Data sheet

Page 1

BioGate The only Identity SwitchTM Unifying identity systems to create the foundation for a secure but flexible digital future

The world of identification is increasingly being challenged to

improve efficiency and accuracy while accommodating a

steady stream of new application, channels and technologies.

Many organizations have found it quite difficult or even

impossible to extend their identification systems to new initiatives

and have lost competitiveness trying to develop new or upgrade

legacy systems. Customers on the other hand expect the

greatest freedom with full protection of their personal information

whilst staying in control of their identity profiles.

It’s time for a new approach. It’s time to benefit from a system

that can function as the core-processing platform for every type

of identity transaction servicing every type of delivery channel.

Enterprise identification As the world’s first Identity SwitchTM, BioGate is an integrated platform to acquire,

authenticate, profile, route, switch and authorize identity based transactions across

multiple channels. BioGate provides a full range of functionality to support identity

transactions — both traditional (on the biometric terminal), mainstream transactions

(real-time at the central biometric store), as well as mobile and ecommerce transactions.

BioGate represents the next-generation authentication platforms. It is the culmination of

more than 15 years of experience in developing and integrating biometric solutions

across various sectors, leveraging the input of many customers and meeting the

demands of millions of individuals.

With BioGate, Ideco brings the best in functionality and fundamentals to a secure but

open systems environment with a unique enterprize architecture that enables

organizations to increase profitability, enhance customer service and improve flexibility in

an increasingly agile environment.

Data sheet

Page 2

Benefits As countries make the transition to biometric identification, organizations require a

solution that can be effectively deployed to meet their immediate mandates with a

growth path that will meet all future requirements.

IncreasedProfitabilityBioGate improves the cost efficiency of identity processing by allowing a common set of

identity transactions to support multiple channels and transaction types. This eliminates

the cost and complexity of consolidating or integrating disparate systems while providing

a single point of integration to future systems.

Through the use of modern integration protocols, BioGate enables organizations to

securely add new services for new delivery channels without disrupting existing

operations.

EnhancedcustomerserviceBioGate integrates real-time data from multiple sources to allow for a more

comprehensive view of each customer. This allows organizations to better manage

identity risk and personalize services with availability 24 hours a day.

BioGate provides continuous operation through a combination of application- and

platform-specific features. High performance, high availability and scalability are key to

our solutions. BioGate has demonstrated the capability of processing in excess of 2,400

transactions per second on a variety of platforms.

ImproveflexibilityOrganizations are under continual pressure to adapt to market demands and

technology changes. Too often, outdated processing systems can impede time-to-

market by requiring costly updates to support new transaction types, delivery channels or

business rules. With BioGate, organizations can leverage support for leading biometric

modalities, technologies, channels and host systems.

BioGate is engineered for scalability, accommodating growth in transaction volumes.

Rapid deployment of new functionality ensures speedy time-to-market and provides

feature-rich solutions that customers can trust.

ImprovedcustomerloyaltyBioGate helps ensure consistency of service levels and information across multiple

customer touch points. The application takes advantage of the best hardware platforms

for security, reliability and availability.

Organisations can tailor identification transactions by application type, channel type or

customer type, providing more personalized services to the end user. For example, a low

value financial transaction may require less stringent authentication criteria whilst issuing

a firearm license would consider multimodal authentication including other aspects such

as customer ratings — and approve the transaction accordingly. The result is higher

customer satisfaction and more profitable customer relationships.

ReduceriskWith BioGate, identity transactions are authorised based on profile information from a

variety of sources across multiple platforms. Add to that the ability to tailor authorization

parameters by customer type, and the system provides strong risk management

capabilities for fraudulent transactions, potential identity fraud and the risk profile of

customers.

“Citizens can enjoy the greatest freedom with full protection of their personal information”

Data sheet

Page 3

Data security is another important aspect of risk reduction in the identity environment.

BioGate offers a number of security layers and protections to biometric data, including

strong encryption methods and tokenization.

Product overview At the heart of any authentication process is an identity engine — one that must acquire,

profile, switch, route and authorize the transaction based on a variety of information.

BioGate is a powerful, resilient and scalable identity engine.

Multi-modal,multi-channel,multi-applicationsupportWherever the customer transaction originates from - voting stations, points of sale, mobile

devices or the internet - the core switching and routing features of BioGate will securely

acquire the identity transaction detail, route, switch and process it for real-time identity

clearing.

IdentityprofilingWhen using BioGate for identity profiling, a vast variety of information sources are

seamlessly and cost-effectively integrated to build a holistic profile of the identity at stake.

This may include multiple biometrics modalities to accommodate all the possible

identification methods at various customer touch points.

In addition, BioGate also manages the complete life cycle of the identity including

acquiring, issuing, activation and revoking with full management and reporting in every

stage of the profile.

UnifyinglegacysystemsBioGate allows organizations to centralize customer information to support the

issuance and acceptance of identity profiles. BioGate will also act as a multi-institution,

independent switch providing segmented services to a variety of transaction types,

removing the complexities and risks associated with maintaining various identity systems.

FullrangeofdevicesupportThe open system integration layer of BioGate allows for full supports of all biometric

modalities and systems giving flexibility in the choice of identification method to be use in

a specific instance. The message protocols ensure full control and easy maintenance of

these deices.

Support is also available to a full range of connections to organizational, national and

international identity schemes and host systems. As part of the product support program,

network interfaces are also kept up to date with system mandates and regulatory

development.

AfeaturerichswitchBioGate provides all the tools necessary to manage various programs. BioGate provides

tools to manage citizen registers throughout their full lifecycle, voter rolls, social benefit

programs, licensing programs, e-documents and much more. The solution allows

organisations to issue digital tokens with predefined or custom values.

The flexible underlying product architecture allows new functions to be easily added to

the system. Where specific needs are not met by configuration options, new transaction

types, channels, technology and host connections can be added without disrupting

existing services.

Data sheet

Page 4

IdentityclearingBioGate manages multiple concurrent programs for a single organization, allowing

maximum flexibility in the way identification is processed on an account or identity profile

level. It allows a variety of channels to request identity clearing at the customer touch

points, and allow their identification transaction to be reflected in available programs. All

customer identification transactions are stored encrypted in the database for maximum

protection.

MitigatingfraudThe real-time nature of the identity engine is designed to monitor transaction risk and

potential fraudulent activities. BioGate can help identify fraud and abuse at the

customer touch points, before they become liabilities and reduce profits. Through its

systematic approach to handling identity transactions, organisations can maintain

consistent and accurate identity clearing policies across multiple channels.

AuthorisationflexibilityAs an online Identity SwitchTM, government agencies, service providers or even

merchants can extend their existing services to include secure identity processing

through interoperability with BioGate, offering a complete solution with zero risk of identity

fraud. Acquiring identification at customer touch points requires simple integration and

BioGate will retrieve, encrypt, route, process and return either an approval or a decline

notice.

SecurecryptographicprocessingBioGate operates in a network environment where sensitive personal information is

processed. The system provides a full set of cryptographic functions, which can be

complemented using external hardware security modules (HSMs). Encryption of sensitive

data occurs during acquiring, logging, messaging, and in data storage.

IDECO has gone above and beyond the requirements including multiple encryption

types and leveraging the HSM for transaction security functions. In addition, biometric

data is de-serialised and physically separated from system data. Any form of ID stored

within the database can be encrypted along with limited personal information such as

last name and phone numbers.

OperationaltoolsCentralized, real-time and proactive monitoring of end-to-end services including the

network connections, means improved control, reduced administration and higher

service quality. This is complemented by automated end-of-day business processing and

extensive reporting tools to reduce the need for operational intervention.

HighavailabilityComputer systems are ever more resilient, but the BioGate architecture not only allows for

full scalability with managed process balancing, dynamic resource allocation ensures

consistency in quality of service. Ultimate availability is achieved through the dual site

with active : active option. Unplanned downtime is therefore a thing of the past with the

additional benefit of deploying new software versions without taking the system out of

service.

Data sheet

Page 5

System information

ArchitectureBioGate uses an object-oriented design and development style to implement its

enterprise services architecture. The use of object-oriented programming languages,

such as Java, enhances the extensibility of BioGate solutions and minimizes time-to-

market for new integrations, functions and services. By extending integration flexibility,

BioGate allows access to more customer information sources. This makes BioGate en

extremely versatile and flexible identification engine, capable of running on a number of

different hardware platforms and databases.

BioGate software components use this architecture to create flexible business services

that allow users to quickly deploy new products and deliver enhanced customer service.

The components are organized according to the function they perform to support

transaction processing as required by the various customer touch point. Each business

requirement performs a specific type of processing or controls a specific part of the

application stack.

The architecture of BioGate is designed for a multiple platform configuration. The

platform is defined as the hardware, operating system, integration system and file

system. However, platform-specific processing is isolated into specific components to

allow the rest of the application to be common across all platforms.

BioGate software components are organized according to the function they perform, as

shown in the following illustration.

Data sheet

Page 6

TheUserExperienceThe BioGate user interface employs Java technologies, which provide the user interfaces

needed to manage all application components.

The system’s built-in security engine assigns users’ roles that manage permission to

specific functions and tasks associated with various windows. Users are authenticated

during the logon process, thereby minimizing the risk associated with unauthorized user

access to functions they are not permitted to perform.

The audit function is responsible for maintaining a secure audit trail of all transactions

and activities and all modifications to user rights database are recorded.

CustomisationStrategyAlthough BioGate incorporates many configuration options, some customization may be

necessary. When customization is necessary, Ideco provides the product changes based

on the approved requirements.

Ideco’s customization strategy of minimizing customizations and incorporating product

change into product solutions, minimizes the effort required to upgrade to new releases

of the product, ensuring that users can take advantage of future product developments.

Product enhancements are changes that might be required in response to customer

requests, Ideco’s innovation, third party requirements and changes in industry rules and

the regulatory environment.

Our commitment to you Ideco is committed to providing quality products and services to our customers. With

every Ideco product sold, comprehensive support programmes are available to help

implement the solution and keep it operating at peak efficiency.

We recognise our obligation to help protect your investment and commit to providing

resources before, during and after installation. When required we will also transfer the

required skills to ensure the level of sustainability and optimum return on investment.

© Copyright 2016 Ideco Biometric Security Solutions (Pty) Ltd. The information contained

herein is subject to change without notice. Ideco shall not be liable for technical or

editorial errors or omissions contained herein.

The Ideco logo and Identity Switch are trademarks or registered trademarks in South

Africa, other countries or both. Other parties’ trademarks referenced are the property of

their respective owners.

Learn more at:

www.ideco.co.za

or contact us at:

contact@ideco.co.za

+27 83 556 6833

Full multimodal Rich functionality Platform independent Flexible architecture”