First,fingerprint authentication Principle

    In recent years, biological certification as a means to become more and more mature and emerging authentication techniques, and gradually began to enter the market.As an important human fingerprint characteristics with the following features :

• Uniqueness : (different, pointing different), the specific nature of fingerprints are very obvious.

• invariance : (life basically unchanged), the relative stability of fingerprints strong.

Dermal Regeneration : as long as it does not hurt, after his recovery, despite Ridge restitution; If dermal injuries. formed after the scars healed. Ridge undermine the scars, but the scars of their own fingerprints add a new stable.

• Portability : live fingerprint with fraud, carry no memory of fearing the loss of such characteristics; Fingerprint recognition technology has been applied to fingerprint acquisition, instrument is the most reliable and safe. the lowest cost biometric identification devices. With the acquisition and recognition technology, fingerprint identification technology has become more and more mature, from the police and civilian sectors to the market.

Second, the system architecture

    Biologon safe landing of the program is a biometric identification technology application software solutions. Certification can replace passwords with various biological identification. For the Microsoft Windows operating system, we provide a comprehensive and stable solution to the security issue program.Through the use of biometric identification code instead of the traditional way, With the loss of customers will ensure that the characteristics of the human mind and the identity of subscribers. We recently released products, in particular the use of Windows 2000 Server (2003 Ser ver) Active Directory users.

Third, the system can produce :

    Biologon services by the end of 2003 the system. Client software and fingerprint collection terminal hardware.

    Biologon installed in 2003 with Microsoft Active Server D irectory the Windows 2000 (or 2003) server operating system. System requirements must be Microsoft Windows 2000 server or Micros oft Windows 2003. Is an independent domain and DNS server. Server completes fingerprint database management, user management and domain management authority.

     Biologon 2003 client installed on the Windows 2000 (or windo ws XP) client operating system. Installation of the client and server computer has joined a domain. Client main landing fingerprint authentication process. Client information is also available on the fingerprint from registration.

     Fingerprint collection terminals were installed in every station equipped with Biologon 2003 machines. Fingerprint information to achieve real-time acquisition function.

The structure of the whole system as in the figure below :

Fourth, the way the system functions

Network landing :

     Biologon safe landing program extends the Windows graphics interface functions landing, Biometric Authentication allows users (eg, fingerprints) and logged on to the domain controllers. Biometric Authentication posted to achieve a "one-time random password." Effective way to prevent unauthorized access to the domain of traditional passwords; Windows Workstation XP/2000 also provided security for the screen saver. unlocking the use of biological authentication. Biologon strict compliance with existing safety landing program strategies, the management strategy including user and group strategy and the strategy domain trust relationships.

Offline landing :

    Off-line network landing with the landing through the use of the same registration. so portable computer users to connect to the network or users connect to the local computer network and use the same approach to identified. The features for all users, whether in the office or outside the office. provided a perfect landing biometric identification methods, it also raises the ease of use and safety.

    The use of biometric identification workstations landing dialogue, dialogue, users only need to select the biometric identification system, After identification can then landed without dialing code. However, the capacity to be identified. users must register before this information to the biological characteristics of this machine (offline landing), or Domain Controller (online landing).

Fifth, the biometric registration information

     Biometric registered in the Active Directory Users can be completed Seamless integration of the registration guide, which the Active Directory Users attributes page User China.

    It may also be passed from the client to complete the registration application form. Since registration can help users in the absence of managers in the Active Directory on Notes List Biological their certification documents. In large-scale deployment process, managers could not be registered for each user on January 1, and at this time Self-registration option becomes particularly useful.

Sixth, the integrated features of Windows

    Active Directory is Microsoft Windows 2000 Servín Sha'er (2003 Server) platform in the center of devices approach to the management of a network environment to provide the identity and relationships. Biologon safe landing unity program and Microsoft Active Directory Taken together, affect reproduction and backup, thus providing a large enterprise networks requires the greatest degree of flexibility and can be measured.

Familiar with the user interface :

    Biologon end of a series of security control program MMC landing module so managers can facilitate the management of server and workstation users to identify strategies for the registration of biological environment.

Event log :

    Biologon safe landing program to be integrated into the console MMC biological incident will be recorded to. For example, traceability incident log the date and time of an event, as well as sponsors of the results and other information.

Windows Server security closer integration :

     Biologon is the only through the Microsoft Windows 2003 Server Lo Biometric Authentication go authentication server in the field of biological products.