You are on page 1of 49

IXM TITAN

Engineering Specifications Document


Table of Contents

Disclaimers and Restrictions ........................................................................................... 5


Glossary .................................................................................................................. 6
1. Summary ........................................................................................................... 7
1.1 Purpose ....................................................................................................... 7
1.2 Overview ...................................................................................................... 7
1.3 Technical Specifications Summary ...................................................................... 10
2. Product ............................................................................................................. 12
2.1 Manufacturer ................................................................................................ 13
2.2 Country of Origin ........................................................................................... 13
2.3 Mechanical Specifications ................................................................................. 13
2.3.1. Dimensions ............................................................................................ 13
2.3.2. Installation Kit ......................................................................................... 13
2.3.3. Material & Colour ..................................................................................... 14
2.3.4. Wiring Harness ....................................................................................... 14
2.3.5. Touchscreen LCD & Protective Screen ........................................................... 15
2.3.6. Sensors ................................................................................................ 15
2.3.6.1 Face Recognition ..................................................................................... 15
2.3.6.2 Finger Vein ............................................................................................ 16
2.3.6.3 Multispectral Fingerprint ............................................................................. 16
2.3.6.4 Optical Fingerprint .................................................................................... 16
2.3.7. Serial Number ......................................................................................... 17
2.3.8. Weight.................................................................................................. 17
2.3.9. Certifications .......................................................................................... 17
2.3.10. Operating Temperature & Humidity ................................................................ 17
2.4 Common Features ......................................................................................... 17
2.4.1. Operating System .................................................................................... 17
2.4.2. Processor .............................................................................................. 18
2.4.3. Power .................................................................................................. 18
2.4.4. Network Connections ................................................................................ 18
2.4.5. Admin Port............................................................................................. 19
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
1
2.4.6. Wiegand Inputs & Outputs .......................................................................... 19
2.4.7. Specific Purpose Inputs & Outputs ................................................................ 20
2.4.8. Door Access Control Mode ......................................................................... 21
2.4.9. Anti-Shock Vandal Protection (Tamper) ........................................................... 21
2.4.10. LEDs ................................................................................................... 22
2.4.11. Speaker & Microphone .............................................................................. 23
2.4.12. Schedules ............................................................................................. 23
2.4.13. Multi-User Verification ............................................................................... 23
2.4.14. Transaction Logs ..................................................................................... 23
2.4.15. PoE+ ................................................................................................... 23
2.4.16. Battery Backup........................................................................................ 24
2.4.17. Wi-Fi .................................................................................................... 24
2.4.18. Device Powers Door Strike ......................................................................... 24
2.4.19. Camera (Video Phone and Surveillance) ......................................................... 24
2.4.20. Gigabit Ethernet ...................................................................................... 25
2.5 Model Variants .............................................................................................. 25
2.5.1. TITAN FV1 (Face + Finger Vein Sensor) ......................................................... 25
2.5.2. TITAN FV2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox) ........................ 26
2.5.3. TITAN FV5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/ HID Prox/ iCLASS/
PIV II) 27
2.5.4. TITAN FPLV1 (Face + Multispectral Fingerprint Sensor) ....................................... 29
2.5.5. TITAN FPLV2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox) ..................... 30
2.5.6. TITAN FPLV5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/ iCLASS/ PIV II) . 31
2.5.7. TITAN FPU1 (Face + Optical Fingerprint Sensor) ............................................... 32
2.5.8. TITAN FPU2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox) ...................... 33
2.5.9. TITAN FPU5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/ iCLASS/ PIV II) ... 34
3. Quality and Testing............................................................................................... 36
3.1 Incoming Inspection ........................................................................................ 36
3.2 Functional Testing .......................................................................................... 36
3.3 24 Hour Burn-in Cycle ..................................................................................... 37
4 Servers, Workstations and Software........................................................................... 38
4.1 IXM WEB Requirements................................................................................... 38
4.1.1 Server (Windows® PC Workstation) ............................................................... 38
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
2
4.1.2 Operating Systems† ................................................................................. 38
4.1.3 IXM WEB .............................................................................................. 38
4.1.4 Web Browsers (Web Client) ........................................................................ 38
4.1.5 Microsoft® .NET Framework ........................................................................ 38
4.1.6 SQL Server 2008 Express Edition SP1 ........................................................... 39
4.1.7 Microsoft® Internet Information Services ......................................................... 39
4.1.8 Windows® Installer (Installs Automatically) ....................................................... 39
4.2 IXM WEB Highlights........................................................................................ 39
4.2.1 Installation .................................................................................................. 39
4.2.2 Dashboard and Breadcrumb Bar ........................................................................ 39
4.2.3 User Tile .................................................................................................... 40
4.2.4 Devices Tile ................................................................................................ 40
4.2.5 Config Tile .................................................................................................. 40
4.2.6 Logs Tile .................................................................................................... 41
4.2.7 Tools Tile ................................................................................................... 41
4.2.8 Sync Tile .................................................................................................... 42
4.2.9 Smart Card Tile ............................................................................................ 42
4.2.10. Reports Tile .............................................................................................. 42
4.2.11. Translate Tile ............................................................................................ 43
4.2.12. Link Tile ................................................................................................... 43
4.2.13. Convert Tile .............................................................................................. 43
4.2.14. License Tile .............................................................................................. 43
5 Security and Encryption ......................................................................................... 44
5.1 IXM WEB Security .......................................................................................... 44
5.1.1 HTTP & HTTPS ............................................................................................ 44
5.1.2 IXM WEB User’s credentials ............................................................................. 44
5.1.3 Biometric Records Database............................................................................. 45
5.2 IXM Device Security........................................................................................ 45
5.2.1 LCD Login .................................................................................................. 45
5.2.2 Network Security ..................................................................................... 45
5.2.3 Biometric Records Database on IXM Devices ......................................................... 46
5.3 Additional Security Features .............................................................................. 47
5.3.1 Ethernet Security .......................................................................................... 47
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
3
5.3.2 Anti-Shock Vandal Protection (Tamper) ................................................................ 47
5.3.3 Preventive Measures ...................................................................................... 47
5.3.4 Customizations ............................................................................................. 47
6 Support............................................................................................................. 48

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
4
Disclaimers and Restrictions

This document and the information described throughout are provided in its present
condition and are delivered without written, expressed or implied commitments by
Invixium Inc. and are subject to change without notice. The information and technical
data herein are strictly prohibited for the intention of reverse engineering and shall not
be disclosed to parties for procurement or manufacturing.

This document may contain unintentional typos or inaccuracies.

TRADEMARKS

The trademarks specified throughout the document are registered trademarks of


Invixium Inc. All third-party trademarks referenced herein are recognized to be
trademarks of their respective holders or manufacturers.

Copyright © 2018, Invixium Access Inc. All rights reserved.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
5
Glossary

ACP Access Control Panel


AES Advanced Encryption Standard
DAC Door Access Control
DHCP Dynamic Host Configuration Protocol
EULA End User License Agreement
GUI Graphical User Interface
HTTP Hypertext Transfer Protocol
HTTPS Hypertext Trasnfer Protocol Secure
I/O Input/Output
IIS Internet Information Service Manager
IXM Invixium
MD5 Message Digest 5 Algorithm
OTG On-the-Go
PACS Physical Access Control System
REQ Request to Exit
SSL Secure Sockets Layer
USB Universal Serial Bus
VNC Virtual Network Computing

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
6
1. Summary

1.1 Purpose

This document outlines the various functions and features of IXM TITAN in detail. The
target audience for this document is technical consultants or professionals in the access
control, time & attendance or home automation industry. These individuals may copy
whole or excerpts from this document to use as references for their business proposals,
quotations or reports as long as the purpose excludes reverse engineering and
disclosure to parties for procurement or manufacturing.

The document has been divided into the following main sections:
 Products – which comprises of the following sub sections:
o Mechanical specifications (dimensions, material, operating temperature
range, etc.)
o Product features (power, communication, peripherals, etc.)
o Product model variants (Biometrics only, Biometrics + card, etc.)
 Product Quality and Testing
 Servers, Workstations and Software
 Security and Encryption

1.2 Overview

TITAN is powered by the most cutting-edge processors ever created, the Qualcomm®
Snapdragon™ 820 with the ultimate in processing power, connectivity, graphics, face
detection, reliability and battery efficiency. To challenge the stature of the Snapdragon
820, TITAN incorporates Face Recognition combined with Fingerprint or Finger Vein
biometric modalities to be the pinnacle in physical security and user convenience.

Included in the plethora of soul arresting features is a 21-megapixel camera for face
recognition and enabling video intercom, satisfactory storage of users and transactions,
incredibly fast authentication speeds and advanced connectivity options like Wi-Fi and
Bluetooth. The 5.0” screen is Invixium's largest to date with an exceptional interface and
user feedback.

The two biometric modalities allow TITAN users to set upto 4 factor authentication which
includes – face recognition, finger vein or fingerprint, RFID card and PIN. All this is
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
7
made possible by the advanced specs incorporated in the device such as the 2.2 GHz
quad core Qualcomm Snapdragon 820 processor for amazingly fast and accurate
authentication, 64 GB of memory for biometric record storage, a 4 GB PoP LPDDR4
RAM for high speed data transfer, in built accelerometer for Anti-Shock Vandal
Protection, and IP67 for dust and ingress protection.

TITAN offers identification (1:N) and verification (1:1) modes without the need for re-
enrollment or re-loading of the User database as the same respective biometric record
(face/finger vein/fingerprint) is applicable for both authentication modes.

The storage capacity of TITAN varies for each biometric modality, based on the
algorithms involved and the space of each biometric template:
1. Face Recognition – TITAN allows for maximum storage of 100K users and
templates in 1:N mode and up to 500K in 1:1 mode. Invixium recommends the
enrollment of 1 face template per user.
2. Finger Vein – TITAN allows for maximum storage of up to 2K Users or 4K
templates in 1:N mode and up to 500K users or 1 million templates in 1:1 mode.
Invixium recommends the enrollment of 2 records per user.
3. Fingerprint – TITAN allows for maximum storage of up to 50K users or 100K
templates in 1:N mode and up to 500K users or 1 million templates in 1:1 mode.
Invixium recommends the enrollment of two records per user.

In 1:N mode, TITAN provides identification matching speeds, for maximum user storage
for each respective modality, in well under 1 second.

TITAN offers a multitude of networking capabilities which include TCP/IP, USB Auxiliary,
Wi-Fi and Bluetooth.

TITAN offers stability and reliability as its embedded platform is architectured and
developed on Android Nougat; one of the latest and most advanced open sourced
operating systems.

TITAN is constructed with unparalleled quality by way of superior materials and trusted
technologies to ensure long-lasting operation and is designed for ease of installation
from a hardware and software standpoint.

TITAN offers ease of installation by way of a Wired Back Plate (wiring harness) that can
be connected in advance of the device. This is tremendously useful for large installs.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
8
TITAN is supplied from the manufacturer with the latest version of a Web-based
interactive and administrative software called IXM WEB, which will allow for remote
access from any laptop, tablet or smartphone provided that there is Internet connectivity
as well as authorized permission via one of the account profiles.

A Software Development Kit called IXM SDK is available for TITAN, which will allow
developers to integrate Invixium features and functions into existing or new software
applications.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
9
1.3 Technical Specifications Summary

TITAN Features Description


Processor 2.2 GHz Quad core Qualcomm Snapdragon 820
Graphics Engine Adreno 530 GPU
Random Access Memory 4 GB PoP LPDDR4 @ 1886 MHz
Flash Memory 64 GB Universal Flash Storage 2.0 gear 3
Operating System Android Nougat
Ethernet Gigabit Ethernet (1000 BASE-T)
PoE+ IEEE 802.3at
Camera 21 MP Camera with Auto focus
Flash High intensity LED Flash
Battery Backup Li ion 5000 mAh
Wi-Fi IEEE 802.11ac 2x2 MU-MIMO
Bluetooth 4.2LE
USB USB 2.0 On-The-Go (OTG)
# of SPOs & SPIs 3&3
Wiegand Customizable up-to 512 bits
Door Strike Supply 12V@500mA, 24V@250mA
Anti-Shock Vandal Protection Standard
LCD & Interface 5.0” IPS Capacitive Touch Screen
Display 1080p high contrast display
Auto On Proximity sensor Standard (2 meters)
Audio Stereo Hi-Fidelity Speaker
Super Strong Protective screen cover Corning® Gorilla® Glass (Antimicrobial)
- FBI & STQC Certified SecuGen Optical sensor
Fingerprint sensor options
- Multispectral sensor from HID Lumidigm
Fingerprint templates ANSI-378 international standard
Finger Vein Sensor Hitachi Finger Vein Sensor
Finger Vein templates Hitachi proprietary template
Face Recognition Invixium proprietary algorithm
Face templates Invixium proprietary template
1:N Users (Records) - Fingerprint Up to 50K users (100K biometric templates)
1:1 Users (Records) - Fingerprint Up to 500K users (1 million biometric templates)
1:N Users (Records) – Finger Vein Up to 2K users (4K biometric templates)
1:1 Users (Records) – Finger Vein Up to 500K users (1 million biometric templates)
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
10
1:N Users (Records) – Face Recognition Up to 100K users (100K templates)
1:1 Users (Records) – Face Recognition Up to 500K users (500K templates)
False Acceptance Rate <0.0001%
False Rejection Rate <0.01%
- iCLASS SE – MiFARE Classic/ DESFire/
DESFire EV1/ EM Prox/ HID Prox/ iCLASS
Standard/SE/SR/Seos/PIV II
RFID Card Options
- Invixium Engineered – MiFARE Classic/ DESFire/
DESFire EV1/ EM Prox
# Transaction Logs 1 million+
Communication options TCP/IP, RS 232, RS 485, USB Aux, Wi-Fi
Real-time transactions Transactions can be pushed from device
Voltage & Current 12VDC@2A, 24VDC@1A
Operating temperature -20°C to +75°C
Relative Humidity 5% - 95% non-condensing
Body Material Extruded Aluminium
Dimensions 27 cm x 9 cm x 9 cm (L x W x D)
Regulatory Approvals and Certificates FCC Class B, CE, IP67, IK10
LCD can display text in other languages using the
Support for Other Languages
TRANSLATE tile in IXM WEB

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
11
2. Product

TITAN provides both identification and verification modes of authentication. Identification


shall be performed when a live face or finger is presented to the device for access,
which will be compared and filtered against the entire list of stored biometric records in
the device database. Verification shall be performed when a PIN is entered via the
Touch Screen or an RFID card is shown followed by a live face or finger presented to
the device, which will be compared to the record corresponding to the entered PIN or
RFID card.

TITAN is a deterrent against unauthorized access by requiring the authentication of a


live face and/or finger scan to be compared with a previously enrolled face template,
finger vein or fingerprint biometric record.

TITAN allows for the following operations:

a. Enrollment – Creation of a Biometric record which involves the entry of User


data, capturing of a live face from the camera, and finger vein or fingerprint
from the sensor of the device, internal processing of the data to generate a
User biometric record, followed by storage of the record either (a) solely in the
Server database or (b) both in the Server and device databases.

b. Authentication
i. Identification (1:N) – One factor authentication when a live face or finger
is presented to the device for access, which will be compared and
filtered against the entire list of stored biometric records in the device
database.

ii. Verification (1:1) – Multi-factor authentication when a PIN is entered via


the Touch Screen or an RFID card is shown followed by a live face or
finger presented to the device, which will be compared to the record
corresponding to the respective PIN or RFID card.

c. Access Control Panel – In this mode, the administrator is required as a setup


pre-requisite to connect the Wiegand Output lines of the device with the
Wiegand Input lines of the access control panel. Following an authentication
sequence, the result will generate Wiegand output data which will be utilized by
the access control panel to decide whether or not to release the door lock.
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
12
d. Door Access Control - In this mode, the administrator is required as a setup
pre-requisite to connect a door strike (with snubber diode) or EM lock, optional
door contact and optional request-to-exit device (button or motion detector) with
the appropriate I/O wires of the device. Following a successful authentication
sequence, the result will drive the in-built relay to unlock the door.

TITAN is distributed with a copy of the latest version of IXM WEB. IXM WEB is easy to
install and provides the IT and network administrator remote access to the network of
Invixium devices for setup, configuration and maintenance. IXM WEB shall also provide
a centralized database (SQL Server Express 2008) to store the biometric records on a
Server and/or locally on each device on the network. Provided that there is access to
Internet and authorized access to each online account, IXM WEB will allow for unlimited
client portals.

2.1 Manufacturer

Invixium Access Inc. is headquartered in Toronto, Ontario, Canada.

2.2 Country of Origin

TITAN is Made in Canada. A certified Certificate of Origin is available upon request.

2.3 Mechanical Specifications

2.3.1. Dimensions

The device dimensions are 10.63” (27 cm) Tall x 3.54” (9 cm) Wide x 3.54” (9 cm)
Deep. TITAN has a tapering shape that gradually narrows from back to front.

2.3.2. Installation Kit

The device will be supplied with an IXM INSTALL KIT that will contain the
following items for easy setup:

a. Stainless Steel Metal Mounting plate


b. Wired Back Cover (wiring harness)
c. General wall mounting screws
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
13
d. Metal Mounting Plate screw
e. Hex key
f. Dolphin Crimps
g. USB Aux & OTG Cable

2.3.3. Material & Colour

The exterior of the TITAN is made out of aluminium. The sculpted Aluminium
body makes for an extremely light and sturdy product and defines TITAN’s
distinctive curves. Moreover, Aluminium acts as a fantastic heat sink keeping the
device components free from burning at higher temperatures. And last but not the
least, in line with the Invixium value of exquisite design, Aluminium makes the
design extremely elegant. Aluminium extrusion is a sophisticated technological
manufacturing process that enhances product appeal: tactile, ergonomic and
cosmetic allowing for difficult shapes to be created out of liquid Aluminium. The
process generates a robust seamless shell that is impervious to air and water
with remarkable shock absorption and protection. Finally, the exterior of the
TITAN is metal color coated to prevent rusting and to achieve long lasting
durability.

The back plate of TITAN is made of solid ADC12 aluminum alloy to act as a heat
sink to draw heat out of the core to prevent overheating and provide long lasting
operation.

The Invixium emblem is made of plastic with a chrome finish, located on the
centre front side of the device, just under the LCD screen and is placed under the
Corning Gorilla Glass to for longer life and a unique look. The Invixium name is
located at the centre of the front side of the device and is made of plastic with a
chrome finish and etch-fitted to stand out from the Aluminium body of the front
shell.

The interior of the TITAN has threads in the Aluminium shell itself to ensure a
durable and firm seal against the back plate.

2.3.4. Wiring Harness

TITAN utilizes rugged industrial grade connectors for external I/O connections
with high reliability multi-finger Beryllium Copper contact technology to ensure
long lasting performance when subject to repeated stress and strain. The

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
14
manufacturer shall ship the device with a Back Cover held in place by screws to
protect the two on-board 30-pin industrial grade connectors at the back. During
installation, this Back Cover will be replaced by the Wired Back Cover (wiring
harness) which will have two mating 30-pin industrial grade connectors along with
the wires for external connections. TITAN is supplied with a Wired Back Cover or
wiring harness that is equipped with attached injection molded RJ45 female
receptacle for Ethernet connectivity and HDMI female receptacle for video
surveillance. The Wired Back Cover is also equipped with colour-coded fly lead
wires of 26 AWG, and UL rated up to 300VDC and 80°C.

2.3.5. Touchscreen LCD & Protective Screen

TITAN is equipped with a colossal 5.0-inch IPS LCD with 1080p HD resolution
that gives TITAN an awe-inspiring display. Bonded with incredibly strong and
durable Corning Gorilla Glass 5 with antimicrobial properties forms an
impenetrable layer of protection against scratches and impacts, and helps reduce
the spread of bacteria. The in-plane switching (IPS) technology lights up each
pixel individually, providing a 170° wide viewing angle even in bright sunlight.

TITAN has a menu system via the LCD for access to various functions such as
new enrollments, device settings, Time & Attendance function keys and Clock
display settings. This LCD menu system is protected and can be unlocked either
by a specific biometric or PIN (ie. Administrator setup).

2.3.6. Sensors

2.3.6.1 Face Recognition

All TITAN models come equipped with a 21 MP camera with autofocus, LED
Flash and ambient sensor for face recognition in all light conditions. Our
ingenious face detection and facial recognition algorithm allows for live detection
of frontal, non-frontal, and partial profiles, with the best combination of speed and
accuracy. Using face tracking and video-based recognition, TITAN is capable of
automated demographic estimation (age, race/ethnicity, and gender) as well as
automated detection of facial pose (pitch/yaw) and glasses (eyeglasses and
sunglasses). These cutting-edge and sophisticated capabilities do not hinder the
processing speed as the Snapdragon processor allows for astonishingly fast
enrollment and matching.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
15
2.3.6.2 Finger Vein

The TITAN FV series comes equipped with a Finger Vein sensor by Hitachi
located at the bottom of the device. HITACHI finger vein technology integrated in
the TITAN allows for higher security by incorporating liveness detection, making it
virtually touchless and impossible to spoof. Vein technology also provides
increased privacy by eliminating latent prints and are not reproducible as vein
patterns are beneath the skin. When compared to fingerprint, vein detection
generates higher accuracy as the skin texture and epidural condition have no
impact to authentication. The specific sensor version is Hitachi H1EAX.

The sensor of the TITAN FV series utilizes infrared light with a Total Sensing
Area of 45 mm x 30 mm.

2.3.6.3 Multispectral Fingerprint

TITAN FPLV series is equipped with a patented 500 dpi multispectral imaging
sensor from HID Lumidigm that works with all kinds of finger conditions – wet, dry
and thin. Lumidigm incorporates multi spectral imaging technology that virtually
eliminates common real-world problems experienced by conventional fingerprint
sensors. Fast, accurate and reliable, the Venus fingerprint sensor delivers best-
in-class biometrics authentication along with liveness detection. The specific
sensor version is the new Venus sensor (V-300) with liveness detection (Anti-
spoofing) and Latent protection.

The sensor of TITAN FPLV series utilizes a Total Sensing Area of 18 mm x 28


mm.

2.3.6.4 Optical Fingerprint

TITAN FPU series is equipped with an FBI and STQC certified 500 dpi optical
sensor from SecuGen that provides high image quality but is cost effective.
SecuGen is a high-performance, maintenance-free optical fingerprint sensor
resistant to scratches, impact, vibration and electrostatic shock. The specific
sensor version is U20 which is enhanced with a water-resistant cover suited for
integration with IP65 rated products.

The sensor of TITAN FPU series utilizes a Total Sensing Area of 15.2 mm x 20.3
mm.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
16
2.3.7. Serial Number

TITAN allows for reading of the serial number from the label affixed to the
underside bottom of the device while mounted.

2.3.8. Weight

The TITAN device alone weighs approximately 2 lbs (1050 g). The fully packaged
product box with Hard Cover box, Velvet cushioned insert tray and IXM INSTALL
KIT weighs approximately 4 lbs (1360 g).

2.3.9. Certifications

TITAN is supplied with FCC Class B, CE certifications, along with RoHS, WEEE,
IP67 and IK10 compliance.

2.3.10. Operating Temperature & Humidity

TITAN is eligible for indoor or outdoor installations, functional in Operating


temperatures from -20°C (-4°F) up to +75°C (167°F) and can tolerate up to 95%
non-condensing humidity levels. This makes TITAN an ideal biometric access
control device for a wide selection of environments ranging from extremely harsh
environments such as nuclear power plants, mines and sea ports to regular
environments such as enterprises, universities and offices. TITAN will operate in
a variety of environmental conditions where security and convenience are of
importance.

2.4 Common Features

2.4.1. Operating System

The TITAN is built on the Android Nougat Operating System, one of the most
advanced open source operating systems in the world. Android Nougat helps
TITAN achieve its ful potential by allowing for multiple applications to run
simultaneously, which is essential in a multi modal biometric device. Android
Nougat also enhances the graphics of the TITAN with the help of Adreno 530
GPU, resulting in a stellar display on the 5.0” screen. The battery saving feature
of the Nougat allows TITAN to run for up to 2 hours continuously. Finally, the OS

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
17
provides users with the ability to build a custom ROM as per specific
requirements, making it easier to use and more personalized if needed. In case
custom ROM is not a requirement, the built in OS and ROM are designed to be
exceptionally user-friendly and easy to operate.

2.4.2. Processor

The TITAN runs on a 2.2GHz Quad Core Qualcomm Snapdragon 810 processor.
The quad-core processor packs supreme might with simultaneous core operation
and elevates the status of processors in terms of connectivity, power, efficiency,
graphics and camera capabilities with an Adreno 530 Graphics Processing Unit
for spectacular graphics. This advanced processor allows TITAN to operate at full
capability, enabling multiple operations and applications to run seamlessly and
without a glitch.

2.4.3. Power

TITAN is supplied with a two-wire flying lead for connection to 12-24VDC power
supply with a minimum 1.5 A current draw. If the TITAN is being used to power
the door strike the minimum current draw should be 2 A.

2.4.4. Network Connections

The TITAN allows for the following modes of communication:

a. TCP/IP network – An RJ45 receptacle is provided on the Wired Back


Cover (wiring harness) found in the IXM INSTALL KIT for Gigabit
Ethernet 1000BaseT connectivity. Ethernet security for this mode is
available whereby SSL certificates can be uploaded (via IXM WEB) to
provide communication security over the Internet.

b. RS485 network – Three-wire flying leads are available on the Wired


Back Cover (wiring harness) found in the IXM INSTALL KIT for RS485
network connectivity (+, -, SGND). The extensive list of operational
baud rates includes: 2400, 4800, 9600, 19200, 38400, 57600, 115200
and 230400 kbps.

c. RS232 Serial – Three-wire flying leads are available on the Wired Back
Cover (wiring harness) found in the IXM INSTALL KIT for RS232 Serial
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
18
communication (RX, TX, SGND). The extensive list of operational baud
rates includes: 2400, 4800, 9600, 19200, 38400, 57600, 115200 and
230400 kbps.

d. USB Auxiliary – A Micro USB receptacle is available on the underside


bottom of TITAN behind a secured door for Auxiliary communication.

e. Wi-Fi – TITAN is equipped with an IEEE 802.11ac 2x2 MU-MIMO


compliant module for Wi-Fi connection for extremely fast Wi-Fi
connection. When on the same network, TITAN will be able to interact
with IXM WEB via Wi-Fi for device and user management. DHCP is
enabled as a factory default setting as opposed to Static and options
for encryption include WEP, WPA and WPA2.

2.4.5. Admin Port

TITAN has an Administrative port located on the underside bottom, concealed


behind a door (made of the same Aluminium Alloy as the shell), which is secured
by a tamper resistant hex screw.

This port can be used for Firmware Upgrading and downloading Transaction logs
from the device.

2.4.6. Wiegand Inputs & Outputs

TITAN has dedicated leads for Wiegand Inputs and Outputs along with Wiegand
Ground via the Wired Back Cover (wiring harness). The Wiegand Inputs can be
used for connectivity of a third-party proximity reader should the installation
require one. The Wiegand Outputs can be used to connect directly to an access
control panel.

TITAN supports a Pre-defined Standard 26-bit, Pass-thru and Custom up to 512-


bit Wiegand formats. The Pass-thru and Custom formats shall be configured
through IXM WEB.

TITAN allows for configuration of individual Wiegand Output formats for the
following events:

a. Wiegand Output – Choice of ID Type and Format for Duress


b. Identification – One format for Success, One format for Failure
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
19
c. Verification - One format for Success, One format for Failure
d. Anti-Shock – Format and Pre-defined ID Value
e. Heart-beat – Format and Pre-defined ID Value

TITAN allows for configuration of the Pass-thru format in IXM WEB based on the
following specifications:

a. Total bits – The total number of bits in the Wiegand string format
b. ID Start bits – The position of the first ID bit in the Wiegand string
c. Total ID bits – The total number of bits of the ID field in the Wiegand
string

TITAN allows for configuration of the Custom Wiegand format in IXM WEB based
on the following specifications:

a. Even Parity
b. Odd Parity
c. Total ID bits
d. Flex Fields (ie. Facility Code, Job Code, or Company ID Code)
e. Other (ie. Access Control Panel optional fields)

2.4.7. Specific Purpose Inputs & Outputs

TITAN has dedicated leads for three Specific Purpose Inputs (SPI’s) and three for
Specific Purpose Outputs (SPO’s) for general use.

The SPI’s allow for the trigger of the following actions per each individual input
line:
a. None
b. Release Alarm
c. Restart Device

The SPO’s trigger based on the following actions per each individual output line
or combination of any three lines:

a. Authentication Success
b. Authentication Fail
c. Anti-Shock On
d. Door Open
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
20
e. Door Close
f. Forced Open Door
g. Door Held Open
h. Duress Finger
i. Device Boot Up

2.4.8. Door Access Control Mode

TITAN is equipped with an internal relay (Max rating of 2A@24VDC) and various
input and output wire connections for Single Door Access Control. These input
and output wires can be used to setup a typical single door installation, which
may require the following accessories (not supplied by Invixium):

a. Door strike or Dead bolt


b. External Power supply for Door strike (As recommended by Door strike
or Dead bolt manufacturer. Can be eliminated if TITAN is being used to
power the door strike.)
c. Snubber diode for Power supply protection against inductive kickback
d. Door contact
e. Request-to-exit mechanism (Motion detector or Push button)

The TITAN allows for configuration of the Door Access Control settings in IXM
WEB for the following:
a. Unlock Time
b. Open Time
c. Request-to-Exit Time
d. Door Open Schedule (from 1 up to 1440 min)

2.4.9. Anti-Shock Vandal Protection (Tamper)

TITAN allows for setting of the sensitivity of the on-board accelerometer for Anti-
Shock Vandal Protection. The sensitivity levels available are:

a. Very High
b. High
c. Medium
d. Low

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
21
TITAN allows for an individual or a combination of actions to result based on the
triggering of the Anti-Shock alarm, which are the following:

a. Delete All Users


b. Deactivate Biometrics
c. Send Wiegand
d. Audio Alert
e. LED Alert

2.4.10. LEDs

TITAN allows for configuration of the LEDs for 6 different colours: Red, Yellow,
Green, Cyan, Blue and Magenta for the following events:

a. Idle
b. Device Up
c. Place Finger
d. Remove Credentials
e. Access Granted
f. Access Denied
g. Processing
h. Error
i. Fire Alarm
j. Anti-Shock Alarm
k. Door Forced Open
l. Door Open Too Long
m. Door Open Time
n. Clear Alarm
o. Show Card
p. Presence Detect
q. Wait
r. User Not Found

TITAN allows for configuration of various LED patterns (up to 3 colours per
pattern) for user definable durations, intervals and repetitions (counter).

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
22
2.4.11. Speaker & Microphone

TITAN is equipped with a speaker (above the sensor) and 2 microphones (on the
top bezel) for recording of custom audio alerts as well as intercom functionality
via VoIP.

2.4.12. Schedules

TITAN has the ability to configure the following:

a. Access Schedules – dates and times when user is allowed access


b. Biometric Schedules – dates and times when user is required to
present their finger for authentication
c. Holiday Schedules – dates and times when exceptions to the regular
Access Schedule are needed due to Statutory holidays

2.4.13. Multi-User Verification

TITAN allows for the configuration of multi-user verification for two or three counts
of authentication. Administrators will be able to specify the requirement of a
specific user, group or any user for the multi-user verification process.

2.4.14. Transaction Logs

TITAN has on-board memory storage for up to 5,000,000 transaction logs.

2.4.15. PoE+

TITAN has Power over Ethernet capability compliant with IEEE 802.3at standard
which includes both PoE and PoE+. Power over Ethernet (also known as PoE) is
a revolutionary technology that allows receiving power, in parallel to data, over
the existing CAT-5 Ethernet infrastructure without the need to make any
modifications. PoE integrates data and power on the same wires removing the
need for a separate power supply for the TITAN and it keeps the structured
cabling safe and does not interfere with concurrent network operation. PoE+
delivers 48v of DC power over unshielded twisted-pair wiring for terminals
consuming less than 25.5 watts of power.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
23
2.4.16. Battery Backup

The TITAN series have a 5000 mAH Lithium ion battery backup in the event of
power outages. The battery is not included with the purchase and needs to be
purchased separately.

2.4.17. Wi-Fi

All TITAN models are equipped with a module for Wi-Fi capability based on the
IEEE 802.11 ac protocol. DHCP is enabled as a factory default setting as
opposed to Static and options for encryption include WEP, WPA and WPA2.

2.4.18. Device Powers Door Strike

An industry first from Invixium. TITAN can now be used to power the electric door
strike directly to simplify the installation process for all customers. Instead of
needing 2 separate power sources – 1 for the device and 1 for the electric door
strike, now only one source of power is needed i.e. for the device. The wired back
cover has wires to connect directly to the supply of an electric door strike or a
magnetic lock. The device can then be used to power the door strike directly,
saving time, money and a lot of installation hassle.

If the device is used to power a door strike, the supply to the device should be
12VDC@2A or 24VDC@1A. The door strike or lock should have a supply of up to
12VDC@500mA or 24VDC@250mA.

2.4.19. Camera (Video Phone and Surveillance)

Equipped with a 21.0 Megapixel main camera with autofocus and LED flash, the
TITAN is able to capture ultra-HD 4K videos for face detection and facial
recognition.

When installed outdoors, video surveillance is a breeze thanks to wide Field of


View (FOV) camera angles. Video surveillance can be done in real time, thanks
to the HDMI 2.0 connector which can be connected directly to a display for
continuous surveillance.

When installed on the front door, the high-resolution camera also enables TITAN
to act as a video phone, as the myriad of connectivity options allow the camera to
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
24
stream ultra-HD 4K video of a visitor directly to the respective user or admin,
when connected to the network.

2.4.20. Gigabit Ethernet

TITAN is equipped with 1000BASE-T Gigabit Ethernet connectivity which uses 4


pairs of Cat 5 and higher unshielded twisted pair to achieve 1000MB (1 Gigabit)
per second speeds. This allows the TITAN to exchange data at extremely high
speeds with IXM WEB and vice versa, making real time event monitoring
instantaneous.

2.5 Model Variants

In addition to the Face + Finger models which offer Three factor authentication
(Biometric + Biometric + PIN), the TITAN allows for variant models to offer Four factor
authentication (Biometric + Biometric + Card + PIN) by way of optional integrated
Proximity or Smart Card reader. All of the available model variants of the TITAN are
described below.

2.5.1. TITAN FV1 (Face + Finger Vein Sensor)

The TITAN FV series offers 2 biometric modalities – Face Recognition and Finger
Vein. The FV model variants only differ based on the RFID card modules that the
device can read. The TITAN FV1 model offers both Identification (1:N) and
Verification (1:1) modes but without any RFID card reader.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
25
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FV1 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Finger Vein – TITAN allows for maximum storage of up to 1K
Users or 2K templates in 1:N mode and up to 500K users or 1
million templates in 1:1 mode. Invixium recommends the
enrollment of 2 records per user.

2.5.2. TITAN FV2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox)

The TITAN FV series offers 2 biometric modalities – Face Recognition and Finger
Vein. The FV model variants only differ based on the RFID card modules that the
device can read. The TITAN FV2 model offers both Identification (1:N) and
Verification (1:1) modes along with simultaneous support for Low Frequency 125
kHz EM (4100, 4102, 4200) Proximity cards and High Frequency 13.56 MHz
MiFARE (ISO/IEC 14443-3 Type A), DESFire (ISO/IEC 14443-4 Type A) and
DESFire EV1 (ISO/IEC 14443-4 Type A with AES encryption) cards. The model is
ideal for transitional installations where migration from one card type to another
(ie. EM Prox transition to MiFARE) is desired.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
26
matching of the live finger against the designated User record stored
on the device database.

c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FV2 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Finger Vein – TITAN allows for maximum storage of up to 1K
Users or 2K templates in 1:N mode and up to 500K users or 1
million templates in 1:1 mode. Invixium recommends the
enrollment of 2 records per user.

e. The card read range for the TITAN FV2 varies depending on the card
technology and is outlined below:

 EM Prox – up to 15 mm
 MiFARE – up to 40 mm
 DESFire – up to 40 mm

2.5.3. TITAN FV5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/ HID
Prox/ iCLASS/ PIV II)

The TITAN FV series offers 2 biometric modalities – Face Recognition and Finger
Vein. The FV model variants only differ based on the RFID card modules that the
device can read. The TITAN FV5 model offers both Identification (1:N) and
Verification (1:1) modes along with support for Low Frequency (125 kHz) EM and
HID Proximity cards and for High Frequency 13.56 MHz MiFARE (ISO/IEC
14443-3 Type A), DESFire (ISO/IEC 14443-4 Type A), DESFire EV1 (ISO/IEC
14443-4 Type A with AES encryption) and iCLASS (ISO/IEC 15693) cards.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
27
a. Identification (1:N) mode supports single factor authentication via the
presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.

c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FV5 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Finger Vein – TITAN allows for maximum storage of up to 1K
Users or 2K templates in 1:N mode and up to 500K users or 1
million templates in 1:1 mode. Invixium recommends the
enrollment of 2 records per user.

e. The card read range for the TITAN FV5 varies depending on the card
technology and is outlined below:
 EM Prox – up to 15 mm
 HID Prox – up to 60 mm
 MiFARE – up to 40 mm
 DESFire – up to 40 mm
 iCLASS – up to 45 mm

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
28
2.5.4. TITAN FPLV1 (Face + Multispectral Fingerprint Sensor)

The TITAN FPLV series offers 2 biometric modalities – Face Recognition and
Multispectral Fingerprint sensor from HID Lumidigm. The FPLV model variants
only differ based on the RFID card modules that the device can read. The TITAN
FPLV1 model offers both Identification (1:N) and Verification (1:1) modes but
without any RFID card reader.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.

c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FPLV1 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Multispectral Fingerprint – TITAN allows for maximum storage of
up to 50K users or 100K templates in 1:N mode and up to 500K
users or 1 million templates in 1:1 mode. Invixium recommends
the enrollment of two records per user.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
29
2.5.5. TITAN FPLV2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox)

The TITAN FPLV series offers 2 biometric modalities – Face Recognition and
Multispectral Fingerprint sensor from HID Lumidigm. The FPLV model variants
only differ based on the RFID card modules that the device can read. The TITAN
FPLV2 model offers both Identification (1:N) and Verification (1:1) modes along
with simultaneous support for Low Frequency 125 kHz EM (4100, 4102, 4200)
Proximity cards and High Frequency 13.56 MHz MiFARE (ISO/IEC 14443-3 Type
A), DESFire (ISO/IEC 14443-4 Type A) and DESFire EV1 (ISO/IEC 14443-4
Type A with AES encryption) cards. The model is ideal for transitional installations
where migration from one card type to another (ie. EM Prox transition to MiFARE)
is desired.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.

c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FPLV2 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Multispectral Fingerprint – TITAN allows for maximum storage of
up to 50K users or 100K templates in 1:N mode and up to 500K
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
30
users or 1 million templates in 1:1 mode. Invixium recommends
the enrollment of two records per user.

e. The card read range for the TITAN FPLV2 varies depending on the
card technology and is outlined below:

 EM Prox – up to 15 mm
 MiFARE – up to 40 mm
 DESFire – up to 40 mm

2.5.6. TITAN FPLV5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/
iCLASS/ PIV II)

The TITAN FPLV5 series offers 2 biometric modalities – Face Recognition and
Multispectral Fingerprint sensor from HID Lumidigm. The FPLV model variants
only differ based on the RFID card modules that the device can read. The TITAN
FPLV5 model offers both Identification (1:N) and Verification (1:1) modes along
with support for Low Frequency (125 kHz) EM and HID Proximity cards and for
High Frequency 13.56 MHz MiFARE (ISO/IEC 14443-3 Type A), DESFire
(ISO/IEC 14443-4 Type A), DESFire EV1 (ISO/IEC 14443-4 Type A with AES
encryption) and iCLASS (ISO/IEC 15693) cards.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.

c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FPLV5 depends on the biometric


modality being used and whether the device is used under identification
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
31
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Multispectral Fingerprint – TITAN allows for maximum storage of
up to 50K users or 100K templates in 1:N mode and up to 500K
users or 1 million templates in 1:1 mode. Invixium recommends
the enrollment of two records per user.

e. The card read range for the TITAN FPLV5 varies depending on the
card technology and is outlined below:
 EM Prox – up to 15 mm
 HID Prox – up to 60 mm
 MiFARE – up to 40 mm
 DESFire – up to 40 mm
 iCLASS – up to 45 mm

2.5.7. TITAN FPU1 (Face + Optical Fingerprint Sensor)

The TITAN FPU series offers 2 biometric modalities – Face Recognition and FBI
& STQC Certified Optical Fingerprint sensor from SecuGen. The FPU model
variants only differ based on the RFID card modules that the device can read.
The TITAN FPU1 model offers both Identification (1:N) and Verification (1:1)
modes but without any RFID card reader.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
32
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FPU1 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Optical Fingerprint – TITAN allows for maximum storage of up to
50K users or 100K templates in 1:N mode and up to 500K users
or 1 million templates in 1:1 mode. Invixium recommends the
enrollment of two records per user.

2.5.8. TITAN FPU2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox)

The TITAN FPU series offers 2 biometric modalities – Face Recognition and FBI
& STQC Certified Optical Fingerprint sensor from SecuGen. The FPU model
variants only differ based on the RFID card modules that the device can read.
The TITAN FPU2 model offers both Identification (1:N) and Verification (1:1)
modes along with simultaneous support for Low Frequency 125 kHz EM (4100,
4102, 4200) Proximity cards and High Frequency 13.56 MHz MiFARE (ISO/IEC
14443-3 Type A), DESFire (ISO/IEC 14443-4 Type A) and DESFire EV1
(ISO/IEC 14443-4 Type A with AES encryption) cards. The model is ideal for
transitional installations where migration from one card type to another (ie. EM
Prox transition to MiFARE) is desired.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
33
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.

c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FPU2 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Optical Fingerprint – TITAN allows for maximum storage of up to
50K users or 100K templates in 1:N mode and up to 500K users
or 1 million templates in 1:1 mode. Invixium recommends the
enrollment of two records per user.
e. The card read range for the TITAN FPU2 varies depending on the card
technology and is outlined below:

 EM Prox – up to 15 mm
 MiFARE – up to 40 mm
 DESFire – up to 40 mm

2.5.9. TITAN FPU5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/
iCLASS/ PIV II)

The TITAN FPU series offers 2 biometric modalities – Face Recognition and FBI
& STQC Certified Optical Fingerprint sensor from SecuGen. The FPU model
variants only differ based on the RFID card modules that the device can read.
The TITAN FPU5 model offers both Identification (1:N) and Verification (1:1)
modes along with support for Low Frequency (125 kHz) EM and HID Proximity
cards and for High Frequency 13.56 MHz MiFARE (ISO/IEC 14443-3 Type A),

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
34
DESFire (ISO/IEC 14443-4 Type A), DESFire EV1 (ISO/IEC 14443-4 Type A with
AES encryption) and iCLASS (ISO/IEC 15693) cards.

a. Identification (1:N) mode supports single factor authentication via the


presentation of a User’s live face to the camera or a live finger to the
sensor to initiate a match against the database of User records stored
on the device.

b. Verification (1:1) mode supports multi factor authentication via


presentation of a credential to an external Wiegand device connected
via the Wiegand Inputs lines of the device. This will prompt immediate
matching of the live finger against the designated User record stored
on the device database.

c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.

d. Maximum storage on the TITAN FPU5 depends on the biometric


modality being used and whether the device is used under identification
mode or verification mode. The maximum storage for each scenario is
given below:

 Face Recognition – TITAN allows for maximum storage of 100K


users and templates in 1:N mode and up to 500K for 1:1 mode.
Invixium recommends the enrollment of 1 face template per
user.
 Multispectral Fingerprint – TITAN allows for maximum storage of
up to 50K users or 100K templates in 1:N mode and up to 500K
users or 1 million templates in 1:1 mode. Invixium recommends
the enrollment of two records per user.

e. The card read range for the TITAN FPU5 varies depending on the card
technology and is outlined below:
 EM Prox – up to 15 mm
 HID Prox – up to 60 mm
 MiFARE – up to 40 mm
 DESFire – up to 40 mm
 iCLASS – up to 45 mm
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
35
3. Quality and Testing

Invixium products undergo Quality Inspections at 3 different levels during the


manufacturing process.

3.1 Incoming Inspection

Each component used in manufacturing of Invixium devices is categorized as “Critical”,


“Important”, “Cautious” or “Safe” based on its role in the final product. All electrical and
electronic components are rated as “Critical”, the LCDs and shell of the products are
examples of “Important” components, screws and packaging are examples of “Cautious”
and components such as silica gel and tapes are categorized under “Safe”.

Based on the category, each component goes through the following incoming inspection
procedures:
3 Each “Critical” component is tested individually before being used for manufacturing.
4 50% of the “Important” components undergo a quality check at the incoming stage
followed by a microscopic quality check during production.
5 25% of the “Cautious” components undergo a sampling check at the incoming stage,
followed by being reviewed as part of the final product quality check.
6 10% of the “Safe” components undergo a sampling inspection during incoming,
followed by being reviewd as part of the final pre-shipping check.

3.2 Functional Testing

After assembly, based on the product model, each Invixium product undergoes a series
of pre-packaging functional tests to ensure that all the features corresponding to the
respective product are functioning properly. These tests are performed using an
Automated Functional Testing Fixture (AFTF) developed by Invixium especially for this
purpose. The tests carried out on the TITAN include:

1. Face Recognition test


2. Sensor test
3. Enrollment and Verification test
4. Wiegand Out test
5. Prox Card test
6. Smart Card test
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
36
7. LED test
8. Audio test
9. Microphone test
10. LCD test
11. LCD Touch test
12. Presence Detect test
13. SPIO In test
14. SPIO Out test
15. Wiegand In test
16. Door Relay IO test
17. Door Fire IO test
18. Door Status IO test
19. Door Rex IO test
20. Door Out IO test
21. Panel Feedback test
22. RS-232 test
23. RS-485 test
24. WLAN test
25. Bluetooth test
26. Battery test
27. PoE test
28. Reset button test
29. Anti-shock test
30. Camera test
31. LED Flash test
32. Ambient Sensor test
33. DAC Power test
34. HDMI test

Only after each TITAN passes all of the above tests is it allowed to move on to the final
stage of testing and quality check.

3.3 24 Hour Burn-in Cycle

Once the device has passed all the functional tests, each device manufactured at
Invixium then undergoes a 24-hour burn-in period to ensure that the device is fully
operational and to prevent cases of DOA.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
37
4 Servers, Workstations and Software

4.1 IXM WEB Requirements

4.1.1 Server (Windows® PC Workstation)

a. 1 GHz Intel® Pentium 4 processor or equivalent (INVIXIUM recommends


2.0 GHz or higher)
b. 4 GB RAM (INVIXIUM recommends 6 GB RAM or higher)
c. Available COM or USB port
d. Ethernet Card (10/100 Mbps Ethernet connections)
e. Monitor with resolution 1024 x 768 high color video display

4.1.2 Operating Systems†

a. Windows® 10, 8.1 and 7 (32-bit & 64-bit)


b. Windows® 7 Home Premium Edition
c. Windows Server® 2016
d. Windows Server® 2012, 2012 R2
e. Windows Server® 2008, 2008 R2

† Windows Professional or Enterprise versions only

4.1.3 IXM WEB

a. 2 GB Free hard disk space

4.1.4 Web Browsers (Web Client)

a. Internet Explorer® version 11.0 or higher


b. Google ChromeTM version 40.0 or higher
c. Mozilla Firefox® version 40.0 or higher
d. Microsoft Edge® version 38.14393 or higher
e. Apple Safari® version 5.1.7. or higher (MAC OS only)

4.1.5 Microsoft® .NET Framework

a. Version 4.0 (850 MB for x86, 2 GB for x64)


INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
38
b. Version 2.0 (500 MB) – only required for Windows Server® 2003 SP3

4.1.6 SQL Server 2008 Express Edition SP1

a. 2 GB Hard disk (INVIXIUM recommends)

4.1.7 Microsoft® Internet Information Services

a. Version 7.5 or higher

4.1.8 Windows® Installer (Installs Automatically)

a. Version 4.5 or higher

4.2 IXM WEB Highlights

4.2.1 Installation

The installation of IXM WEB consists of the following 2 steps:

a. License Agreement (EULA)


b. Install

The installation completes within 5 minutes with all software components installed
in the background.

4.2.2 Dashboard and Breadcrumb Bar

IXM WEB offers a tile based dashboard with a playful and intuitive waterfall
based GUI in each tile. The dashboard allows for customizations from the
Preferences menu whereby the Tiles can be re-ordered and Quick Links can be
set as desired.

IXM WEB has automatic device discovery via Bonjour® for fast and easy device
registration.

IXM WEB has a breadcrumb bar where a dropdown menu allows for switching
between devices and management views for Users, Groups or Revoked Smart
Cards in a single click.
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
39
IXM WEB is resolution friendly and adapts to various screen resolutions.

4.2.3 User Tile

The IXM WEB User tile displays all the Users created and allows for User
management via the following functions:
a. Add User
b. Start Enrollment
c. User Groups
d. Users
• Add a User and enrollment
• Delete Users
• Export
• Import
• Transfer User(s) from SQL Database to device(s)

4.2.4 Devices Tile

The IXM WEB Devices tile displays all the devices on the network and allows for
devices management via the following functions:
a. Device Groups
a. Group Manager
b. Devices
• Clone
• Discover
• Delete
• Reboot
c. Register Devices

4.2.5 Config Tile

The IXM WEB Config tile allows for configuration of devices for the following
applications:

a. Access Schedules
b. Anti-Passback
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
40
c. Anti-Shock
d. Audio
e. Biometric
f. Biometric Schedule
g. Camera
h. Communication
i. Device Notification
j. Device Security
k. Display
l. Door Access Control
m. Email Notification
n. General Information
o. Holiday Schedules
p. Input/Output
q. LED
r. Panel Feedback
s. Presence Detect
t. Time and Attendance
u. VoIP
v. VPN
w. Wiegand

4.2.6 Logs Tile

The IXM WEB Logs tile allows for various logging tools including:

a. Application - software management


b. Device - hardware troubleshooting
c. Transaction - event management, exportable

4.2.7 Tools Tile

The IXM WEB Tools tile allows for setting the following options on the selected
device or on IXM WEB:

a. Backup & Restore


b. Email Configuration
c. Factory Default
d. Firmware Upgrade

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
41
e. Options
f. Push Notification
g. Sensor test
h. Video Surveillance
i. Virtual Network Computing (VNC)

4.2.8 Sync Tile

The IXM WEB Sync tile allows for various synchronization features including:

a. Broadcast – for mass configuration of settings on multiple devices


b. Clock – NTP Server
c. User Sync - data synchronization to manage the network database of
User records either on demand or via scheduling

4.2.9 Smart Card Tile

The IXM WEB Smart Card tile allows for configuration of card layout, reading,
encoding with security key and revoking. This tile also allows for unique features
including (a) Card Match on Server and (b) User Record Retrieval for biometric
record database storage on server (i.e. instead of on device) scenarios. The
various options that can be managed from this tile include:
a. Settings – for changing any Smart Card related settings such as key
management, CSN Order type, etc.
b. Layout – for card layout
c. Users – to see current card users

4.2.10. Reports Tile

The IXM WEB Reports tile allows for 17 various reports including:

a. General
• Device List
• User List
b. Access Control
• Access Denied
• Door Alarm
• Door Usage
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
42
• IN/OUT
• Who’s IN – Critical Events
c. Time & Attendance
• Absent
• Attendance
• Attendance Register
• Early Out
• F key
• Irregularity
• Late In
• Muster
• Overtime
• Yearly Performance

4.2.11. Translate Tile

The IXM WEB Translate tile allows for localization of the text displayed in IXM
WEB and on the LCD touch screen menu into various languages. There are two
methods of configuring the translation (a) Manual or (b) Google API Translation.

4.2.12. Link Tile

IXM Link is a licensed module in IXM WEB that allows for seamless integration
with leading Access Control Panel manufacturers such as RS2, Paxton,
Gallagher and many more, making user management simpler and more efficient.

4.2.13. Convert Tile

IXM Convert is a licensed module in IXM WEB that allows for converting non-
proprietary biometric templates and images to Invixium format templates. This
prevents the need for re-enrollment of the entire user population when replacing
biometric devices.

4.2.14. License Tile

The License tile lets users request keys for any licensed modules within IXM
WEB (Link, Convert, Reports and Translate).

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
43
5 Security and Encryption

Invixium has taken the utmost care in developing the necessary security measures to
protect against any potential security breaches or hacking of the IXM WEB software and
IXM devices. With regards to security of an Invixium installation, the following areas
have been considered:

1. IXM WEB security features that discuss the various safety features of IXM WEB
and its components.
2. IXM Device security features that describe the safety features provided in IXM
devices.

5.1 IXM WEB Security

5.1.1 HTTP & HTTPS

IXM WEB application is a web-based software that runs on modern browsers


using HTTP protocol. The first level of security in IXM WEB comes in the form of
Username and Password credentials required to access IXM WEB. Invixium
recommends that IXM WEB be installed only on one system and that the login
details not be made public. Additionally, IXM WEB has been designed to transmit
data via the HTTPS protocol – the most widely deployed security protocol used
today, by configuring the SSL Certificate settings in IIS. SSL stands for secure
sockets layer which creates a secure connection ensuring all communications
between the web server and the web browser are encrypted. Invixium
recommends using the HTTPS protocol as it keeps the IXM WEB data highly
secure and encrypted using the standard SSL encryption.

5.1.2 IXM WEB User’s credentials

All admin user credentials, such as passwords, are encrypted prior to being
saved in the IXM WEB Database. The encryption protocol used is MD5 Hash. To
further prevent any kind of security breach, Invixium recommends changing the
user credentials monthly.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
44
5.1.3 Biometric Records Database

For best practices, Invixium recommends the master list of biometric records be
enrolled and saved in the IXM WEB database. All biometric records saved within
IXM WEB are first encrypted using Triple Data Encryption Standard (Triple-DES)
prior to being saved. Once all the records are centrally stored in IXM WEB, the
Administrator may choose to transfer records down to the select IXM devices to
manage and control access for only authorized users.

5.2 IXM Device Security

5.2.1 LCD Login

TITAN, TOUCH 2 and MERGE series come equipped with an embedded Android
menu system accessible via the LCD. Through the LCD menu, settings on the
device can be configured directly, including enrollment of new users. Access to
the LCD menu is protected by a feature called device security which can be set to
various levels including “PIN only”, “Biometric only” or “Biometric + PIN” to access
the apps on the device. If the mode is set to “PIN only” then any user with
knowledge of the PIN can access the apps. In this mode, Invixium recommends
the PIN code to be changed intermittently, similar to any password. For more
increased levels of security, the “Biometric only” or “Biometric + PIN” mode is
recommended whereby the fingerprint of the Administrator grants access to the
LCD menu.

5.2.2 Network Security

IXM devices offer multiple communication modes between IXM WEB server and
devices including RS485, RS232, Ethernet or Wi-Fi. Among these options,
Invixium recommends using Ethernet communication for fast and secure
communication. Administrators can further increase the network security by
activating the Secured Ethernet option using IXM WEB. Administrators can
upload a default or custom SSL Certificate to the device using IXM WEB. For the
default SSL certificate, IXM device and IXM WEB will use RSA1024 encryption
method for encrypted communication. For a custom SSL certificate, the
encryption method and thus the security level can be customized as per the
client’s security needs.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
45
5.2.3 Biometric Records Database on IXM Devices

In addition to the IXM WEB database, all Invixium devices include onboard
storage to house the biometric records in a database locally. Prior to being saved
to the device database, all biometric records are encrypted using AES128 bit
protocol using Invixium’s proprietary security key.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
46
5.3 Additional Security Features

5.3.1 Ethernet Security

IXM device allows to save the IP Address and/or MAC Address of the PC where
IXM WEB application is installed. Administrators can manage the PC’s IP address
or MAC Address to ensure that the device remains responsive only for that
particular IXM WEB application. After enabling this Ethernet Security feature, no
one else will able to ping or communicate with IXM devices.

5.3.2 Anti-Shock Vandal Protection (Tamper)

All Invixium devices are equipped with Anti-Shock Vandal Protection (ASVP) as a
tamper mechanism. With programmable levels of sensitivity, the IXM device can
detect any attempt to dislodge or remove the device from the wall. Once a tamper
event is triggered, various actions can be triggered as a result such as sounding
an alarm, erasing all data on that device, disabling biometric access or sending a
Wiegand input to the panel to trigger a desired event from the panel (ie.
lockdown).

5.3.3 Preventive Measures

The security of an IXM installation can be further improved by taking certain


preventive measures such as incorporating additional firewalls for the server on
which IXM WEB is installed, having a dedicated TCP/IP network for the IXM
devices and server and ensuring that the latest versions of IXM WEB and
firmware are installed.

5.3.4 Customizations

Invixium prides itself in providing solutions that nobody else in the industry can.
We have done various customization projects in the past for a number of
customers with very specific requirements. If there are additional security
requirements outside of the ones mentioned in this document, please contact the
Invixium Sales Director for your region:

sales@invixium.com
+1 844 INVIXIUM (468 4948)

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
47
6 Support

For more information relating to this Engineering Specifications document, please


contact us at: support@invixium.com

Enjoy the Experience.

Copyright © 2018, INVIXIUM. All rights reserved.

INVIXIUM P/N XAD-ESD-009-02G


Copyright © 2018
48

You might also like