User manual GATEWAY 450RGH - Software Guide

Protector Suite QL Datasheet Protector Suite QL Datasheet Rev: <1.0.2> March 30, 2004 1/15 PS QL Datasheet Table of Contents 1 2 3 4 Introduction................................................................................................ 4 PS QL End Users .......................................................................................... 4 User interface.............................................................................................. 4 One Touch behavior..................................................................................... 5 4.1 4.2 5 6 Behavior in case of logged-off or locked computer........................................... 5 Behavior in case of logged-on computer ........................................................ 5 Features...................................................................................................... 6 Feature description...................................................................................... 8 6.1 Targeted for Windows OS ........................................................................... 8 6.2 Automatic hints, which will help user to understand the product and solve problems ......................................................................................................... 8 6.3 Tutorial teaching user how to use strip sensor ................................................ 8 6.4 Automatic user enrollment after new user logon ............................................. 8 6.5 One touch function to activate User Interface................................................. 9 6.6 User interface optionally controlled by movement of user's finger on the sensor ... 9 6.7 User can use sensor for simulation of mouse wheel ......................................... 9 6.8 Biometric user interface feedback is done by simple icons ................................ 9 6.9 Easy setup ............................................................................................... 9 6.10 Silent setup..........................................................................................10 6.11 Microsoft Installer support.......................................................................10 6.12 Configurable skins .................................................................................10 6.13 Biometrics support for Logon and Fast User Switching feature .......................10 6.14 Possibility to lock workstation by finger .....................................................10 6.15 Possibility to unlock workstation by finger..................................................10 6.16 Boot Security support.............................................................................10 6.17 Boot Security single sign-on ....................................................................10 6.18 Quick launch of single application using finger and biometric menu ................10 6.19 Password bank......................................................................................10 6.20 Registration replayed after finger verification..............................................10 6.21 Notification about registered window by notification box...............................10 6.22 Possibility to edit registrations .................................................................11 6.23 Possibility to see the password, which is stored in the registration..................11 6.24 Links to registered pages in menu to allow user to access the registered pages and replay the registrations by one simple click.....................................................11 6.25 Automatically offer registration of window with password field .......................11 6.26 Possibility to backup all registrations .........................................................11 6.27 Deactivate screensaver by finger..............................................................11 6.28 File folder "My Safe" in "My documents" folder will be encrypted ....................12 6.29 Access to "My Safe" can be locked/unlocked by a finger (from menu) .............12 6.30 My Safe can be resized ...........................................................................12 6.31 My Safe can be unlocked from standard Open/Save file dialogs .....................12 6.32 It is easy to access files in My Safe folder. .................................................12 6.33 Automatic installation of HW drivers during setup........................................12 6.34 USB Selective Suspend (Win XP) ..............................................................12 2/15 PS QL Datasheet 6.35 7 7.1 7.2 7.3 7.4 Ultra low power finger detect mode (Win XP)..............................................12 Introduction ............................................................................................13 Turning on TBX ........................................................................................13 User enrollment .......................................................................................13 Single sign on feature: one touch or swipe to access PC and log on to Windows ..14 TouchChip Bios eXtension (TBX) support in Protector Suite QL.................... 13 3/15 PS QL Datasheet Main Features One Touch access User Logon Fast User switching Protector Suite QL touch menu Encrypted Data storage Easy access to secure storage Security on shared PC environment Password Management Easy registration of password dialogs Multi browser support Exportable Password bank Pre-Boot support For TBX enabled Notebooks and Desktops pre-boot protection 1 Introduction Protector Suite QL is targeted to OEM customers that are looking for a complete biometric solution in the Notebook and Desktop market. The use is extremely easy and convenient to guarantee very low support cost and a strong user acceptance. 2 PS QL End Users This product is targeted mainly for isolated computers without central management and without Windows domain me mbership. The usage of the computer can have two variants. 1. One single user. This type of usage is focused on convenience. The Fingerprint replaces the password and the password bank manages the Web Page access. 2. Several people share the same computer. This type of usage needs convenience but also needs some security features. The Application lock, password bank, file encryption and Biometric fast user switching will be used. 3 User interface The PS QL is very user-friendly end easy to use. The main communication with the user is done by a GUI that pops up when the logged on user places his finger on the sensor. 4/15 PS QL Datasheet Figure 1: Bio menu in Aluminium and TouchChip skins To increase the acceptance by individuals this main menu can have a choice of multiple "skins". One of the skins is plain Windows XP standard-looking. The skins apply only to the main menu; the remaining UI (dialogs, wizards) have the standard Windows XP look. 4 One Touch behavior 4.1 · · · Behavior in case of logged-off or locked computer User will put his finger on the sensor If he has registered a finger then he is logged on If the computer is locked and the locked session belongs to a different user, then a new session is created (the previous one stays intact) and the active user is switched. 4.2 Behavior in case of logged-on computer User will put his finger on the sensor If the finger belongs to the currently logged-on user, the main menu on the screen is displayed from which the user can choose the desired action. The list of functions shown to the user depends on the current state of the computer (e.g. when registered password window is active, list of registrations for this window will be shown). · If the finger belongs to a different user then the workstation is switched to the session of that user. If the session does not exist yet, it is created. · · 5/15 PS QL Datasheet 5 Features Feature description1 General Features: Supported operating systems : Windows XP with or without FUS (Fast User Switching) Windows 2000 Windows Me/98 Automatic hints, which will help user to understand the product and solve problems Tutorial teaching user how to use strip sensor Automatic user enrollment after new user logon One touch/swipe function to activate User Interface User interface optionally controlled by movement of user's finger on the sensor User can use sensor for simulation of a mouse wheel Biometric user interface feedback done by simple icons Easy setup Silent setup Microsoft Installer support Maximum number of enrolled biometric samples per user Menu with multiple skins (predefined skins) Convenience features: Biometrics support for Logon and Fast User Switching Switch user when different user puts his finger on the sensor Lock workstation by finger Unlock workstation by a finger Biometric Boot Security (TBX) support Biometric Boot Security (TBX) single sign-on Quick launch of single application using finger and biometric menu Password bank Registration replayed after finger verification Notification about registered window by notification box Possibility to edit registrations Possibility to see the password, which is stored in the registration (FP authentication needed) Links to registered WWW pages in the menu to allow user to access the registered pages and replay the registrations by one simple click Automatically offer registration of window with password field Possibility to backup all registrations Possibility to use one registration in biomenu as top action (instead of Lock computer) Deactivate screensaver by finger 1 n n n n n n n n n n n n n 10 n n n n n n n n n n n n n n n n n n For detailed description see section 6. 6/15 PS QL Datasheet Security features: User's data encryption File folder "My Safe" in "My documents" folder will be encrypted. Access to "My Safe" can be locked/unlocked by a finger (from menu) My Safe can be resized My Safe can be unlocked from standard Open/Save file dialogs Fingerprint Reader support Automatic installation of HW drivers during setup USB Selective Suspend (Win XP only) Ultra low power finger detect mode (Win XP only) n n n n n n n n n 7/15 PS QL Datasheet 6 Feature description 6.1 Targeted for Windows OS The PS QL will work with the following OS: · Windows XP · Windows 2000 · Windows Me and 98. The most suitable environment is Windows XP with Fast User Switching feature turned on, where users can benefit from the Fast User Switching features of PS QL. 6.2 Automatic hints, which will help user to understand the product and solve problems When some problem occurs (e.g. reader is not connected) a hint will be shown. The hints will be shown using Windows XP "balloon" windows above the icon tray in taskbar. User need not react to hints, they will automatically disappear after a while or when the situation changes. 6.3 Tutorial teaching user how to use strip sensor In the version supporting strip sensor user can go through tutorial which will help him to use the strip sensor properly. The tutorial is started during the first enrollment but the user can access the tutorial also later from Start Menu. Figure 2: Tutorial helps users to learn how to use the fingerprint sensor properly 6.4 Automatic user enrollment after new user logon When user logons using FUS and there is no finger associated with this user then the user will be prompted to enroll after logon. When a user that is not yet enrolled puts finger on the sensor (or swipes) the welcome screen with possibility to enroll is shown. 8/15 PS QL Datasheet Figure 3: Protector Suite QL Welcome screen with "Enroll Now" button 6.5 One touch function to activate User Interface If the user is logged on to the computer, user just has to place/swipe his finger on the sensor to invoke the main Protector Suite QL menu. User interface optionally controlled by movement of user's finger on the sensor The user interface can be controlled by a mouse or by movement of user's finger on the sensor. The user can move in the menu up and down by his finger and can also choose an item in the menu by "tapping" ("clicking") on the sensor. 6.7 User can use sensor for simulation of mouse wheel By pressing the Scroll Lock key, user can switch PS QL to mode when moving finger on the sensor simulates rotating the mouse wheel and so he can use the sensor for scrolling in any application. 6.8 Biometric user interface feedback is done by simple icons When user puts finger on the sensor so well that it is immediately recognized, then there will not be any interface showing the finger. If the user should change position of the finger a simple icon will be shown on the screen. The window will disappear automatically after timeout. 6.9 Easy setup The installation is as simple as possible. No optional components or unnecessary dialogs. 6.6 9/15 PS QL Datasheet 6.10 Silent setup A silent setup mode is supported. This allows remote or unattended installation, e.g. using Microsoft SMS server. 6.11 Microsoft Installer support The setup uses the Microsoft Installer technology and therefore supports all Microsoft Installer features. 6.12 Configurable s kins To increase the future coolness factor it is possible to change the look of the main user interface. Multiple skin choices are available in the product, including a "TouchChip look" and "XP look" skin. (see Figure 1 on page 5 for skin examples) 6.13 Biometrics support for Logon and Fast User Switching feature User logon to Windows or user switching can be done with fingerprint. 6.14 Possibility to lock workstation by finger When logged-on user puts his finger on the sensor a Protector Suite QL menu is shown. This menu offers an option "Lock workstation" which can be used to lock the workstation. 6.15 Possibility to unlock workstation by finger When the workstation is locked the user can use his finger to unlock it. 6.16 Boot Security support Support for notebooks with biometric boot protection (TBX ­ TouchChip BIOS eXtension). TBX enrollment can be performed through PS QL. There is a single unified administration for both PS QL and TBX. Refer to Chapter 7 on page 13 for details on TBX. 6.17 Boot Security single sign-on This optional feature allows the user to pass through both the Boot Security and the Windows Logon by a single touch/swipe of a finger. 6.18 Quick launch of single application using finger and biometric menu User can choose application, which will be assigned to the first option in the biometric menu (instead of Lock workstation). This application is then easily accessible. 6.19 Password bank Password bank holds user's passwords to Internet and local applications. 6.20 Registration replayed after finger verification To replay the registration user must be successfully verified. Replaying of a registration is triggered by a finger, not automatically when a dialog appears. 6.21 Notification about registered window by notification box When a window, which is registered in the Password bank, is shown on the screen then the window's frame is highlighted and optional balloon info will be shown which will tell the user that this window has some registration. The user then can replay this registration by putting his finger on the sensor. 10/15 PS QL Datasheet 6.22 Possibility to edit registrations User can edit the registration data (like the username or password) for each registration. The user can change parts of the registration without the need to re-register the window. 6.23 Possibility to see the password, which is stored in the registration The passwords stored in the registration are not shown by default but the user can make them visible during editing. 6.24 Links to registered pages in menu to allow user to access the registered pages and replay the registrations by one simple clic k The web pages, which are registered by the user, will be listed in a submenu of the main control menu. When user selects such a registration the web browser will be started with the selected web page. The registration will be then replayed automatically. Figure 4: Replaying a registration using links in Bio Menu 6.25 Automatically offer registration of window with password field When a window with password field will pop up a balloon window is shown reminding the user that he can save this window to password bank. It is possible to turn off this feature. 6.26 Possibility to backup all registrations User can export and import registrations. 6.27 Deactivate screensaver by finger When the screensaver is active and user will put finger on the sensor then the screensaver will be terminated (like when mouse is moved). 11/15 PS QL Datasheet 6.28 File folder "My Safe" in "My documents" folder will be encrypted Everything stored in this special folder is on-line encrypted. User does not need to care about choosing files to encrypt ­ just store the file in this folder. The user also does not need to remember to re-encrypt the file after usage. 6.29 Access to "My Safe" can be locked/unlocked by a finger (from menu) The safe can be manually locked or unlocked by a finger; this action is accessible from the main control menu. 6.30 My Safe can be resized It is possible to change the size of the My Safe folder using My Safe options. 6.31 My Safe can be unlocked from standard Open/Save file dialogs 6.32 It is easy to access files in My Safe folder. When a user browses to the folder in Explorer or Open/Save file dialog and the folder is locked, the user is automatically prompted to put/swipe his finger, and then can enter the folder. 6.33 Automatic installation of HW drivers during setup During software installation, all necessary drivers for the hardware are installed. Detection/activation of the hardware with hints what to do is done by the application later. 6.34 USB Selective Suspend (Win XP) Drivers for TouchStrip strip sensor support the USB selective suspend feature to minimize power consumption. 6.35 Ultra low power finger detect mode (Win XP) Drivers for strip sensor use a combination of USB selective suspend and USB remote wakeup features to implement an ultra low power finger detect. When PS QL is waiting for a touch/swipe of a finger, the strip sensor can operate in USB suspended mode and draw less than 1 mA current. 12/15 PS QL Datasheet 7 TouchChip Bios eXtension (TBX) support in Protector Suite QL 7.1 Introduction TBX technology allows to protect computer from boot and subsequent usage by an unauthorized user. TBX BIOS level protection by fingerprint authentication is optional ­ it can be enabled or disabled using manually by changing a setting in PS QL, or it can be turned on automatically by PS QL (see below). Figure 5: TBX technology requires fingerprint authentication before computer is allowed to boot 7.2 Turning on TBX When any user runs the Enrollment Wizard for the first time while TBX technology is switched off, then upon a succesful completion of finger enrollment, the user is prompted if he wants to enable the TBX. If the user declines, he is informed that TBX can turned on any time later using the Settings dialog. The configuration of TBX is located in the Settings dialog which can be started from biomenu after user's finger is verified. The settings page for TBX contains these options: 1 Turn TBX on/off 2 Turn on/off auto logon after TBX verification. 3 Change the TBX backup password (anybody can change it without the knowledge of the previous password) 7.3 User enrollment 13/15 PS QL Datasheet PS QL software represents the only means to enroll and administer fingerprints for fingerprint BIOS level protection (TBX). When a user edits his enrolled fingers (adds or deletes templates) in PS QL, the change is automatically uploaded also to the TBX memory. Please note that every user can edit only his fingers; user cannot influence the TBX storage of fingers of other users. For security reasons, PS QL remembers the last finger database it stored in the TBX memory and is capable of detecting any unauthorized changes in it. Fingerprint templates used for TBX are stored directly in the strip sensor module (henceforward "TBX memory") to achieve higher security. 7.4 Single sign on feature: one touch or swipe to access PC and log on to Windows Fingerprint used for TBX authentication can be used for automatic log on to the operating system via PS QL. This single sign on feature is optional, and can be activated or deactivated in the PS QL settings. 14/15 PS QL Datasheet Information furnished is believed to be accurate and reliable. However, Upek, Inc assumes no responsibility for the consequences of use of such information not for any infringement of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of Upek, Inc. Specifications mentioned in this publication are subject to change without notice. This publication s upersedes and replaces all information previously supplied. Upek, Inc's products are not authorized for use as critical components in life support devices or systems without express written approval of Upek, Inc. The Upek logo is a registered trademark of Upek, Inc. TouchChip, Protector Suite and Protector Suite QL are trademarks or registered trademarks of Upek, Inc . All other products described in this publication are trademarks of their respective holders and should be treated as such. © 2004 Upek, Inc - All Rights Reserved Upek, Inc. http://www.upek.com 15/15