The name of the base system (platform): | BioLink BioTime |
Developers: | BioLink Solutions |
Last Release Date: | October, 2014 |
Technology: | Cybersecurity - Biometric identification, Information loss preventions are cybersecurity |
Content |
IDenium is the certified biometric solution on data protection based on biometric technology. Fingerprints in IDenium completely replace passwords not only with an input in the operating system, but also on access to the application software (a banking information system, e-mail CRM ERP, CAD/CAE/CAM , etc.), to online resources, terminal sessions. In a system the mode of multiple-factor identification is implemented (biometric data, smart cards, one-time passwords).
In BioLink IDenium in addition to biometric identification on fingerprints recognition on an iris of the eye of eyes and on finger veins is supported. The new method of authentication — the one-time passwords valid only for one session of an input is entered.
2017
FSTEC certificate
The BioLink Solutions company announced in December, 2017 prolongation till August 22, 2020 of validity period of the certificate issued by the Federal Service for Technical and Export Control to the IDenium system. Certificate of conformity No. 2414 confirms that BioLink IDenium conforms to requirements of the regulating document "Protection against unauthorized access to information. Part 1. The information security software, Classification by the level of absence control of not declared opportunities" on the 4th level.
2014
IDenium 4.7
On January 16, 2014 the BioLink Solutions company announced a release of the new version of the IDenium 4.7 system.
In addition to the implemented functions of the biometric IDenium system which entered version 4.6
- possibility of installation of biometric user identification in the specific application;
- cross-site identification on fingerprints;
- possibility of system deployment on the virtual computer which does not have access to physical USB ports;
- expanded block of diagnostics of functioning of a biometric system
in the version of IDenium 4.7 an opportunity appeared:
- adding of support of Firefox v24.0, v25.0, v26.0. Password Vault password manager is compatible to the latests version of the Firefox Internet browser and it, undoubtedly now, will simplify to users an input on web pages on which input of credentials is required.
- IT specialists of BioLink Solutions company carry out detailed work on improvement of an element of system authentication. Now the input in the operating system (the supplier of credentials) is upgraded. This updating made stable work in operating systems of the Windows family.
IDenium 4.8
On October 31, 2014 the BioLink Solutions company announces a release of the version of a biometric information security system of BioLink IDenium. In version 4.8 functions of biometric identification of users of corporate networks and applications are even more expanded: now users of IDenium can undergo verification on an iris of the eye of eyes.
BioLink IDenium it is completely integrated with the directory Microsoft Active Directory (AD). Instead of inconvenient, bulky and, the main thing, extremely vulnerable passwords users get access to corporate network and its resources using comfortable, safe and reliable biometric identification. It is possible to replace with biometrics passwords not only with an input in the operating system, but also to the application software (a corporate information system, e-mail CRM ERP , etc.), to on-line resources, "thin" clients and terminal sessions.
Earlier optical fingerprint scanners BioLink U-Match were at the disposal of users of IDenium; identification was performed on a fingerprint, a print and the password, a print and a smart card. Now, having scanned a fingerprint or having entered the password, the powers on access can be confirmed, having undergone recognition on an iris of the eye of eyes.
The new USB scanner of an iris of BioLink i-Match 2.0 is for this purpose used. Scanning of an iris of the eye is automatic also in the contactless mode: it is enough to bring BioLink i-Match 2.0 to the person that he found the biometric identifier, created its image and estimated quality of the received "picture". The BioLink IDenium system stores and processes not images of biometric identifiers (fingerprints and an iris of the eye of eyes), and their digital models; inverse transformation (from model in a real print or the picture of an iris) is impossible.
"Biometric technologies become more and more demanded: it is enough to tell that the leading payment systems — Visa, in MasterCard and PayPal closely were engaged in them — the CEO of BioLink Solutions company Konstantin Sorokin says. — In the version of the IDenium system the potential of biometrics is realized even more widely and placed at service to the interests of information security support of the most different corporate customers, including banks, the enterprises of the industry and the fuel and energy sector, the state and municipal organizations, health facilities, etc."
2013
BioLink IDenium is certified on compliance of Microsoft Windows Server 2012
In April, 2013 the BioLink Solutions company announced successful passing of tests for compatibility with Microsoft Windows Server 2012 OS a flagship product of the company — the system of biometric identification of users of corporate networks BioLink IDenium.
The BioLink IDenium system in a complex solves the problems of information security connected with access control of users to corporate resources. It replaces bulky and vulnerable passwords with convenient and reliable authentication on fingerprints at the addressing the operating systems, applications protected cloud and to web resources and during the work in terminal sessions (Citrix Xen and MetaFrame, RDP). A system is completely integrated with the Microsoft Active Directory directory, differs in speed of the centralized installation, scalability and fault tolerance.
BioLink IDenium implements technology of a uniform input in applications (Single Sign-On — SSO), significantly reducing costs for management of user rights and minimizing risks of leak of authentication information, unauthorized access and an insayderstvo.
BioLink IDenium is implemented by a number of the Russian customers, including large banking institutions and industrial enterprises, and is the only biometric information security system having the certificate of the Federal Service for Technical and Export Control (FSTEC).
IDenium 4.6
BioLink Solutions announced on June 25, 2013 a release of the new version of a biometric authentication system of users - IDenium 4.6.
In version 4.6 of advantage received a new boost of development:
- support of the operating system is provided Microsoft Windows 8 and interaction is expanded with Windows Server 2012;
- new opportunities of biometric identification of users in applications are entered;
- administration of BioLink IDenium and interaction of this biometric system with other products intended for data protection is optimized.
Authentication on demand
BioLink IDenium saves users from need to remember and enter passwords not only at access to corporate network, but also during the work in application programs. Now the administrator of IDenium can set obligation of biometric user identification in the specific application: at failure of the user from execution of this requirement the application will be closed.
Biometric technologies are supported in application programs of the most different types, including on-line, remote and terminal. For applications of the first type in the new version write process of scenarios of identification on websites on a fingerprint of the user is simplified; if the user provides access to the remote application through Remote Desktop Web Connection, BioID IDenium will support now and such method.
Cross-site identification
IT solutions of the customers applying biometrics to protection of corporate resources constantly evolve and become complicated, and BioLink Solutions considers this circumstance at development of the IDenium system. Its new version provides cross-site identification on fingerprints — if the website to which the user provides access and the website in which the IDenium server is located differ, but are located in one domain network.
Virtual influence
One more trend — the aspiration to virtualization - the BioLink IDenium system can be unrolled now on the virtual computer which does not have access to physical USB ports. Carriers with license keys usually are connected to the mentioned ports; in the new version these keys became program, and there are no barriers to use of IDenium in virtual environment.
Active Directory integration
BioLink IDenium is completely integrated with the Active Directory (AD) directory. When developing the new version the corresponding root identifier of objects/attributes of the scheme AD is registered in IANA (Internet Assigned Numbers Authority) — the international association managing IP address spaces and top-level domains, and also other global resources. This registration guarantees lack of the conflicts when installing other expansions of the scheme AD in AD forest where the biometric IDenium system works.
Diagnostics and network settings
In a system the expanded block of diagnostics of functioning of a biometric system is implemented. In addition, when installing the IDenium components necessary exceptions of the firewall are added that allows to avoid blocking of network traffic of Biolink IDenium.
"Reliable, failsafe and scalable solutions on data protection are especially necessary today, than and the popularity of BioLink IDenium — in banks, the state organizations, on industrial enterprises and at many other customers is caused. Developing this success, we constantly increase functionality of a system of biometric identification of users of corporate networks, we adapt it for the changing customers needs and IT-Innovations. The new version of BioLink IDenium expands possibilities of application of biometrics for the purpose of information security, providing achievement of these is more whole in the shortest possible time, without violation of the current business processes — facilitating, but not complicating work of users and increasing efficiency of differentiation of their access to corporate resources", - Konstantin Sorokin, the CEO of BioLink Solutions noted.
2011
IDenium 4.3
This version of a system included not only new mathematical algorithms of comparison of digital models of fingerprints, but also qualitatively new functionality among which: support of biometric authentication on web pages; expanded support of biometric authentication in terminal services; new scenarios of authentication in the Single Sign-On(SSO) component; the updated tools for integration with service Active Directory.
Activity of any modern enterprise is inconceivable without use of processing and storage of the diverse information. Access to it should be at the same time convenient for the legal user and is most complicated for strangers. Importance of a question of protection of information increases every year, also technologies of its protection respectively develop. The applications using identification by biological parameters for determination of right of access take the important place among offers in the market.
Today the biometrics is applied in banks in different areas: from identification of clients to a time recording of employees.
For example, Zapsibkombank uses the biometric system of identification of users of BioLink IDenium at access to the core banking system and other applications, and the FORA-BANK implemented one more product BioLink — the biometric system of accounting of working time and access control of BioTime allowing to keep the centralized automated account of a worked time on all branches and additional offices of bank.
If until recently biometric identification of holders of bank cards was considered as exotic, then now it became absolutely usual for tens and hundreds of thousands of users in Brazil and India, Poland and Saudi Arabia, Japan and Colombia. In Russia pilot projects on integration of biometrics into ATMs and POS terminals are implemented by Sberbank: in some regions holders of the social cards emitted by it can pay goods and services, confirming transaction by scanning of fingerprints.
The main reason of use of biometrics — the maximum reliability of determination of the personality. Persons, but not the related material identifier (a token, a smart card, a counter) which can be lost or it is intentionally transferred to malefactors.
Biometrics as means of strengthening of internal information security
Insider threats and questions of minimization of these risks are traditionally relevant for the head of Information Security Service of any bank as they unauthorized access to confidential resources (accounts and personal data of clients, financial statements, banking applications) and leak of corporate information can be expressed in enormous losses — both financial, and reputation. System implementation of biometric identification of employees can be one of the most effective solutions of this problem.
The most large-scale biometric project in the CIS (9 thousand workstations) is BioLink IDenium system implementation in People's Bank of Kazakhstan. The system of biometric identification works on a centralized basis and covers not only head office, but also all territorially remote bank branches. The system installed in bank integrates process of biometric identification into infrastructure of Microsoft Active Directory and terminal applications (Citrix, Microsoft RDS, etc.), supports Windows 7 and Windows 2008 Server R2 and also provides a uniform biometric input (Single-Sign-On) in all corporate applications.
In the territory of Russia the most large-scale use of biometric identification noted Zapsibkombank. In this bank the BioLink IDenium system, at head office and 24 branches is also installed. Estimating an indicator of ROI from IDenium system implementation as high, the management of bank made the decision on scaling of a system on all branches. Except system operation performance indicators the solution of the management was also influenced by the fact that IDenium is the only biometric system in the market certified by FSTEC.
The payback of IDenium or return of investments (Return on Investment) is defined by the following factors:
- Reduction of excess costs for specialists of help desk (according to Gartner Group, more than 65% of addresses to help desk are connected with passwords);
- Decrease in losses of working time of employees at the solution of incidents with passwords (on average this transaction takes from 15 to 25 min.);
- Minimization of a possibility of leak of valuable information and frauds of employees under others account.
FSTEC certificate of Russia
In August, 2011 BioLink Solutions announced obtaining the FSTEC certificate of Russia on a biometric authentication system of corporate users of BioLink IDenium on the NDV 4 level. Thanks to successful passing of inspection control to FSTEC of Russia, the BioLink IDenium system became the first certified biometric information security system in the Russian market. In September, 2014 BioLink Solutions announced prolongation till August 22, 2017 of validity period of the certificate issued by the Federal Service for Technical and Export Control (FSTEC) to the system of biometric identification of users of corporate networks and applications of IDenium.
IDenium Local Edition
IDenium Local Edition is the solution for biometric identification of users and control of an input in the operating system and any corporate applications which is specially developed for needs and opportunities of small business and individual use.
Thanks to IDenium Local Edition, the input in the operating system or a corporate system of the companies and application programs is performed using unique parameters of each user – fingerprints, guaranteeing safety and confidentiality of the most valuable information. Unlike passwords and smart cards, fingerprints cannot be spotted, stolen or lost, and the possibility of an error at identification makes 0.000000001%!
IDenium Local Edition is an optimal variant for small and medium and business with a small amount of computers and also for single users who want to secure as much as possible access to personal files and programs.
The IDenium Local Edition software product consists of 2 components:
Password Vault is a uniform biometric input in all applications
- need to keep password lists for all your applications disappears;
- the only thing that is required from the user for an input in all corporate applications - to show earlier registered fingerprint;
- centralized operation and setup, import of password lists are provided.
- verifies authenticity (verifies) the user at an input in the operating system;
- verifies the user during the work with other applications interacting with BioLink Windows Logon;
- transfers information on the user obtained as a result of verification and necessary for user authentication in the operating system.
IDenium Local Edition is simple and convenient in use, does not require existence of servers and the domain of controllers, but at the same time supports accounts of the working groups and domains.
The software of BioLink IDenium Local Edition supports all modern models of the biometric BioLink scanners and also scanners of UPEK company.
- BioLink U-Match 1.0 … 3.5 - Office optical USB fingerprint scanners
- BioLink U-Match BI Usbvstraivayemy optical USB fingerprint scanner
- BioLink U-Match 5.0 Office optical USB fingerprint scanner integrated with the smart card reader
Technical requirements of IDenium Local Edition
- the personal computer with the Pentium IV processor 1500 MHz or above;
- Microsoft Windows XP (SP2)/2003 (SP2)/Vista/Seven operating system;
- amount of RAM not less than 256 MB (512 MB are recommended);
- 200 MB of an empty seat on the hard drive (depends on type of the operating system);
- the disk drive for reading CD ROM (on installation time of the software — if it is not performed on a centralized basis);
- network adapter;
- USB port for connection of the fingerprint scanner (or the built-in fingerprint scanner of UPEK company).