| |
| |
| |
What sensors can be used with Ceelox ID® products? |
Ceelox Software supports AuthenTec, UPEK, Validity, and Symwave sensors natively.
- AuthenTec AES 1610
- AuthenTec AES 2501
- AuthenTec AES 3500
- AuthenTec AES 3400
- AuthenTec AES 4000
- UPEK
Back to page top.
|
| |
What is the difference between one-to-one and one-to-many fingerprint matching algorithms? |
A one-to-many algorithm identifies and authenticates a person using the fingerprint as the only piece of information. As the fingerprint is submitted for authentication, it is compared against all the fingerprints from all the persons enrolled until it finds a match.
A one-to-one algorithm uses a specific unique identifier (like a username) to determine which person is about to attempt authentication. As the fingerprint is submitted, it is compared against only the fingerprints from the person determined by the unique identifier.
One-to-one matching algorithms are simpler and therefore more secure and efficient for most biometric authentication systems.
Back to page top. |
|
| |
Do Ceelox products work on Linux, UNIX, or Mac operating systems? |
|
| |
What are the system requirements for Ceelox products? |
All Ceelox products work on these Microsoft operating systems:
- Windows 2000
- Windows XP
- Windows XP Professional
- Windows Server 2003
- Windows Vista
Back to page top. |
| |
What type of encryption does Ceelox Vault™ Utilize? |
Ceelox Vault™ can be set to work with any of following encryption algorithms: 3DES; AES256; Blowfish 448.
Back to page top. |
|
| |
What is the difference between Ceelox ID® Stand Alone Edition and Ceelox ID® Server Edition? |
There are many differences between the 2 editions. First, Ceelox ID® Stand Alone Edition authenticates locally while Ceelox ID® Server Edition authenticates first locally, then against a central LAN Server database. There are basically two consequences for this:
- With Ceelox ID® Stand Alone Edition, a user that has not been enrolled in a particular computer cannot use a fingerprint to authenticate there.
- Ceelox ID® Server Edition, all users can be enrolled on a single computer then they can authenticate on any computer connected to the server.
Both editions of Ceelox ID® work in the exact same manner with Active Directory by submitting the proper credentials (username and password) to the Windows Domain Controller once a successful biometric match has taken place.
Back to page top. |
|
| |
Do I need to create a new User Name and Password when installing Ceelox ID®? |
No. You actually must use your existing Windows User Name and Password if you want your fingerprint to be able to log you into your system. Ceelox ID® does nothing other than remember your username and password and submits it for you to Windows.
Back to page top.
|
| |
Are images of the fingerprint stored anywhere?
|
No. Ceelox stores a “pattern”, also referred to as an “enrolled biometric template” or a mathematical description of your fingerprint in order to “recognize” your fingerprint as belonging to you. It is not at all an image of the fingerprint itself, but rather a description of it. A description that is accurate enough to ensure your fingerprint will not be confused for another - while being simple enough to make the matching efficient and fast.
Back to page top. |
| |
What is a biometric template? |
It is a “pattern” or a mathematical description of your fingerprint that is accurate enough to ensure your fingerprint will not be confused for another one and simple enough to make the matching efficient and fast.
Back to page top.
|
| |
How is a biometric template generated? |
A pattern is found by taking key characteristic measurements of the shape of the lines that constitute the fingerprint. Some common key characteristics that are used for this purpose are ridges and bifurcations of the finger. These are now commonly referred to as Minutia points. The principle behind this is that two different images of the same fingerprint will still present the same Minutia points if they are in fact from the same fingerprint. The algorithms to generate these templates are constantly improved and depurated; Ceelox’s architecture was designed with these constant changes in mind allowing modular capability to ensure the best algorithms are always available through our products.
Back to page top.
|
| |
What type of security does Ceelox provide for storing biometric templates? |
All biometric templates are stored with robust Rijndael AES256 encryption, and in the form of an Enrolled Bio-Template. By definition an Enrolled Bio-Template cannot be used to authenticate against itself so it is not possible to substitute a live sample of a legitimate fingerprint with an Enrolled Bio-Template.
Back to page top.
|
| |
What type of security does Ceelox provide for storing passwords?
|
Passwords that grant access to our applications are first hashed with SHA-1, then stored, then encrypted with Rijndael AES256. Passwords that are used by Ceelox applications to submit as credentials to another application are kept encrypted with Rijndael AES256.
Back to page top.
|
| |
What type of encryption does Ceelox SecureMail™ use? |
Ceelox SecureMail™ uses Rijndael AES256 encryption and the keys are kept away from the data in a central Key Server location. Each message encrypted with SecureMail has a unique and particular key.
Back to page top.
|
| |
How many times must I swipe my fingers to enroll with Ceelox ID®? |
This depends on the type of fingerprint scanner used with Ceelox ID®. Most of our latest swipe scanners need 3 clear samples of your finger in order to enroll it properly. Think of it as looking at a person’s face from several different angles in order to identify it the next time you see it.
Back to page top.
|
| |
How many fingers do you recommend I enroll when using Ceelox ID®?
|
We recommend you enroll at least 2 different fingers. In case you experience a problem with one (injury of some sort), you can always use the other. It is also important to notice that for some people, a finger might work better to enroll and authenticate than another one, it is always recommendable to try and see which one is the easiest to work with.
Back to page top.
|
| |
Can I use my fingerprint as well as my User Name and Password together for two factor authentication with Ceelox ID®? |
Yes. There is a specific installer for both Stand Alone and Server Edition that sets the software to work in two factor Authentication Mode.
Back to page top.
|
| |
I plug in the Ceelox Vault™ but nothing happens. What can I do?
|
There may be a problem with the drivers used by the device. Try to reboot your PC and see if that addresses the problem. If Ceelox Vault™ still does not automatically start when you plug the device in, it is possible that the auto run feature on your PC is not operational. In order to manually start Ceelox Vault™, simply follow these steps:
- Use Windows Explorer to access the “CeeloxVault” area of your portable device.
- If you are using a Flash Stick, run the program “VaultLoader.exe” to start Ceelox Vault™.
- If you are using an external Hard Drive, run the program “RunCeeloxVault.exe” to start Ceelox Vault™.
Back to page top.
|
| |
I re-started my PC but the Ceelox Vault™ application does not start. What can I do?
|
You can manually start Ceelox Vault™ by selecting “Ceelox Vault™” from your program menu.
Back to page top.
|
| |
How do I remove an enrolled person’s fingerprint from Ceelox Vault™? |
Any Additional Fingerprint (other than the two primary ones used to create the Vault) needs a positive match before it can be removed. This is so that IT and Security administrators can be assured that they will always have access to their user’s Vaults.
Back to page top.
|
| |
My Ceelox Vault™ icon disappeared, how do I get it back? |
You can manually restart Ceelox Vault™ by selecting “Ceelox Vault™” from your program menu, or by re-plugging in the device, or by opening the drive unit and running the launcher program.
Back to page top.
|
| |
If we have to replace or update our readers do we have to re-enroll the fingerprints of all the members in Ceelox K[id]™? |
|
| |
Is Ceelox SecureMail™ able to encrypt messages for users not yet using Ceelox SecureMail™? |
Yes. The receiver can register and download the SecureMail client in order to decrypt the message after receiving the message.
Back to page top.
|
| |
When I plug in my Ceelox Vault™ Stick, I get an “error -13” message. |
This is an issue that occurs if drives are mapped to a lower letter than recommended by Microsoft. In order to fix this problem, drives assigned a letter lower than “L” should be re-mapped to a higher letter.
Back to page top.
|
| |
Using Firefox web browser, I cannot navigate successfully to the SecureMail client download page. |
Ceelox web sites are only certified to work with Microsoft Internet Explorer version 6 or higher.
Back to page top.
|
