PreCise Biometrics 100 A User Manual

User’s Guide

for Precise 100 A

Precise 100 Logon 2.1

Windows NT/2000

Fingerprint Identification System

Precise 100 A

Notice

Electromagnetic Compatibility (EMC) Notices

For Europe:

This digital equipment fulfils the requirements for radiated emission according to limit
B of EN55022: 1994 and the requirements for immunity according to EN55024:
1998 residential, commercial and light industry.

For the U.S.A.: FCC

For Precise 100 SC reader:

This device complies with part 15 of the FCC Rules. Operation is subject to the
following two conditions: 1) This device may not cause harmful interference, and

2) this device must accept any interference received, including interference that may
cause undesired operation.

For Precise 100 A reader:

This device complies with part 15, subpart B, class B of the FCC Rules demonstrated
by compliance with EN55022: 1994, class B. Operation is subject to the following
two conditions: 1) This device may not cause harmful interference, and 2) this device
must accept any interference received, including interference that may cause undesired
operation.

The information in this user’s manual is protected by copyright and may not be repro­duced in any form without written consent from Precise Biometrics. The information in
this user’s manual is subject to change without notice.

Precise Biometrics shall not be liable for any technical or editorial errors herein, nor for
incidental or consequential damages resulting from the use of this book.

This user’s guide is published by Precise Biometrics, without any warranty.
The Precise 100 Logon 2.1 software is protected by copyright of Precise Biometrics.

© Precise Biometrics AB, 2001
[e-mail]
www.precisebiometrics.com
Phone [phone]
Fax [phone]
Address: Dag Hammarskjölds v 2

SE-224 64 Lund
Sweden

All rights reserved. Third Edition April 2001
P/N: AM010005 R3B

2

3

Content

Chapter 1

Introduction 5

What’s New in Precise Logon 2.1 5
Precise 100 A – the Fingerprint Reader 6
Why Use Fingerprint Technology? 7
About Precise 100 Family 8

Possible configuration 8

Icons and Conventions 9

Chapter 2

Installation 10

Minimum System Requirements 11
Preparing Installation 12
Setting the Parallel Port 12
Connecting the Fingerprint Reader to the Computer 13
Installing the Fingerprint Identification Software 14

Installing the Precise 100 Logon 2.1 Software 15
Precise Demo 16
Port Configuration 17

Attaching the Fingerprint Reader 18

Replacing the Adhesive Tape 18

Chapter 3

Using the Fingerprint Reader 19

Placing Your Finger Correctly on the Fingerprint Reader 20

Correct Finger Placement 20
Fingerprint Reader Maintenance 25

Chapter 4

Personal Enrolment
– Administrating Your Own User Account 26

Administrating Your Own User Account 26
Biometric and Non-Biometric Users 26
Enrolment via the Windows Security Screen 27

4

Chapter 5
NOTE: Chapter 5 is for administrators. Users without administrator rights do not have access to the BioManager.

The BioManager for Domains 32

Introduction to BioManager for Domains 33

Biometric and Non-Biometric Users 33
Accessing the BioManager 34
Changing Domain 34
About Primary Logon Fingers 35

About Passwords 35

Auto-generated Passwords 36

About the Security Level 37

Setting the Security Level 38
Passwords and Security Level 38

Fingerprint Registration 39

Beginning Fingerprint Registration of a New User 39
Beginning Fingerprint Registration of an Existing User 41
Continue Fingerprint Registration 42

Checking and Changing a User’s Properties 45
Deleting a User 46

Chapter 6

Logging on 47

Logging on with Fingerprint 48
Logging on with a Password 50

Chapter 7

Locking and Unlocking 51

Locking a Workstation 52
Unlocking a Workstation 53

Unlocking with Fingerprint 53
Unlocking with a Password 54

Chapter 8

Troubleshooting 55

Password Troubleshooting 56

Chapter 9

Uninstalling 57

Uninstalling the Precise 100 Logon 2.1 Software on Windows NT 57
Uninstalling the Precise 100 Logon 2.1 Software on Windows 2000 58
Uninstalling the Precise 100 Parallel Drivers 58

Glossary 59

5

Chapter 1

Congratulations on selecting Precise Biometrics’ Fingerprint Identification System! Using
your fingerprint for identification is an easy and secure way to prove your identity. Please
read this chapter before you install and use the system.

This chapter includes the following information:

• What’s new in Precise Logon 2.1

• The fingerprint reader

• The fingerprint identification process

• Why use fingerprint technology?

• The Precise 100 family

• Icons and conventions

What’s New
in Precise Logon 2.1

Three new main features are introduced with the Precise 100 Logon 2.1 software:

1. To enable biometric logon to a network, the installation of Precise 100 Logon

2.1 software is only needed on the client PCs. There is no need for any

additional software installation on the domain server.

2. The domain administrator has the possibility to remotely administrate user accounts
on the domain server by using the BioManager for Domains application, i.e.
administration can be done from any workstation in the network having the Precise
100 Logon 2.1 installed. The BioManager for Domains application is included in
the Precise 100 Logon 2.1 software.

3. The user has the possibility to remotely (i.e. from his own PC) enrol and re-enrol
fingerprints, changing primary logon finger etc. for his own user account, called
personal enrolment.

Introduction

Chapter 1 Introduction

Precise 100 A

The Fingerprint Reader

The fingerprint reader includes a sensor for reading fingerprints. When you place your
finger on the fingerprint reader, the part of the finger that touches the sensor is read. The
sensor measures the capacitance in the finger pad, which reveals the pattern of the
fingerprint. Thus, a paper copy with a picture of a fingerprint can not grant access to the
system.

The Precise 100 A fingerprint reader

The Fingerprint Identification Process

When logging into a system, your fingerprint is compared to a fingerprint template, i.e. a
data file containing information about the fingerprint, stored on a hard disk.

The fingerprint template is a set of characteristics which are unique for one specific finger­print and not an image of your fingerprint. Your actual fingerprints cannot be recreated
using the data from the fingerprint template.

If your fingerprint matches the fingerprint template, the system will grant you access. If the
match is not successful, the system will deny access. It takes less than one second for the
system to compare a read fingerprint with the information in the database. All information
sent between the fingerprint reader and computer is encrypted for maximum security.

At logon, you simply enter your username and place your finger on the fingerprint reader
to log into the system!

Chapter 1 Introduction6

7

Why Use Fingerprint
Technology?

In modern society, there is a vast need for secure identification, for instance when log­ging into computer network. An unauthorised person who obtains access to computer
files constitutes a major risk to many companies. In order to prevent unauthorised access,
network users have previously identified themselves with a password entered together
with the username when logging into a network.

The disadvantages of passwords:

• Unreliable identification. An unauthorised person who knows your password

can easily access your user account.

• A complicated system. In order to increase security, users are regularly asked to

change their passwords. This makes it difficult to remember a password.

• Users forget their passwords, this increase the administration workload.

• Users write down their passwords on notes and store them close to their

applications. This can be a serious security hazard.

The advantages of fingerprint identification:

• Secure identification. By identifying yourself with your fingerprint, you use a

unique “key” to access your user account. All your fingerprints are unique –
no person has identical fingerprints.

• Simplicity. It is simple to use fingerprints for identification. You do not have

to worry about changing or memorising passwords anymore
– your fingerprint provides secure identification, year after year.

Simply put, with Precise 100 A, you are identified by who you are,
not by what you know!

Chapter 1 Introduction

8

About the Precise 100 Family

Precise 100 A Logon – For Windows NT/2000, local or in an NT domain. Fingerprint
data is stored on the local hard drive, or server hard drive. For logon to local accounts
and/or domain server accounts.

Precise 100 SC Logon – For Windows NT/2000, local or in an NT domain. For maxi­mum security, fingerprint data can be stored on smart cards, as well as on the local hard
drive. For logon to local accounts and/or domain server accounts.

Precise 100 SC SDK – Precise Biometrics’ Software Development Kit, for OEM-customers
and system integrators who want to integrate Precise Biometrics’ software and hardware
into their own system. It contains documentation, tools, API, and examples.

Possible configuration

Chapter 1 Introduction

Windows NT 4.0
Domain server

With Precise 100
SC and the Precise
100 Logon 2.1
software installed,
users can log on to
local accounts
and/or domain
server accounts. For
maximum security,
fingerprint data can
be saved on smart
cards.

Local workstation,
with Precise 100 SC
installed

Local workstation,
with Precise 100 A
installed

With the Precise 100
Logon 2.1 software an
administrator can admin­istrate all users from any
workstation, without the
need for additional
server software.

9

Icons and Conventions

• Key names on the keyboard appear in italics, for example

Caps Lock, Ctrl, Enter.

• Names of fields, text boxes and buttons appear in bold type, for example

Username, User, OK.

• Keys that you should press and hold down together appear as the key

names and the plus (+) sign, for example Ctrl + Alt + Delete.

• An arrow is used to separate icons or menu options that should be selected

in succession, for example Start > Settings > Control Panel.

Chapter 1 Introduction

10

Chapter 2

The installation consists of two parts. Start by following the instructions in the Preparing
Installation section. Then continue with the Installing the Fingerprint Identification Software
section.

NOTE: If you are using a Precise 100 A with parallel port connector, it is very important
that the parallel port of the PC is set to ECP mode before using the fingerprint reader.
Otherwise, the fingerprint reader will not function properly. See Setting the Parallel Port in
this chapter.

This chapter includes the following information:

• Minimum system requirements

• Preparing installation

• Setting the parallel port

• Connecting the fingerprint reader

• Installing the fingerprint identification software

• Attaching the fingerprint reader

NOTE: In order to log into your domain server account using your fingerprint:

• the Precise 100 A must be installed on your workstation

• your fingerprints must be registered on the domain server by a domain server

administrator using the Biomanager for Domains or by Personal Enrolment.

Installation

Chapter 2 Installation

11

Minimum System Requirements

In order to install the software included on the enclosed CD-ROM, your computer must
meet the following system requirements:

• PC with 200 MHz Pentium processor or equivalent

• 10 MB hard disk space available

• USB port or Parallel port with ECP support and PS/2 keyboard/mouse port

NOTE: If you wish to connect the Precise 100 A PAR reader to a secondary parallel port,
this port has to be on the ISA-bus and not the PCI-bus.

• One of the following operating systems:

1. Windows NT 4 Workstation with Service Pack 6

2. Windows NT 4 Server with Service Pack 6

3. Windows 2000 Professional

• Mouse or compatible pointing device

• CD-ROM drive (unless you are installing the software from a network)

• VGA resolution graphics card or higher

NOTE: To logon to a domain server using Precise 100 Logon 2.1, the server must be
running Windows NT 4.0 Server operating system with Service Pack 6.

Chapter 2 Installation

12

Preparing Installation

The Precise 100 A fingerprint reader comes in two versions: Precise 100 A PAR and
Precise 100 A USB. The Precise 100 A PAR communicates with the computer through the
computer’s parallel port, and the keyboard port or mouse port is used to power the
fingerprint reader. The Precise 100 A USB communicates with the computer through the
computer’s USB port and does not need additional power.

In the following a picture of a parallel connector indicates a section
relevant only to Precise 100 A PAR readers while a picture of a USB
connector indicates a section relevant only to Precise 100 A USB
readers.

If you are a using a Precise 100 A USB reader you should skip the following two sec­tions and continue with the Installing the Fingerprint Identification Software section. How­ever, if you are using a Precise 100 A PAR reader, follow the instruction below prior to
starting the installation.

Setting the Parallel Port

Before connecting the fingerprint reader, ensure that the parallel port is set to ECP mode.
It is very important that the parallel port is set to ECP mode before using the fingerprint
reader. Otherwise, the fingerprint reader will not function properly. If you do not know
whether your computer is in ECP mode (most new computers are), please see the
computer manual for additional information, or follow the instructions below.

1. Access the system setup utility. On most computers, this is done by pressing the

F1, F10, Delete or Esc key during system booting – i.e. immediately after the
power switch on your computer has been turned on. Keep pressing the key until
the system setup, sometimes called the BIOS, appears.

2. Find the parallel port mode. Set the port mode to ECP (sometimes called

Flexible mode). If you are unable to find the port mode, your computer is
probably already in ECP mode.

3. Save your changes and exit the system setup utility. If you have problems with

the ECP settings, please contact your computer retailer.

Chapter 2 Installation

Parallel

USB

Chapter 2 Installation

13

Connecting the Fingerprint Reader to the
Computer

1. Make sure that the parallel port is set to ECP mode.

2. Turn off the computer.

3. Connect the fingerprint reader to the parallel port at the back of the computer

by using the connector. Make sure that the connector is secured, so that it can
not be disconnected by mistake.

4. Unplug the keyboard/mouse PS/2 connector from the keyboard or mouse

port at the back of the computer. Plug the pass-through PS/2 connector from the
fingerprint reader into the keyboard/mouse port instead.

Chapter 2 Installation

parallel port connector

fingerprint reader
Precise 100 A

pass through
PS/2 connector

14

5. Connect the keyboard/mouse PS/2 connector to the pass-through PS/2

connector.

6. Power on the computer.

Continue with the next step – Installing the Fingerprint Identification Software.

Installing the Fingerprint
Identification Software

NOTE: Only users with administrator rights can install the software.

The fingerprint identification software, Precise 100 Logon 2.1, is needed to read your fin­gerprints and to save and retrieve information about your fingerprints, accessible
domains, etc.

During installation you may be instructed to restart your computer before continuing to the
next step in the installation procedure. If the Master Setup screen does not appear auto­matically after restart, start the CD from your desktop by double-clicking My Computer >

CD > MasterSetup.exe icon.

NOTE: Once the software is installed, you will be able to register fingerprints using the

BioManager for Domains (see The BioManager for Domains chapter for details) and store
them locally if you log on as administrator on your local workstation. However, that will
not grant access to domain server accounts. To be able to log into a domain server
account using your fingerprint, your fingerprint will have to be registered and stored on
the domain server.

When the fingerprint identification software is installed on your local computer, you can
use Personal Enrolment to register your fingerprints on the domain server. See the Personal
Enrolment chapter for details.

Chapter 2 InstallationChapter 2 Installation

15

Installing the Precise 100 Logon 2.1 Software

NOTE: If you have a previous release of Precise Biometrics fingerprint identification soft­ware installed on your computer, please do the following before you install the Precise
100 Logon 2.1 software: 1) Make sure you have a backup password (see the chapter
BioManager). 2) To uninstall the old software, read carefully the chapter Uninstalling in
your Precise Biometrics manual and follow the instructions.

NOTE: After installation, the computer has to be restarted before you can use the software.

1. Log into your local computer as administrator. It is strongly recommended that all
Windows programs are closed and no disk is in the disk driver.

2. Insert the enclosed Precise 100 Logon 2.1 software CD into your computer’s
CD-ROM drive. The Master Setup screen appears.

Master Setup screen

NOTE: If the CD does not start automatically, start the CD by clicking Start > Run.
Enter D:\MasterSetup.exe, where “D” is the name of your CD drive. Click OK.

3a. If you have a Precise 100 A USB reader, connect the fingerprint reader to

your computer. Windows 2000 will detect the new hardware and install
the necessary drivers from the CD.

3b. If you have Precise 100 A PAR reader, click the Parallel Driver button to

install the necessary parallel port drivers.

Chapter 2 Installation

16

4. If you are using Windows NT you must install the updated Microsoft Smart

Card Base Components, if not previously installed. Do not install the Smart
Card Base Components if you are using Windows 2000, the system may crash.

To install the Smart Card Base Components

a) Click the SC Base Components button, a submenu appears.
b) Click the Base Components button in the submenu. You don’t need to

reboot your computer after this step if you continue directly with the
next step.

c) Click the Update button in the submenu and follow the instructions.

5. To install the Precise 100 Logon 2.1 software, click the Precise Logon 100 2.1

button and follow the instructions.

The software will guide you through the installation. Use the Back and Next buttons to
navigate through the screens.

6. Click Finish to complete the installation. The computer has to be restarted

after the installation is completed. Remove the software CD from the CD-ROM
drive before restarting the computer.

The software is now installed on your hard drive.

7. When the fingerprint identification software is installed on your local computer,
you can use Personal Enrolment to register your fingerprints on the domain
server. See the Personal Enrolment chapter for details.

Precise Demo

It is recommended that you practice registering and verifying fingerprints for a few
minutes using the Precise Demo. This will help you to practice finger positioning which
will make it easier to log on using the fingerprint reader. When you are using the Demo,
none of your operations will affect your system.

Start the Precise Demo by clicking Start > Programs > Precise Biometrics > Demo.

Chapter 2 Installation

17

Port Configuration

If you are using Windows NT (only) and your system is equipped with multiple parallel
ports, you can specify which parallel port the fingerprint reader is connected to. This is
done in the Precise Biometrics Registry Settings. In the rare case you should experience
compatibility problems with other software, you may also need to turn interrupts on or off.

1. Click Start > Settings > Control Panel. The Control Panel screen appears.

2. Double-click on the Precise Biometrics logo. The Precise Biometrics Registry
Settings screen appears.

3. Make the desired changes and click OK.

Chapter 2 Installation

18

Attaching the Fingerprint Reader

If preferable, the fingerprint reader can be attached to, for example the side of your mon­itor. Simply use the adhesive tape at the back of the fingerprint reader. The adhesive tape
is very durable and will keep the fingerprint reader attached for many years. The finger­print reader can be removed and attached again. If the adhesive tape loses its stickiness,
replace it with one of the enclosed adhesive tapes.

Before attaching the fingerprint reader, make sure that it will be comfortable for you to
use the fingerprint reader in its new place. Try some different positions to find out which is
the best before removing the adhesive tape cover strip. If you are right-handed, the right
side of your monitor will probably work best, and vice versa.

1. Make sure the surface on which you want to attach the fingerprint reader is
perfectly clean.

2. Remove the cover strip from the adhesive tape at the back of the fingerprint
reader.

3. Attach the fingerprint reader by pressing it to the surface.

Replacing the Adhesive Tape

If the adhesive tape has lost its stickiness, use the enclosed adhesive tapes. The enclosed
adhesive tapes have a cover strip on both sides.

1. Remove the old tape from the fingerprint reader before attaching the new
adhesive tape.

2. Remove one cover strip from the new tape and press the sticky side to the
fingerprint reader.

3. Finally remove the remaining cover strip and attach the fingerprint reader to the
desired surface.

Chapter 2 Installation

19

Chapter 3

As with most new technology, it might take some training to feel at home logging on
using your fingerprint. When you log on and verify your fingerprint, it is important that
you place your finger on the fingerprint reader in a proper way. The following chapter
contains some examples of good and bad ways of placing your finger on the fingerprint
reader.

It is highly recommended that you practice by using the Precise Demo for a few minutes
(see Precise Demo in the previous chapter for details).

This chapter includes the following information:

• Placing your finger correctly on the fingerprint reader

• Fingerprint reader maintenance

Using the
Fingerprint
Reader

Chapter 3 Using the Fingerprint Reader