is robust against - Typical gesture changes - Pose (+/- 15° deviation from frontal image) - Minor partial face occlusion - Beard and Hairstyle changes - Wearing glasses (except dark sunglasses) - Lighting changes that do not cause strong shadows Based on the latest and best FaceVACS® technology - Incorporates A10T4 algorithm - Allows update to future technology - Primary facial data management, i.e. facial images including annotated eye position guarantees technology independence Minimal image requirements for facial recognition - Sharp image - One face is completely visible on the image - Inter-pupil spacing larger than 32 pixels - At least 64 grayscales per pixel within the face are required for adequate contrast Biometric characteristics - Configurable score threshold - Image quality assessment Disclaimer Like any biometrics, face recognition intrinsically cannot provide 100% recognition accuracy. The remaining uncertainty has to be considered by the customer and can be operationally covered to a certain degree.

DISTRIBUTED NETWORK OF STATIONS - Although stations share data within a network, they operate independently and allow longer network outages - Stations can be spread across long distances even at low network bandwidth - Different types of stations: administration station, verification station and replication station - Stations of same type can exist multiple times at multiple locations to handle location specific load. ADMINISTRATION STATION Interactive enrollment - From still face photograph - From multiple live cameras - From token frontal images; ISO / XFD format - Visual inspection and manual annotation is possible - Re-enrollment is possible Batch import and enrollment - From face photograph databases, can adopt to various naming schemes - Constantly provided progress feedback - Robust, re-start possible - Batch enrollment failure correction and image quality assessment - Import of person and token related data Data Management - System supports freely configurable person data - Tokens can be assigned to persons - Enrolled person gets an operator's authorization tag and timestamp

Token management - Multiple token support, i.e. multiple ID-Cards per person - Additional user information can be bound to any token. Administration - Verification and identification for operational test purposes - GUI supported easy biometric and non-biometric configuration of the system Alarm center - Allows security officers to supersede the results of biometric identification/verification - Configurable condition and processing behavior for alarms that require security officer interaction Interfaces to - Multiple simultaneous cameras - Optional: token reader

VERIFICATION STATION Is enabled to run on Automatic Border Control Kiosks with multiple cameras supporting different person heights Verification mode - One To One compare - Token triggered: PIN, ID-card, passport or visa Identification mode - One To Many compare - Auto triggered Interfaces to - Token readers; ID-card readers - Multiple simultaneous cameras - Integrates into gate opening systems - User feedback: either via status LED or graphical feedback monitor

www.TURNSTILES.us Facial Recognition Access ControlTechnical Specification

REPLICATION STATION Data replication capabilities - Replication data through an access control network - Freely definable replication schemes - Flexible configuration for lowest network bandwidth occupation - WAN typical bandwidth enabled - Robust against network outages Management - Centrally manageable and configurable replication - Logging of replication processes DATA MANAGEMENT Storage of identity data - Each identity, i.e. person is registered in a general identity record. Storage of face images - Multiple face snapshots are bound to an identity. i.e. they identify the person. - Eye positions, creation time, data source/origin and the photo quality are stored for each image - compressed or uncompressed photo storage Storage of additional identity related data - The system can store any identity related data Storage of token and token attributes - Each token may have additional related data that is bound to the token rather than to the person (E.g. Card vendor etc.) Zone and time profiles - Specific zones and time profiles can be associated with the user. They are considered after the successful biometric verification/ identification. Zones are represented by a subset of stations that secure the gates to that zone.

Journal storage - Records activities of the system - The content of the recording is configurable - Timestamp, initiating user and action are logged - Option to share with operational database or to install as independent database - Enabled for audit tracking - Accessible via web interface SECURITY AND ACCESS Access Profiles - Server side controlled - Configurable PKI infrastructure for data integrity protection - By providing digital signatures Data spotting protection - By providing data encryption - Password encryption INTERFACES Integration Kit - The software provides various integration points, such as DB schemes and API’s that allow an easy integration into existing systems - Adjustable for enrollment, verification and identification processes - Generic interface to integrate any token reader, i.e. card reader, PIN code reader, trigger devices - Generic interface to control camera settings - Generic interface to provide feed– back, e.g. ’face not found’ or image quality - External Customer database synchronization tool allows to use an existing access control sql database as primary data and keep the FaceVACS-Entry database synchronized

TECHNICAL FACTS Camera and video stream support - Any Direct Show Interface supporting cameras like

- CCTV cameras with frame grabber, - USB and Firewire cameras

- Network IP cameras delivering JPG still images Image format support - JPG (configurable quality) - PNG (configurable compression) Operating system - Windows XP Professional - Windows 2003 Server - Windows 2000 Server - Windows 2000 Professional Database - Microsoft Jet Engine as default - Runs optionally with

- Microsoft SQL Server 2000 - Oracle 9i

- Easily adaptable to any SQL92 compliant database Minimum hardware requirements - Pentium 4 @ 1.8 Ghz, 256 MBytes main memory - 400 MBytes free disk space - Covers a gallery of 100k enrollees LANGUAGE SUPPORT - English - Other languages on request DOCUMENTATION - Manual is provided as PDF and HTML Dresden, 2004-11-01 Printed manuals are optional All trademarks not explicitly mentioned here are the properties of their respective owners.

www.TURNSTILES.us · 8641 South Warhawk Road * Conifer, CO 80433 ·patrick.mcallister@turnstiles.us tel: 303 670 1099 ext 11 · fax: 303 679 8949