Fujitsu PalmSecure

2019: Solutions for biometric authentication without use of passwords

On July 16, 2019 the Fujitsu company provided the updated, expanded range of solutions for security on the basis of biometric PalmSecure technologies which allow to refuse passwords, providing simple authentication of users during the daily work with applications.

Already available for July, 2019 for all customers from EMEIA region, a set of solutions PalmSecure includes 4 basic elements: Fujitsu Biometric Authentication PalmSecure ID Engine, ID GateKeeper, ID LifePass and ID Login V2. They are intended for ensuring secure access to client computing systems, to premises and data processing centers and to all types of applications using the simple and universal API interface. The offer of the company will allow customers to take advantage of broad range of applications to biometric authentication without use of passwords, the developer claims.

According to the statement of the developer, PalmSecure allows the companies to provide the high level of reliability of biometric protection, at the same time increasing convenience of using to end users and avoiding the additional costs connected with recovery of passwords technical support service. The developed functions of integration give the chance to customers to create the protected solutions of biometric control for physical access to premises and devices and also for logical access to applications and services.

According to the developer, the complete and scalable solution of Fujitsu PalmSecure offers all necessary components for simple and convenient creation of solutions for biometric authentication which can be used practically for any application. This system created based on the updated central server of verification strengthens protection due to elimination of need for users for registration and in an input in numerous accounts in different places, on different devices, applications or services. Ease of integration into any types of applications and the equipment becomes simpler using the universal API interface. It allows to implement technology of biometric authentication in different scenarios of use: beginning with an input in data processing centers, finishing with creation of credentials for industrial equipment and a uniform input in different applications.

The protected, simple and hygienic technology of biometric authentication for the drawing of veins. Security of corporate systems became a difficult task taking into account that the attacks arise not only from the outside, but also as a result of actions in the organization. All this does questions of control of security and access to corporate assets even more relevant. Biometric authentication finds the increasing distribution in the market as it submits the safe, exact and effective method of confirmation of the identity of the person, and the companies are in search of more protected and simple technologies of authentication in use for access control to data, physical access and the general security. Researches of Fujitsu in the field of different biometric authentication solutions, including recognition of the person on an iris of the eye of eyes, features, fingerprints, a voice and the signature, showed that these technologies have the weak spots, and the technology of authentication for fingerprints does not conform to sanitary and hygienic requirements, noted in Fujitsu.

In a contactless authentication system of PalmSecure the biometric technology for authentication of users for the unique drawing of veins is used. According to the developer, algorithms of authentication of the PalmSecure system provide the high level of accuracy and universality of application. The false accept rate (False Acceptance Rate, FAR) makes less than 0.00001 percent (1 on 10 million), and coefficient of a false access denial (False Rejection Rate, FRR) – 0.01 percent (1 on 10 thousand). The contactless reader conforms to sanitary and hygienic requirements and also provides the high level of recognition of the user with a system.

"Biometric identification and technology of identification for the drawing of veins, in particular, bring IT security to higher level. Need to remember or to regularly change difficult passwords disappears that does access for users to protected resources and applications it is much more convenient. During the developing and deployment of the presented solution Fujitsu tried to provide the maximum simplicity of its use. As a result was a broad set of solutions for biometric protection which help the companies easily and just to implement technologies of biometric authentication is created. The algorithm of biometric recognition Fujitsu PalmSecure provides exclusively low false accept rate, and processes of the centralized input in an account guarantee that users will not be able to bypass the system of protection, having just created several identifiers", noted Oliver Reyers, the head of department of biometric technologies of Fujitsu company in EMEIA region

"Until recently biometric technologies were not widely known to the companies though they enjoy popularity at users, and the fact that the person practically cannot "lose" the biometric identifier, considerably reduces the number of addresses to a support service for recovery of the password. Having combined the efforts with Fujitsu, we had an opportunity to implement all potential of biometric technologies in corporate environments. A set of solutions PalmSecure allows to implement this technology in the most various scenarios of use and has high attractiveness in terms of finance for the companies which seriously treat questions of information security", noted Peter Gyoergideak (Péter Györgydeák), the CEO of Biosec company

2018

Use in small retail stores

In July, 2018 the large Japanese network  supermarketovaeon announced system implementation of payment of purchases according to the drawing of veins Fujitsu PalmSecure. It is noted that it is about the first start of such technology in retail stores. Read more here.

The first application in tourism

In May, 2018 it became known of the first system implementation of identification according to the drawing of veins in travel business. The system basis under the name Tourist Onboard Management System (TOMS) was formed by biometric technology of Fujitsu.

TOMS implemented in the tourist courts plying to the Great Barrier Reef — the world's largest coral  reef which is in the Pacific Ocean along the northeast coast of Australia. Here a huge number of divers from around the world is flown down.

An electronic system is intended not to forget divers. In 1998 the banal error of calculation of people onboard the vessel led to the fact that the married couple Tom and Aylin Lonergana remained with the Great Barrier Reef. The lost young people were not found. TOMS is urged not to allow such misses.

All passengers in tourist courts will put the palms to the special scanner which registers the unique drawing of veins. All images will go to a remote server before departure from port. Then after each diving from the boat and return to it divers will be identified, fixing the moving to water and from water.

The captain of the vessel, being in the steering cabin, will be able to see on the screen of the computer how many people are in water and onboard not to forget none of them.

Besides, will distribute to fans of scuba diving bracelets with GPS modules using which the organizer of a tour will be able to trace users in water with an accuracy of 1 meter. It concerns swimmers, divers and divers with a mask and a tube.

The sensing technology of tourists according to the drawing of veins in the Australian courts will be tested within several months. It is going make it public in 2019. Initiators of the project expect to get a financial support from the state for full-scale system deployment.^[1]

2017: Integration of Fujitsu PalmSecure ID Login into the Active Directory

In June, 2017 Fujitsu announced release of PalmSecure ID Login, the solution for biometric authentication which helps the companies to protect the networks from unauthorized access and to reduce risk of the attacks of cybercriminals.

Fujitsu PalmSecure ID Login integrates highly protected technology of authentication for the drawing of veins of a palm on corporate network environments using a directory service of Microsoft Active Directory. It allows to strengthen protection of information complex and gives the chance to simplify an input of users without the need for storing of passwords which should be updated regularly.

To log in to the account on the computer or to be authenticated for access to internal systems, users of PalmSecure ID Login should just place a palm over the special contactless scanner. Such scanner is integrated into a set of models of LIFEBOOK notebooks and STYLISTIC tablets of a format 2 in 1 of Fujitsu company and also is available in the form of the separate USB device. The registered users can log in to the account from any device within corporate network since PalmSecure ID Login is connected to a directory service of Microsoft Active Directory which on a centralized basis manages and stores all data on access, including biometric.

The PalmSecure technology of Fujitsu company identifies the person by infrared scanning of the drawing of veins of a palm. The technology integrates in itself convenience of the contactless sensor and reliability of biometric authentication. For users this system more simply and quicker in comparison with password entry – verification of identification data is executed, as a rule, less than in 1 second. Each drawing of veins is unique and does not change on an extent of all life. Since there is no need for change of the password, the company, implementing the solution PalmSecure ID Login, also get additional benefits in the form of reduction of number of addresses of users to a support service for reset of the password.

The solution PalmSecure of Fujitsu company is already implemented in the state organizations, data processing centers, medical institutions, at the airports and banks for access control to the websites, registration of time of access, access to web resources, for an input in mobile applications and corporate network. The technology works in real time and is protected from falsification since authentication includes check of the movement of blood.

The solution PalmSecure ID Login of Fujitsu company is available to the order in EMEIA region since June, 2017, after it it will be possible to purchase in Australia and North and South America. Fujitsu PalmSecure ID Login can be purchased directly at Fujitsu company and its partners. Cost depends on the region.

Fujitsu PalmSecure ID Login works only based on the hardware of Fujitsu company. Besides, its work requires the Fujitsu PalmSecure sensor. A system supports Windows 10 OS (the 64-bit version) and Windows 7 (32/64-bit version) and all types of PalmSecure sensors.

The solution includes 3 principal components: Software of Workplace Protect Active Directory (local program component); the Workplace Protect Enrolment Station device (for the centralized registration of drawings of veins of users); and software of Workplace Manager Active Directory (server program component).

2016

PalmSecure bioLock

On November 22, 2016 the company Fujitsu announced release technologists of PalmSecure bioLock for protection SAP- systems with biometric authentication. Functions of biometric access control are included for systems SAP ERP and HANA.

According to the agreement with realtime AG which develops the software with function of biometric control bioLock for access to the systems of SAP Fujitsu becomes only the global partner of SAP who provides this function of security of the certified solution^[2] integrated by default^[2] in the form].

Advertizing bioLock, (2016)

The companies using the systems of SAP with implementation of bioLock will receive the increased level of biometric protection of an environment of SAP and confidential data from theft, loss or fraud.

Expanding partnership from realtime AG companies within the contract, Fujitsu had an opportunity to propose the solution for management of biometrics in the market. The solution provides strict and detailed access control to SAP systems due to providing the rights to users on the basis of biometric identification. Such approach will help to prevent transfer or copying of passwords.

Development is integrated into the traditional systems of security of SAP, including Single Sign-On and SAP Governance, Risk and Compliance (GRC) mechanisms. Fujitsu PalmSecure bioLock executes identification of users by means of unique drawings of veins of palms for control of an input in the crucial SAP systems, including personnel management systems, customer relations and deliveries, the financial software, the systems of retail and the SAP HANA platform. Biometric authentication guarantees secure access to SAP systems from sharing devices.

The Fujitsu PalmSecure bioLock functions include biometric authentication for control of physical access and a full integration with the module SAP Time and Attendance Management. Previously configured and ready sets reduce deployment time in an environment of SAP.

Fujitsu has global geography of activity and an opportunity to propose solutions for security to the international customers. We are glad to cooperate with this company to help her customers using systems SAP and HANA, to resolve the issues connected with information protection. Martin Lum, the marketing vice president of realtime AG company in North America

Researches showed that most the large companies loses every year at least 5% of the income in result of fraud. Intentionally or on negligence, employees can pose a big threat of information security, than malefactors therefore the companies should guarantee that only the authorized employees can get access to important corporate information. Using our simple in deployment and reliably protected solution PalmSecure bioLock of the company can provide access control, strict, but convenient for users, to all components of environments of SAP and keep record of all events on a check case. As a rule, investments into new technology pay off less than in a year. We are glad to our cooperation with realtime AG company with the purpose to help the companies using SAP products, to achieve the highest level of protection. Thomas Bengs, the head PalmSecure of Fujitsu company in EMEIA region

PalmSecure ID Access

On September 16, 2016 Fujitsu provided PalmSecure ID Access - the device, ready to use, using which large corporations and the companies of small and medium business can upgrade access control systems.

PalmSecure ID Access is the compact terminal with the PalmSecure sensor and the touch screen intended for authentication of the personality using technology of contactless scanning of the drawing of veins of a palm. PalmSecure ID Access can be integrated into the operating access control systems.

PalmSecure ID Access, (2016)

The technology of biometric authentication provides the high level of accuracy in comparison with security systems based on PIN codes, passwords, keys or access cards. It differs in exclusive convenience of using and a gigiyenichnost. Besides, there are no elements which can be lost, transferred by the friend to the person, to copy or steal. Customer companies have an opportunity to individually grant access rights to individuals, at the same time having excluded risks, connected with loss of passwords.

The PSN900 device is created on the platform of technology of scanning of the drawing of veins of palms of Fujitsu company. PalmSecure ID Access is available in different configurations to multifactor authentication. Installation of Mifare card readers or HID proximity cards is provided. There is an option of delivery of the device only with one PalmSecure sensor.

How it works

The PalmSecure technology uses the radiation of a near Infrared range for scanning of the drawing of veins of a palm of the person. The special algorithm uses the image received as a result of scanning for creation of a unique biometric image. This identification information is confirmed by comparison of samples with the database of previously registered users. Registration in a system by means of PalmSecure technology takes less than a minute, authentication is executed less than in one second.

2015: Fujitsu PalmSecure truedentity

On November 6, 2015 the company Fujitsu announced integration biometric authentications of Fujitsu PalmSecure technology into the solution OpenLimit truedentity for protection of identification and confidential data at virtual or physical transactions, for example in case of Internet payments.

The solution Fujitsu PalmSecure truedentity is based on technology of electronic ID cards (eID). It meets the most strict requirements and assists the large companies in advancing of the European standards.

Representation of PalmSecure truedentity (2015)

As a part of a solution stack of Fujitsu PalmSecure truedentity of technology for users and servers, BSI created on the basis of technology of ID cards according to technical requirements (Federal agency of Germany on information security). The basic principle guarantees - authentication data of the user, in a specific case - the drawing of veins of a palm and the related identification information, are provided only at the request of service provider and the explicit consent of the user. After approval by both parties data on authentication are transferred via secure channels at each transaction.

The supplier of the identification information, in a specific case - truedentity technology, as the additional service executing a mediator role at mutual authentication is integrated into process of data exchange.

Using technologies of the entrusted authentication in combination with biometric characteristics, the "cracked" passwords or the stolen maps become useless as Fujitsu PalmSecure requires availability of biometric identification data in addition to other means of authentication: PIN code or password.

The solution Fujitsu PalmSecure truedentity helps the organizations quickly and to flexibly meet separate requirements of the state standards as "Regulations on electronic identification and services of trust" (eIDAS) in Europe, to provide compliance to all necessary rules of confidential information protection.

2014: Fujitsu PalmSecure ID Match

On November 19, 2014 the Fujitsu company presented the solution for biometric authentications according to the unique drawing of blood vessels of a palm. World sales of the Fujitsu PalmSecure ID Match device intended for protection of access, information and financial transactions will begin at the beginning of 2015 with EMEIA region. Meeting the requirements of the existing regulating documents of the European Union, it is suitable for a broad spectrum of applications in security systems of financial institutions, retail stores, objects of social security and public organizations.

Modern information and communication technologies give almost unlimited opportunities for joint development of the services of security widely demanded in the market and the providing reliable data protection and personal data. The innovative technology of PalmSecure which appeared as a result of long-term developments of Fujitsu in the field of authentication systems flexibly adapts to requirements of customers. In particular, the ID Match device which is similar to the normal payment terminal, but is the reliable solution for authentication, can be easily adapted for specific models of use.

To people new methods of interaction with violently developing digital ecosystem of financial institutions, public institutions, retailers open. Elimination of bureaucratic barriers and simplification of models of joint work of the users living in the different countries promote distribution of the companies with the distributed structure. All this increases even more a role of security technologies which support collective activity and innovations in the field of services at reliable access control, data protection and financial transactions.

The solution Fujitsu PalmSecure ID Match provides the highest level of protection thanks to multiple-factor check of the identity of the user: authentication is carried out by scanning of the drawing of blood vessels of a palm and check of a PIN code to a smart card. Such method increases reliability to the level unavailable before. The PalmSecure sensor, the touch screen, a payment based on the ARM processor and the device for reading cards of a different format is included in the package of Fujitsu PalmSecure ID Match. Using a set for software development partners and customers of Fujitsu can integrate this solution in own internal systems, for example, for access control (at the physical or logic level) or a time recording and also for an exception of keyboard password entry in crucial applications.

Among applications there is Fujitsu for ID Match which will be provided in 2015, Fujitsu PalmSecure truedentity is announced. This licensed by software with the client-server architecture it is based on the PalmSecure technology scanning the drawing of veins on a palm. Work with it provides the maximum reliability of authentication and identification of the personality along with reliable protection of data transmission channels. In truedentity the technology implemented in one of the German systems of the electronic identification on the basis of smart cards developed in a full compliance with strict standards of data protection is applied. It protects the major corporate data from unauthorized access at high technological level. Program truedentity mechanisms provide failsafe protection against possible threats and security meets international standards.

2013: Announcement

The Fujitsu company announced in March, 2013 availability of the innovative authentication solutions based on own PalmSecure technology which uses the unique drawing of blood vessels of a palm for protection of identification data against counterfeit. The Fujitsu PalmSecure technology allows to confirm the user's personality using biometric data. For this purpose it is necessary to scan the drawing of veins on a palm by a contactless method which is safer and simpler in use, than traditional methods of authentication, such as Chip & PIN system, and protects data from theft more reliably.

"Fraudulent use of electronic authentication as, for example, in a case with the Chip & PIN system, represents a problem which costs banks and the state agencies around the world millions of dollars. Thanks to use of the Fujitsu PalmSecure technology which is reading out the unique drawing of veins with the low content of oxygen for authentication seconds are required — to the user rather simply to take a hand over the sensor" — told in Fujitsu.

Fujitsu PalmSecure in general represents scalable corporate solution which easily adapts to various applications in the vertical markets. "PalmSecure scans the unique drawing of blood vessels on a palm. Veins are in a body and have a set of distinguishers that provides the high level of reliability, and counterfeit of identification data is impracticable. The contactless device which cornerstone the noninvasive method of reading is has the high accuracy of authentication and extremely low frequency of failures, differs in ease of use and almost total absence of physiological restrictions, says Fujitsu. — Besides, the contactless sensor helps to prevent distribution of the bacteria and infections which are transferred in the basic through dirty hands".

As explained in the company, the module PalmSecure Palm Vein Unit creates radiation in a near Infrared range, it is absorbed by nonsaturated oxygen hemoglobin which is present at blue blood of the user. The image received at the same time is processed by a proprietary algorithm, will be transformed to the digitized biometric template, and then compared to the templates which are stored in the database. At exact coincidence the identity of the user is considered confirmed.

2012: Tests in UniCredit

In December, 2012 the European banking group UniCredit carried out the first series of tests for demonstration of work and improvement of the payment system Papillon. Fujitsu provided to the UniCredit group the sensor fixing the unique drawing of blood vessels of the payer, the software set Solution Development Kit for independent development of proprietary customized software application and the hardware solution and also gave support in work on the project. The UniCredit bank plans gradual system implementation of Papillon, at the first stage — as the mechanism for acceptance of mobile payments, and then — in combination with other payment methods.

"Our technology already passed tests, test and proved the capability to resist to counterfeit of identification data. In the future, when the big and small companies will begin to use more actively technology innovations in the business processes, the solutions similar to Fujitsu PalmSecure will be able to bring to the first users huge competitive advantages in the market" — doctor Joseph Reger, the executive technical director of Fujitsu Technology Solutions said.

The specialized solution of Fujitsu PalmSecure for security can be purchased directly at Fujitsu in the countries of Central Europe, the Middle East, Africa and in India. The price varies depending on a configuration of components and required additional services.

Fujitsu conducts negotiations with the organizations planning implementation of PalmSecure technology in the different industries: from aircraft where it can be used instead of boarding passes, to the sphere of entertainments and retail. All solutions include also the client software and technical support services.

Notes