Skip to main content

Authentication Settings

The Authentication section provides various methods for configuring user authentication on the device. You can check the authentication modes and key authentication options that the device supports in a step-by-step manner. Note that changes to settings will be applied to the actual device, and configure the authentication policy according to your environment by referring to the features and precautions of each option.

Info

  • The available network options may differ depending on the device type.

  • If the user has made any arbitrary changes, click the Apply button. Changes will not be applied to the device if not saved.

Authentication method settings​

You can set the device's authentication mode, permissions, server matching, and authentication timeout.

  • Auth Mode: Set the device's authentication mode by combining one or more credentials. For more information, refer to the following.

  • Full Access: Users registered on the device can be granted all access permissions without defining access group settings.

    Info

    When this option is set to Use, the device cannot be registered in Access Level and Floor Level. For more information, refer to the following.

  • Server Matching

    • Active: Activates server matching. Configure the server matching feature to authenticate using user information stored on the server where BioStar X is installed.

    • Inactive: Deactivates server matching. In this case, authentication is performed using the user information registered on the device.

    View devices and firmware versions supporting Server Matching feature

    • CoreStation firmware version 1.0.0 or higher

    • BioEntry P2 firmware 1.0.0 or higher

    • BioEntry W2 firmware 1.0.0 or higher

    • BioStation L2 firmware 1.0.0 or higher

    • BioStation A2 firmware 1.0.0 or higher

    • BioStation 2 firmware 1.2.0 or higher

    • BioLite Net firmware 2.2.0 or higher

    • BioEntry Plus firmware 2.2.0 or higher

    • BioEntry W firmware 2.2.0 or higher

    • XPass firmware 2.2.0 or higher

    • XPass S2 firmware 2.2.0 or higher

    • BioLite N2 firmware 1.0.0 or higher

    • XPass D2 firmware version 1.0.0 or higher

    • XPass 2 firmware 1.0.0 or higher

    • FaceStation 2 firmware version 1.4.0 or higher

    • FaceStation F2 firmware 1.0.0 or higher

    • X-Station 2 firmware 1.0.0 or higher

    • BioStation 3 firmware 1.0.0 or higher

    • BioEntry W3 firmware version 1.0.0 or higher

    • FaceLite does not support server matching feature.

    • FaceStation F2, BioStation 3, BioEntry W3 devices cannot use server matching for facial authentication.

  • Auth Timeout: This is the timeout for authenticating the second credential when multiple credentials are used in Auth Mode option. If the credential is not authenticated within the specified time, authentication will fail.

  • Face Detection Level: Set the algorithm steps for recognizing faces using the built-in camera when the user authenticates.

    • Normal: Detects faces at a distance equivalent to the length of a person's arm.

    • High: Requires the user to be closer than the length of a person's arm to detect a face.

    • Not Use: Does not use facial recognition functionality.

    Info

    This option is supported on the BioStation A2.

  • User Name Display: Control whether to display or hide the user name shown on the device when authentication is successful.

    • Display All / Mask All but First Letter / Hide All

  • User ID Display: Control whether to display or hide the user ID shown on the device when authentication is successful.

    • Display All / Mask All but First Letter / Hide All

Add authentication mode​

Set the device's authentication mode in the Auth Mode option. You can configure the authentication mode by combining credentials such as fingerprint, ID, card, PIN, and face.

  1. In the Auth Mode option, click the Add button.

  2. When the Add New Auth Mode window appears, drag the desired authentication mode to the center area.

    You can add up to five desired authentication modes.

  3. Select the desired item in the Schedule option.

  4. Once all settings are completed, click the Apply button.

Info

If the desired schedule is not available in the Schedule option, click Add New Schedule to add a new schedule. For more information about schedule settings, refer to the following.

Fingerprint authentication settings​

In the Fingerprint group, you can configure details related to the device's fingerprint authentication.

  • 1:N Security Level: Set the security level used for authenticating fingerprints. Higher security levels increase the False Rejection Rate (FRR) but decrease the False Acceptance Rate (FAR).

  • Scan Timeout: Set the timeout for fingerprint scanning. Failure to scan within the time set will result in authentication failure.

  • Sensor Sensitivity: Set the sensitivity of the fingerprint recognition sensor. Set the sensitivity higher to obtain precise fingerprint information.

  • 1:N Fast Mode: Set the speed of fingerprint authentication. When Automatic is selected, it sets the authentication speed according to the total fingerprint templates registered on the device.

  • Template Format: View the configured fingerprint template format.

  • Matching Timeout: Set the timeout for fingerprint matching. If authentication is not completed within the specified time, it will fail.

  • View Image: Display fingerprint images on the screen during authentication.

  • Sensor Mode: Set the operating mode of the fingerprint sensor.

    • Auto On: The fingerprint sensor turns on by recognizing the user's finger.

    • Always On: The fingerprint sensor remains always on.

  • Advanced Enrollment: Assess the quality of scanned fingerprints to save high-quality fingerprint information. Set to Use to notify the user if the fingerprint quality is low, helping to scan fingerprints correctly.

  • Fingerprint LFD: Set the level for fake fingerprint detection. Higher levels for fake fingerprint detection may also increase rejection rates for actual people’s fingerprints.

  • Duplicate Check: Check for duplicate registrations when enrolling fingerprints.

Info

  • The options available for configuration may vary depending on the type of device.

  • Changing the Template Format option in fingerprint authentication settings will render all previously stored fingerprints unusable. Make sure to select a template in the Template Format option before enrolling users' fingerprints.

  • The View Image option is supported on BioStation 2, BioStation A2, BioStation L2, BioLite N2, FaceStation F2 (FSF2-ODB), and X-Station 2 (XS2-ODPB, XS2-OAPB) models.

  • The Fingerprint LFD option is supported on BioStation A2, BioStation L2, BioEntry W2, BioLite N2, FaceStation F2 (FSF2-ODB), and X-Station 2 (XS2-ODPB, XS2-OAPB) models.

Facial authentication settings​

In the Face group, you can configure details related to the device's facial authentication.

  • 1:N Security Level: Set the security level used for authenticating faces. Higher security levels increase the False Rejection Rate (FRR) but decrease the False Acceptance Rate (FAR).

  • Enrollment Time: If the user's face is not enrolled within the set time when registering, the face enrollment will be canceled.

  • Motion Sensor: Set the sensitivity for detecting movement around the device.

  • Ambient Brightness: The device can detect ambient brightness and adjust the intensity of the IR LED.

  • Enhanced fake face enrollment block: Set the level for fake face detection. Increasing the level for detecting fake face registrations may heighten the rejection rates for actual faces.

  • Light Brightness: Manually adjust the brightness of the device's light. Set brightness by choosing Normal or High, or select Not Use to turn off the light.

  • Quick Enrollment: Set whether to enable quick face enrollment.

    • Enable: Configures the face enrollment procedure to one step.

    • Disabled: Configures the face enrollment procedure to three steps. Set to Disabled for high-quality face template enrollment.

  • Face Detect Setting: Configure the environmental settings for recognizing the user's face during authentication.

    • Maximum Head Pose Angle: Set the maximum rotation angle permitted for the face.

    • Detection Distance: Set the minimum and maximum distances for recognizing the face.

    • Wide Search: Set to ON to allow facial recognition across the entire camera view.

  • Operation Mode: Set the operation mode of the device during facial authentication.

    • Fusion Matching Mode: Perform both visual and infrared matching to enhance the accuracy of facial authentication.

    • Fast Matching Mode: Allows for rapid authentication of users walking within the device's authentication range.

  • Fake Detection: Prevent user authentication using fake faces such as photos. This is activated when the Operation Mode option is set to Fusion Matching Mode.

  • Duplicate Check: Check for duplicate registrations when enrolling faces.

Info

  • The options available for configuration may vary depending on the type of device.

  • The Ambient Brightness, Enhanced fake face enrollment block, and Quick Enrollment options are supported in the FaceStation 2 and FaceLite models.

  • The Light Brightness option is supported on FaceStation F2 firmware version 1.1.0 or higher.

  • The Face Detect Setting and Operation Mode options are supported in FaceStation F2 and BioStation 3 models.

QR/Barcode settings​

In the QR/Barcode group, you can configure details for QR/barcode authentication on the device.

  • Use QR/Barcode </br>through Camera: Set whether to use QR/barcode authentication through the device's camera.

  • Camera Timeout: Set the camera scan timeout. If a QR/barcode is not scanned within the specified time, authentication will fail.

  • Use QR as Card: Set to authenticate QR codes with the same data as CSN cards or Wiegand cards issued to users.

  • Motion Sensor: Set the sensitivity for detecting movement to initiate camera scanning.

  • Use QR/Barcode </br>through Scanner: Set whether to use the device's scanner for QR/barcode authentication.

  • Scanner Timeout: Set the scanning timeout. If a QR/barcode is not scanned within the specified time, authentication will fail.

Info

  • The Use QR/Barcode </br>through Camera option requires a separate device license. For more information, refer to the following.

  • The devices supporting Use QR/Barcode </br>through Camera, Camera Timeout, Use QR as Card, and Motion Sensor options are as follows.

    • X-Station 2 (XS2-ODPB, XS2-OAPB, XS2-DPB, XS2-APB) firmware version 1.2.0 or higher

    • BioStation 3 (BS3-DB, BS3-APWB) firmware version 1.1.0 or higher

  • The devices supporting Use QR/Barcode </br>through Scanner and Scanner Timeout options are as follows.

    • X-Station 2 (XS2-QDPB, XS2-QAPB)

Card authentication settings​

In the Card Type group, you can set the types of cards to be used on the device.

Info

Only card types supported by the device will be displayed in the Card Type group.

CSN Card

You can select the types of CSN cards and formats and set the byte order.

  • Byte Order

    • MSB: Processes card data in order from large byte units to small byte units, sequentially storing the card serial number (CSN) from left to right.

    • LSB: Processes card data in order from small byte units to large byte units, storing the card serial number (CSN).

  • Format Type

    • General: Reads and expresses the card's serial number (CSN) without separate conversion.

    • Wiegand: Transforms and expresses the card's serial number (CSN) according to user-defined Wiegand format. For information about how to set a new Wiegand format, refer to the following.

Wiegand Card​

Select the types of Wiegand cards and set the Wiegand formats. Choose the Wiegand format to be used in the Wiegand Format option.

Info

For information about how to set a new Wiegand format, refer to the following.

Suprema Smart Card​

Select the types of Suprema smart cards and set the card layout and byte order.

  • Suprema Smart Card Layout: Choose the Suprema smart card layout. For information about how to set a new smart card layout, refer to the following.

  • Suprema Smart Card Output Byte Order

    • MSB: Processes card data in order from large byte units to small byte units.

    • LSB: Processes card data in order from small byte units to large byte units.

Custom Smart Card​

Select types of custom smart cards issued by third parties and set the card layout and byte order.

  • Custom Smart Card Layout: Choose the custom smart card layout. For information about how to set a new smart card layout, refer to the following.

  • Custom Smart Card Byte Order

    • MSB: Processes card data in order from large byte units to small byte units.

    • LSB: Processes card data in order from small byte units to large byte units.

View devices and firmware versions supporting custom smart cards

  • XPass D2 firmware version 1.7.1 or higher

  • BioEntry P2 firmware version 1.5.1 or higher

  • BioEntry W2 firmware version 1.8.0 or higher

  • BioStation 2a firmware version 1.1.0 or higher

  • X-Station 2 firmware version 1.3.0 or higher

  • BioStation 3 firmware version 1.3.0 or higher

  • BioEntry W3 firmware version 1.0.0 or higher

  • BioLite N2 firmware version 1.6.2 or higher

CSN Mobile​

You can set the method for recognizing mobile cards.

  • NFC: Recognizes mobile cards through NFC communication from mobile devices.

  • BLE: Recognizes mobile cards through Bluetooth Low Energy (BLE) communication.

Template on Mobile​

You can specify the recognition method for templates on mobile, as well as the biometric data the user will directly enroll on the device, and set the byte order.

  • ToM Output Byte Order

    • MSB: Processes card data in order from large byte units to small byte units.

    • LSB: Processes card data in order from small byte units to large byte units.

View devices and firmware versions supporting templates on mobile

  • BioStation 3 firmware version 1.2.0 or higher

  • BioEntry W3 firmware version 1.0.0 or higher