Biometric Fingerprint Scanner
Hardware Installation, Service, and
Software Implementation
This guide is CONFIDENTIAL and designed only for Omnicell Technical personnel and/or designated
representatives.
This guide and accompanying software and/or hardware described in it are protected under copyright laws and may
not be copied, wholly or in part, without the express written consent of Omnicell, Inc. The same proprietary and
copyright notices must be attached to any permitted copies as were attached to the original documents.
Omnicell, Inc.
1201 Charleston Road
Mountain View, CA 94043
(650) 251-6100
www.omnicell.com
OMNICELL and the OMNICELL design mark, OMNIBUYER, OMNICENTER, OMNIRX, OMNISUPPLIER,
SAFETYMED, SAFETYPAK, SAFETYSTOCK, and SURE-MED are registered trademarks. ANESTHESIA TT,
ANESTHESIA WORKSTATION, ANYWHERE RN, EXECUTIVE ADVISOR, FLEXBIN, MEDICATION
SURVEILLANCE, OMNIDISPENSER, OMNILINKRX, OMNISCANNER, OMNITRACK, OMNI TT, OPEN
TOUCH, OPTIFLEX, OPTIFLEX MOBILETRACK, POINT-TO-POINT MEDICATION SAFETY, SECUREVAULT,
SEE & TOUCH, SINGLEPOINTE, TEMPCHECK, TOUCH & GO, VSUITE, and WORKFLOWRX are trademarks of
Omnicell, Inc. in the United States and internationally. All other trademarks and trade names are the property of their
respective owners.
Copyright 1999-2009 Omnicell, Inc. All rights reserved.
The purpose of this manual is to help the Omnicell Field Operations Implementation team
successfully plan and install Touch & Go on an Omnicell 14.0 system. Implementation is defined
as the planning, installation, configuration, tailoring, and troubleshooting necessary for a product
or feature to go live.
How to Use this Manual
The manual is designed as a step by step guide that focuses on the tasks needed for software
implementation.
All screen shots are taken from the Omnicell 14.0 release.
Note:
1. “Introduction to Touch & Go” on page 1-1, provides an overview to Touch & Go and its
software features. Use this chapter to understand the major concepts that influence the
implementation.
2. “Installing the Touch & Go Fingerprint Scanner” on page 2-1,
3. “Retrofitting the Fingerprint Scanner with a Card Reader” on page 3-1,
4. “Planning for Touch & Go” on page 4-1, focuses on the tasks encountered during the planning
phase of implementation. Use this chapter to ensure that known best practices are followed
during implementation.
5. “Setting Up OmniCenter” on page 5-1, provides the steps for software configuration of
OmniCenter for Touch & Go-related features.
6. “Setting Up Color Touch Cabinets” on page 6-1, provides the steps for software configuration
of Color Touch cabinets for Touch & Go-related features.
7. “Fingerprint Registration” on page 7-1, provides the steps for registering users.
8. “Scanner Maintenance” on page 8-1, provides the steps for scanner health.
9. “Training Customers” on page 9-1, provides an outline of suggested training topics that
customers learn before the system goes live.
10. “Troubleshooting” on page 10-1,
ii-1
Reference material along with a glossary and index are also provided.
Where to Locate Related Information
Release and product information for both technical documentation and user documentation can
be found on the Omnicell intranet.
User documentation for each release is available through inSite at:
http://insite/departments/Documentation/All%20Employee%20Library/Forms/
Vi ew _by _P ro du ct .a sp x
Some related documents of particular interest to Touch & Go are:
DocumentDescriptionWhere Located
Omnicell Implementation GuideProvides planning information for the
1,2,3-Cell Color Touch
Installation and Service Guide
Omnicell Product Equipment
Specifications
OmniCenter 14.0 Administrator
Guide
Omnicell Color Touch 5.10 GuideProvides functional descriptions available to end
Omnicell 14.0 Technical Release
Summary
implementation of the OmniCenter® server and
automated cabinets.
Provide hardware installation, including matrix
drawer design and setup.
Provides an introduction to all Omnicell
hardware products. It can be used by marketing
for quoting to customers in proposals. It can also
be referenced by project managers and field
engineers for implementation and installation
purposes.
Describes the features and functionality of the
Omnicell® OmniCenter Information
Management System. It is designed to be a
detailed resource for the operation of the
OmniCenter.
users at Color Touch cabinets.
PN 67-3004, available in HTML and PDF
formats through TechDoc Central on inSite.
PN 67-2014, available in HTML and PDF
formats through TechDoc Central on inSite.
PN 67-2031, available in HTML and PDF
formats through TechDoc Central on inSite
PN 60-0140, available in PDF formats through
inSite.
PN 60-0139, available in PDF formats through
inSite.
PN 67-3039, available in HTML and PDF
formats through TechDoc Central on inSite.
The Touch & Go™ fingerprint scanner is a biometric, positive-ID system. A biometric system is
made up of a sensor, a computer unit, and an application for which the user’s authentication is
necessary. The sensor captures the biometric characteristic; and the computer unit processes and
eventually saves the biometric data.
The identification of users in a computer system is often done through the use of an ID and
password. IDs and passwords are capable of being forgotten, shared, or stolen. Biometric systems,
such as Omnicell’s biometric fingerprint system, use personal features of the user to check
identity. Biometric systems can be particularly important to hospitals trying to keep medications
and clinical information secure from inappropriate access. Fingerprint recognition is the most
common form of biometric identification.
When effectively implemented, Omnicell’s biometric fingerprint system offers high security and
fast access to the Color Touch cabinet. It provides a more secure access because there are no lost or
stolen passwords. Also, no one can replicate or “hack” a fingerprint image. Some state regulations
require positive user identification and fingerprint scanning helps to meet this requirement. It
provides a more rapid access to cabinets because it requires less key strokes than typing a
password. The cabinet uses this hardware for both verification (authentication) and registration of
user fingerprints.
Hardware Overview
Omnicell cabinets that are ordered initially with Touch & Go are shipped with the feature installed
from manufacturing. However, cabinets can be retrofitted for Touch & Go at the customer facility.
The Touch & Go device contains the housing for a card reader, to the left or right of the
fingerprint scanner.
If Touch & Go is ordered with a card reader, the applicable reader mechanism is installed by
manufacturing. If the cabinet has an existing card reader, it is uninstalled and replaced with the
Touch & Go device. See “Retrofitting the Fingerprint Scanner with a Card Reader” on page 3-1.
If installing a card reader by itself, refer to the Card Reader Installation and Configuration Guide,
Note:
PN 67-2006.
Fingerprints
Fingerprints are the result of minute ridges and valleys found on the fingertip of every person.
They are based on the ridges of skin forming a pattern that is unique to each individual. Each
fingerprint has one of three core features: loops, whorls, or arches. It is the core of the fingerprint
that contains the most information.
Many user issues impact the success of any biometric fingerprint system. Cuts, bruises, aging, and
wearing of the skin all impact how well a biometric device scans a fingerprint. A hospital’s
environmental conditions can also impact image quality by causing hands to be dry or excessively
moist. Fingerprint quality varies from finger to finger and a user’s hobbies, such as gardening
woodworking, or rock climbing can all impact the ability to get a good fingerprint scan. Some
users may even be impacted by rare skin diseases or burns which permanently destroy a
fingerprint. These specified users can remain completely exempt from biometric requirements.
Users register a reference fingerprint that is used for comparison at the time of login. A good
registration is the best predictor of future successful logins.
70% of users are able to register in under two minutes.
20-25% of users are more difficult to register because of the pattern or texture of their
fingerprints. In this case, registration may take up to 10 minutes.
5-10% of users have unreadable fingerprints and are not able to register. These users are
exempt and use a User ID + password for login.
Fingerprint Security
Users may have concerns about identity theft or misuse of their fingerprint. Omnicell does not
store or transmit fingerprint images. Fingerprint scanners work by capturing and measuring the
relative position of the different core features (loops, whorls, and arches) of a fingerprint. The
fingerprint is broken down into a complex pattern of unique features called minutiae. The pattern
(not the fingerprint) is stored numerically.
When a fingerprint is scanned, it is processed into an encrypted, secure, numeric code and then
immediately deleted from memory. The Fujitsu fingerprint technology software, built into the
Omnicell software, performs the fingerprint identification processing. The fingerprint minutia
numeric code can only be used by the Fujitsu fingerprint technology software. It cannot be
reverse-engineered to recreate a fingerprint image. The actual image is deleted. The only
information retained is the X-Y location of the minutia points. These minutia points are used for
match comparisons using the Fujitsu software. Omnicell cannot modify the Fujitsu fingerprint
software, because Omnicell does not have access to the underlying Fujitsu source code.
The fingerprint security configurations of the Touch & Go product provide increased security and
reduces the chance of failed identifications. These configurations allow customers to easily adjust
the security and reliability of the fingerprint identification feature to meet their particular needs.
Omnicell’s biometric fingerprint system provides two functions: Identification and Verification.
The identification function compares and identifies one user out of many possible users. The
verification function makes sure a user is who they claim to be.
Verification, or authentication, is the process of determining the identity of a person and
confirming his or her authenticity. An authentication factor is a piece of information (such as a
password, User ID, or fingerprint) and the process used to verify the identity of a person. In order
for a User ID to qualify as an authentication factor, only the user can know it. The user ID should
be hard to obtain and not be displayed. A user ID may be entered via keyboard entry, magnetic
card, or bar code.
A weak user ID is one which can be easily guessed by another user, and therefore is not considered
a personally identifiable factor for authentication purposes. User names which follow a simple
pattern, such as first name plus the first two letters of the last name, fall into the weak category.
A strong user ID contains information that would be known to the user but not readily known or
available to other users. User names which include the last four digits of the user’s social security
number or random three-digit number assigned by the system would fall into the strong category.
Omnicell has identified three user authentication modes:
Single-factor (Touch & Go) authentication
Two-factor with fingerprint authentication
Two-factor with password authentication
Introduction to Touch & Go 1-3
User Authentication
Single-factor Authentication Mode
The single-factor authentication mode is secure and is the most convenient. It requires a
fingerprint only. This mode employs the use of the short list along with the recommended
configuration settings. A short list is a list of fingerprint users within a defined window of activity.
It is a subset of the total users in the database. The length of time that a user remains on a short list
is determined by user activity and configurable cabinet settings. After an initial user ID (with
fingerprint or password) is entered on each cabinet that is accessed daily, subsequent login actions
only require a fingerprint scan.
If a login fingerprint matches more than one user at or above the minimum quality threshold, the
system warns the user and does not allow access. These users may need to be re-registered with a
different finger or made exempt.
The two-factor with fingerprint authentication mode uses two pieces of information to verify
identity. It requires a strong user ID and fingerprint. After the user enters their user ID and their
fingerprint is scanned, the system brings up the user’s stored sample pattern. The system tries to
verify that the fingerprint samples match using a one-to-one comparison. It is the most secure
mode because no one can replicate or “hack” the user’s fingerprint image.
Two-factor with Password Authentication Mode
The two-factor with password authentication mode uses two pieces of information to verify
identity. It requires a strong user ID and password. It is more secure than single-factor.
Figure 1-3. Single- or Two-factor Authentication
Omnicell recommends the implementation of two-factor authentication. Nevertheless, it is the
customer who decides whether to implement single-factor or two-factor authentication. This
decision impacts the system’s overall speed, security, training requirements, and administrative
issues.
Fingerprint Registration
Fingerprint registration and login functions occur at the Color Touch cabinet. User access,
witness, and registration privileges are controlled within the individual user record by
OmniCenter®. Users can be required to attain a configurable, minimum fingerprint registration
quality before using fingerprint for login or witness. A user’s fingerprint verification can be used
for any login or witness process. Any transaction that requires a witness is supported by this
feature. Users only need to register fingerprints at one cabinet. The encrypted numeric fingerprint
code is sent to all appropriate cabinets via OmniCenter.
The initial fingerprint registration process requires two people—the registrar and the user being
registered. The biometric registration process is restricted to specific users designated as
registrars. The purpose of the registrar is to oversee the registration of others. Registrars are
encouraged to complete a comprehensive training prior to registering users. In order to initiate
registration, a valid registrar must log in first. Then the user is guided to scan a fingerprint to
create a database fingerprint signature.
The registration process involves getting a good scan of the finger’s core feature. The goal is to
place the core of the fingerprint so that it covers most, if not all, of the scanning window. It is
important to generate a high quality print but a good quality print is more than just the quality
score. The selected finger must be scanned four times and a successful scan is used as the criteria
for the required subsequent scans. If the first print is not centered on the core feature or doesn't
cover enough of the window, the user should start over.
The first fingerprint is the most important. The first print becomes the standard that the second
print needs to match, and so on. The most difficult print is the fourth print. The user needs to
achieve a print quality of 70 or higher if the minimum score was not reached on the first, second,
or third print. In addition, the fourth print must match the first three prints with a match score of
7 or higher. The system picks the print that has the highest combined match score to the other
three prints AND a quality score of at least 70. The system is not “averaging” or combining the
prints to come up with a registration model.
Note:
The quality score of 70 is the default setting of a configurable value.
Some users are more difficult to register than others. A fingerprint enhancer may be needed by
individuals with worn ridge detail or excessively dry hands. Do not use lotions or moisturizers.
Over time, residue builds up and clouds the sensor, making ti difficult to subsequent users. A
PreScan® PS 5 or PS 30 fingerprint enhancer pad can enhance ridge detail and improve fingerprint
capture.
Setup User Compliance
It is highly recommended that each PM/IS maintain a log of registered users and exempt users.
The log information should include user quality scores and whether a fingerprint enhancer was
required. This is helpful in tracing any user-specific issues.
System Requirements/Compatibility
The Touch & Go fingerprint scanning device can be installed on Color Touch cabinets running
Windows® XP and Omnicell 9000 software or higher.
Important: At a minimum, Windows XP is required at the cabinet and Windows 2000 is required at the
server. For full functionality of all Touch & Go features, Windows 2003 is required at the server and
Omnicell 14.0 is required at the cabinet.
The following are required to implement this feature:
OmniCenter running Microsoft Windows Server 2000 or higher, and Omnicell 9000 software
or higher.
Color Touch cabinets running Microsoft Windows XP and Color Touch 5.6 or higher.
A Touch & Go device installed and enabled on the cabinet.
The Touch & Go device can be ordered with or without a magnetic card or bar code reader. The
Touch & Go device contains the housing for a card reader on the left or right of the fingerprint
scanner. If ordered with a card reader, the applicable reader mechanism is installed in
manufacturing. Regardless, if the cabinet has an existing card reader, it is uninstalled and replaced
with the Touch & Go device.
More User Instructions
Complete registration instructions along with usage tips are provided in the Color Touch User
Guides:
Color Touch 5.10 User GuidePN 60-0139 Rev A
Color Touch 5.9.1 User Guide AddendumPN 60-0148 Rev-B
This chapter provides installation procedures that can be performed by a qualified Omnicell
representative. The procedures are for the following cabinet types:
Anesthesia Workstation (AWS)
Sure-Med
OmniRx/OmniTT/Half-Cell/Anesthesia TT™
OmniSupplier Color Touch
The Touch & Go fingerprint scanner can be installed by itself, with a magnetic card reader or with
a bar code card reader.
These procedures are based on installation to the following sleds by cabinet type:
Sure-Med: US Logic motherboard
Omnicell: ETX motherboard
Perform any necessary sled upgrades prior to installing the Touch & Go device.
The following sections address each cabinet type. Tools and parts are specified for a unique
retrofit. Refer to “Appendix A: Parts/Kit List” on page A-1 for kit listings by cabinet type.
Anesthesia Workstation (AWS)
The following instructions apply to Touch & Go device installation for Anesthesia Workstations.
The Touch & Go fingerprint scanner is attached to the side of the AWS keyboard. The cables are
routed through the keyboard bracket cutout and LCD bezel into the electronic sled.
6. Route the fingerprint scanner cable from the electronics sled, through the LCD bezel, to the
keyboard bracket cutout. (See Figure 2-9.) Allow eight inches of cable from the bracket cutout
to reach the reader unit.
Figure 2-9. Routing cables through keyboard bracket cutout
7. Re-connect the fingerprint scanner cable connector to the reader assembly and set the cable on
its support.
8. Route the other (mag card reader or bar code scanner) cable (if any) from the reader assembly
through the keyboard bracket cutout and LCD bezel into the electronics sled. (See
Figure 2-10.)
Figure 2-10. Routing cables through bezel into electronic sled
10. Route the fingerprint scanner cable through the front keyboard opening and the USB reader
cable through the back keyboard opening (if any). (See Figure 2-11.)
Figure 2-11. Routing cables through the keyboard openings
11. Secure the keyboard assembly to the keyboard bracket. Leave three screw holes open on the
right side (one in front, two in back) where the reader bracket is placed.
12. Secure the reader bracket to the keyboard bracket using three 6-32 x 3/8 flat head Torx screws.
(See Figure 2-4 on page 2-3).
13.Re-install the LCD bezel.
Electronic Sled Configuration
Note: Using the Y cable is only applicable for workstations that have a CD-ROM.
1. Connect the CD ROM power cable to the male end of the power adapter Y-cable (PN #42-
6002). (See Figure 2-12.)
Figure 2-12. Splitting the CD-ROM power for the fingerprint scanner
2-10 Installing the Touch & Go Fingerprint Scanner
Anesthesia Workstation (AWS)
6. Connect the USB connector for the mag card reader or bar code scanner (if any) into the USB
port. (See Figure 2-17.)
Note:
If connecting the fingerprint scanner to an EXT2 board, use the auxiliary USB ports (slots 3-6) on
the side of the board. Do not use the original right angle USB ports (slots 1-2) to avoid disconnection
problems.
Figure 2-17. Securing the magnetic card reader or bar code scanner cable connection
7. Remove the ESD wristband.
8. Replace the sled top. (See Figure 2-18.)
Figure 2-18. Completed Replacement
Final Procedures
1. Turn on the power switch in the back of the cabinet.
3. Log in to the cabinet (as Omnitech or other authorized User Type).
4. Proceed to “Setting Up Color Touch Cabinets” on page 6-1 to complete the installation.
Sure-Med
The following instructions apply to Touch & Go device installation for Sure-Med cabinets, using
manufacturing kit #14-1236 (fingerprint reader only), #14-1237 (with mag card reader) or #141238 (with bar code reader).
Tools Required
Installing the Touch & Go Fingerprint Scanner 2-11
Installing the Touch & Go Fingerprint Scanner 2-13
Note:
If a card reader is currently installed, perform Steps 3-5, then proceed to the appropriate
installation section (with or without a card reader). If there is no card reader, skip to Step 6.
3. Disconnect the card reader serial and power cables. (See Figure 2-21.)
Figure 2-21. Disconnecting an existing card reader’s serial cable
Sure-Med
4. Remove the screws securing the card reader to the cabinet lid (mounting schemes vary). (See