Professional Documents
Culture Documents
This document and the information described throughout are provided in its present
condition and are delivered without written, expressed or implied commitments by
Invixium Inc. and are subject to change without notice. The information and technical
data herein are strictly prohibited for the intention of reverse engineering and shall not
be disclosed to parties for procurement or manufacturing.
TRADEMARKS
1.1 Purpose
This document outlines the various functions and features of IXM TITAN in detail. The
target audience for this document is technical consultants or professionals in the access
control, time & attendance or home automation industry. These individuals may copy
whole or excerpts from this document to use as references for their business proposals,
quotations or reports as long as the purpose excludes reverse engineering and
disclosure to parties for procurement or manufacturing.
The document has been divided into the following main sections:
Products – which comprises of the following sub sections:
o Mechanical specifications (dimensions, material, operating temperature
range, etc.)
o Product features (power, communication, peripherals, etc.)
o Product model variants (Biometrics only, Biometrics + card, etc.)
Product Quality and Testing
Servers, Workstations and Software
Security and Encryption
1.2 Overview
TITAN is powered by the most cutting-edge processors ever created, the Qualcomm®
Snapdragon™ 820 with the ultimate in processing power, connectivity, graphics, face
detection, reliability and battery efficiency. To challenge the stature of the Snapdragon
820, TITAN incorporates Face Recognition combined with Fingerprint or Finger Vein
biometric modalities to be the pinnacle in physical security and user convenience.
Included in the plethora of soul arresting features is a 21-megapixel camera for face
recognition and enabling video intercom, satisfactory storage of users and transactions,
incredibly fast authentication speeds and advanced connectivity options like Wi-Fi and
Bluetooth. The 5.0” screen is Invixium's largest to date with an exceptional interface and
user feedback.
The two biometric modalities allow TITAN users to set upto 4 factor authentication which
includes – face recognition, finger vein or fingerprint, RFID card and PIN. All this is
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
7
made possible by the advanced specs incorporated in the device such as the 2.2 GHz
quad core Qualcomm Snapdragon 820 processor for amazingly fast and accurate
authentication, 64 GB of memory for biometric record storage, a 4 GB PoP LPDDR4
RAM for high speed data transfer, in built accelerometer for Anti-Shock Vandal
Protection, and IP67 for dust and ingress protection.
TITAN offers identification (1:N) and verification (1:1) modes without the need for re-
enrollment or re-loading of the User database as the same respective biometric record
(face/finger vein/fingerprint) is applicable for both authentication modes.
The storage capacity of TITAN varies for each biometric modality, based on the
algorithms involved and the space of each biometric template:
1. Face Recognition – TITAN allows for maximum storage of 100K users and
templates in 1:N mode and up to 500K in 1:1 mode. Invixium recommends the
enrollment of 1 face template per user.
2. Finger Vein – TITAN allows for maximum storage of up to 2K Users or 4K
templates in 1:N mode and up to 500K users or 1 million templates in 1:1 mode.
Invixium recommends the enrollment of 2 records per user.
3. Fingerprint – TITAN allows for maximum storage of up to 50K users or 100K
templates in 1:N mode and up to 500K users or 1 million templates in 1:1 mode.
Invixium recommends the enrollment of two records per user.
In 1:N mode, TITAN provides identification matching speeds, for maximum user storage
for each respective modality, in well under 1 second.
TITAN offers a multitude of networking capabilities which include TCP/IP, USB Auxiliary,
Wi-Fi and Bluetooth.
TITAN offers stability and reliability as its embedded platform is architectured and
developed on Android Nougat; one of the latest and most advanced open sourced
operating systems.
TITAN is constructed with unparalleled quality by way of superior materials and trusted
technologies to ensure long-lasting operation and is designed for ease of installation
from a hardware and software standpoint.
TITAN offers ease of installation by way of a Wired Back Plate (wiring harness) that can
be connected in advance of the device. This is tremendously useful for large installs.
A Software Development Kit called IXM SDK is available for TITAN, which will allow
developers to integrate Invixium features and functions into existing or new software
applications.
b. Authentication
i. Identification (1:N) – One factor authentication when a live face or finger
is presented to the device for access, which will be compared and
filtered against the entire list of stored biometric records in the device
database.
TITAN is distributed with a copy of the latest version of IXM WEB. IXM WEB is easy to
install and provides the IT and network administrator remote access to the network of
Invixium devices for setup, configuration and maintenance. IXM WEB shall also provide
a centralized database (SQL Server Express 2008) to store the biometric records on a
Server and/or locally on each device on the network. Provided that there is access to
Internet and authorized access to each online account, IXM WEB will allow for unlimited
client portals.
2.1 Manufacturer
2.3.1. Dimensions
The device dimensions are 10.63” (27 cm) Tall x 3.54” (9 cm) Wide x 3.54” (9 cm)
Deep. TITAN has a tapering shape that gradually narrows from back to front.
The device will be supplied with an IXM INSTALL KIT that will contain the
following items for easy setup:
The exterior of the TITAN is made out of aluminium. The sculpted Aluminium
body makes for an extremely light and sturdy product and defines TITAN’s
distinctive curves. Moreover, Aluminium acts as a fantastic heat sink keeping the
device components free from burning at higher temperatures. And last but not the
least, in line with the Invixium value of exquisite design, Aluminium makes the
design extremely elegant. Aluminium extrusion is a sophisticated technological
manufacturing process that enhances product appeal: tactile, ergonomic and
cosmetic allowing for difficult shapes to be created out of liquid Aluminium. The
process generates a robust seamless shell that is impervious to air and water
with remarkable shock absorption and protection. Finally, the exterior of the
TITAN is metal color coated to prevent rusting and to achieve long lasting
durability.
The back plate of TITAN is made of solid ADC12 aluminum alloy to act as a heat
sink to draw heat out of the core to prevent overheating and provide long lasting
operation.
The Invixium emblem is made of plastic with a chrome finish, located on the
centre front side of the device, just under the LCD screen and is placed under the
Corning Gorilla Glass to for longer life and a unique look. The Invixium name is
located at the centre of the front side of the device and is made of plastic with a
chrome finish and etch-fitted to stand out from the Aluminium body of the front
shell.
The interior of the TITAN has threads in the Aluminium shell itself to ensure a
durable and firm seal against the back plate.
TITAN utilizes rugged industrial grade connectors for external I/O connections
with high reliability multi-finger Beryllium Copper contact technology to ensure
long lasting performance when subject to repeated stress and strain. The
TITAN is equipped with a colossal 5.0-inch IPS LCD with 1080p HD resolution
that gives TITAN an awe-inspiring display. Bonded with incredibly strong and
durable Corning Gorilla Glass 5 with antimicrobial properties forms an
impenetrable layer of protection against scratches and impacts, and helps reduce
the spread of bacteria. The in-plane switching (IPS) technology lights up each
pixel individually, providing a 170° wide viewing angle even in bright sunlight.
TITAN has a menu system via the LCD for access to various functions such as
new enrollments, device settings, Time & Attendance function keys and Clock
display settings. This LCD menu system is protected and can be unlocked either
by a specific biometric or PIN (ie. Administrator setup).
2.3.6. Sensors
All TITAN models come equipped with a 21 MP camera with autofocus, LED
Flash and ambient sensor for face recognition in all light conditions. Our
ingenious face detection and facial recognition algorithm allows for live detection
of frontal, non-frontal, and partial profiles, with the best combination of speed and
accuracy. Using face tracking and video-based recognition, TITAN is capable of
automated demographic estimation (age, race/ethnicity, and gender) as well as
automated detection of facial pose (pitch/yaw) and glasses (eyeglasses and
sunglasses). These cutting-edge and sophisticated capabilities do not hinder the
processing speed as the Snapdragon processor allows for astonishingly fast
enrollment and matching.
The TITAN FV series comes equipped with a Finger Vein sensor by Hitachi
located at the bottom of the device. HITACHI finger vein technology integrated in
the TITAN allows for higher security by incorporating liveness detection, making it
virtually touchless and impossible to spoof. Vein technology also provides
increased privacy by eliminating latent prints and are not reproducible as vein
patterns are beneath the skin. When compared to fingerprint, vein detection
generates higher accuracy as the skin texture and epidural condition have no
impact to authentication. The specific sensor version is Hitachi H1EAX.
The sensor of the TITAN FV series utilizes infrared light with a Total Sensing
Area of 45 mm x 30 mm.
TITAN FPLV series is equipped with a patented 500 dpi multispectral imaging
sensor from HID Lumidigm that works with all kinds of finger conditions – wet, dry
and thin. Lumidigm incorporates multi spectral imaging technology that virtually
eliminates common real-world problems experienced by conventional fingerprint
sensors. Fast, accurate and reliable, the Venus fingerprint sensor delivers best-
in-class biometrics authentication along with liveness detection. The specific
sensor version is the new Venus sensor (V-300) with liveness detection (Anti-
spoofing) and Latent protection.
TITAN FPU series is equipped with an FBI and STQC certified 500 dpi optical
sensor from SecuGen that provides high image quality but is cost effective.
SecuGen is a high-performance, maintenance-free optical fingerprint sensor
resistant to scratches, impact, vibration and electrostatic shock. The specific
sensor version is U20 which is enhanced with a water-resistant cover suited for
integration with IP65 rated products.
The sensor of TITAN FPU series utilizes a Total Sensing Area of 15.2 mm x 20.3
mm.
TITAN allows for reading of the serial number from the label affixed to the
underside bottom of the device while mounted.
2.3.8. Weight
The TITAN device alone weighs approximately 2 lbs (1050 g). The fully packaged
product box with Hard Cover box, Velvet cushioned insert tray and IXM INSTALL
KIT weighs approximately 4 lbs (1360 g).
2.3.9. Certifications
TITAN is supplied with FCC Class B, CE certifications, along with RoHS, WEEE,
IP67 and IK10 compliance.
The TITAN is built on the Android Nougat Operating System, one of the most
advanced open source operating systems in the world. Android Nougat helps
TITAN achieve its ful potential by allowing for multiple applications to run
simultaneously, which is essential in a multi modal biometric device. Android
Nougat also enhances the graphics of the TITAN with the help of Adreno 530
GPU, resulting in a stellar display on the 5.0” screen. The battery saving feature
of the Nougat allows TITAN to run for up to 2 hours continuously. Finally, the OS
2.4.2. Processor
The TITAN runs on a 2.2GHz Quad Core Qualcomm Snapdragon 810 processor.
The quad-core processor packs supreme might with simultaneous core operation
and elevates the status of processors in terms of connectivity, power, efficiency,
graphics and camera capabilities with an Adreno 530 Graphics Processing Unit
for spectacular graphics. This advanced processor allows TITAN to operate at full
capability, enabling multiple operations and applications to run seamlessly and
without a glitch.
2.4.3. Power
TITAN is supplied with a two-wire flying lead for connection to 12-24VDC power
supply with a minimum 1.5 A current draw. If the TITAN is being used to power
the door strike the minimum current draw should be 2 A.
c. RS232 Serial – Three-wire flying leads are available on the Wired Back
Cover (wiring harness) found in the IXM INSTALL KIT for RS232 Serial
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
18
communication (RX, TX, SGND). The extensive list of operational baud
rates includes: 2400, 4800, 9600, 19200, 38400, 57600, 115200 and
230400 kbps.
This port can be used for Firmware Upgrading and downloading Transaction logs
from the device.
TITAN has dedicated leads for Wiegand Inputs and Outputs along with Wiegand
Ground via the Wired Back Cover (wiring harness). The Wiegand Inputs can be
used for connectivity of a third-party proximity reader should the installation
require one. The Wiegand Outputs can be used to connect directly to an access
control panel.
TITAN allows for configuration of individual Wiegand Output formats for the
following events:
TITAN allows for configuration of the Pass-thru format in IXM WEB based on the
following specifications:
a. Total bits – The total number of bits in the Wiegand string format
b. ID Start bits – The position of the first ID bit in the Wiegand string
c. Total ID bits – The total number of bits of the ID field in the Wiegand
string
TITAN allows for configuration of the Custom Wiegand format in IXM WEB based
on the following specifications:
a. Even Parity
b. Odd Parity
c. Total ID bits
d. Flex Fields (ie. Facility Code, Job Code, or Company ID Code)
e. Other (ie. Access Control Panel optional fields)
TITAN has dedicated leads for three Specific Purpose Inputs (SPI’s) and three for
Specific Purpose Outputs (SPO’s) for general use.
The SPI’s allow for the trigger of the following actions per each individual input
line:
a. None
b. Release Alarm
c. Restart Device
The SPO’s trigger based on the following actions per each individual output line
or combination of any three lines:
a. Authentication Success
b. Authentication Fail
c. Anti-Shock On
d. Door Open
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
20
e. Door Close
f. Forced Open Door
g. Door Held Open
h. Duress Finger
i. Device Boot Up
TITAN is equipped with an internal relay (Max rating of 2A@24VDC) and various
input and output wire connections for Single Door Access Control. These input
and output wires can be used to setup a typical single door installation, which
may require the following accessories (not supplied by Invixium):
The TITAN allows for configuration of the Door Access Control settings in IXM
WEB for the following:
a. Unlock Time
b. Open Time
c. Request-to-Exit Time
d. Door Open Schedule (from 1 up to 1440 min)
TITAN allows for setting of the sensitivity of the on-board accelerometer for Anti-
Shock Vandal Protection. The sensitivity levels available are:
a. Very High
b. High
c. Medium
d. Low
2.4.10. LEDs
TITAN allows for configuration of the LEDs for 6 different colours: Red, Yellow,
Green, Cyan, Blue and Magenta for the following events:
a. Idle
b. Device Up
c. Place Finger
d. Remove Credentials
e. Access Granted
f. Access Denied
g. Processing
h. Error
i. Fire Alarm
j. Anti-Shock Alarm
k. Door Forced Open
l. Door Open Too Long
m. Door Open Time
n. Clear Alarm
o. Show Card
p. Presence Detect
q. Wait
r. User Not Found
TITAN allows for configuration of various LED patterns (up to 3 colours per
pattern) for user definable durations, intervals and repetitions (counter).
TITAN is equipped with a speaker (above the sensor) and 2 microphones (on the
top bezel) for recording of custom audio alerts as well as intercom functionality
via VoIP.
2.4.12. Schedules
TITAN allows for the configuration of multi-user verification for two or three counts
of authentication. Administrators will be able to specify the requirement of a
specific user, group or any user for the multi-user verification process.
2.4.15. PoE+
TITAN has Power over Ethernet capability compliant with IEEE 802.3at standard
which includes both PoE and PoE+. Power over Ethernet (also known as PoE) is
a revolutionary technology that allows receiving power, in parallel to data, over
the existing CAT-5 Ethernet infrastructure without the need to make any
modifications. PoE integrates data and power on the same wires removing the
need for a separate power supply for the TITAN and it keeps the structured
cabling safe and does not interfere with concurrent network operation. PoE+
delivers 48v of DC power over unshielded twisted-pair wiring for terminals
consuming less than 25.5 watts of power.
The TITAN series have a 5000 mAH Lithium ion battery backup in the event of
power outages. The battery is not included with the purchase and needs to be
purchased separately.
2.4.17. Wi-Fi
All TITAN models are equipped with a module for Wi-Fi capability based on the
IEEE 802.11 ac protocol. DHCP is enabled as a factory default setting as
opposed to Static and options for encryption include WEP, WPA and WPA2.
An industry first from Invixium. TITAN can now be used to power the electric door
strike directly to simplify the installation process for all customers. Instead of
needing 2 separate power sources – 1 for the device and 1 for the electric door
strike, now only one source of power is needed i.e. for the device. The wired back
cover has wires to connect directly to the supply of an electric door strike or a
magnetic lock. The device can then be used to power the door strike directly,
saving time, money and a lot of installation hassle.
If the device is used to power a door strike, the supply to the device should be
12VDC@2A or 24VDC@1A. The door strike or lock should have a supply of up to
12VDC@500mA or 24VDC@250mA.
Equipped with a 21.0 Megapixel main camera with autofocus and LED flash, the
TITAN is able to capture ultra-HD 4K videos for face detection and facial
recognition.
When installed on the front door, the high-resolution camera also enables TITAN
to act as a video phone, as the myriad of connectivity options allow the camera to
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
24
stream ultra-HD 4K video of a visitor directly to the respective user or admin,
when connected to the network.
In addition to the Face + Finger models which offer Three factor authentication
(Biometric + Biometric + PIN), the TITAN allows for variant models to offer Four factor
authentication (Biometric + Biometric + Card + PIN) by way of optional integrated
Proximity or Smart Card reader. All of the available model variants of the TITAN are
described below.
The TITAN FV series offers 2 biometric modalities – Face Recognition and Finger
Vein. The FV model variants only differ based on the RFID card modules that the
device can read. The TITAN FV1 model offers both Identification (1:N) and
Verification (1:1) modes but without any RFID card reader.
2.5.2. TITAN FV2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox)
The TITAN FV series offers 2 biometric modalities – Face Recognition and Finger
Vein. The FV model variants only differ based on the RFID card modules that the
device can read. The TITAN FV2 model offers both Identification (1:N) and
Verification (1:1) modes along with simultaneous support for Low Frequency 125
kHz EM (4100, 4102, 4200) Proximity cards and High Frequency 13.56 MHz
MiFARE (ISO/IEC 14443-3 Type A), DESFire (ISO/IEC 14443-4 Type A) and
DESFire EV1 (ISO/IEC 14443-4 Type A with AES encryption) cards. The model is
ideal for transitional installations where migration from one card type to another
(ie. EM Prox transition to MiFARE) is desired.
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.
e. The card read range for the TITAN FV2 varies depending on the card
technology and is outlined below:
EM Prox – up to 15 mm
MiFARE – up to 40 mm
DESFire – up to 40 mm
2.5.3. TITAN FV5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/ HID
Prox/ iCLASS/ PIV II)
The TITAN FV series offers 2 biometric modalities – Face Recognition and Finger
Vein. The FV model variants only differ based on the RFID card modules that the
device can read. The TITAN FV5 model offers both Identification (1:N) and
Verification (1:1) modes along with support for Low Frequency (125 kHz) EM and
HID Proximity cards and for High Frequency 13.56 MHz MiFARE (ISO/IEC
14443-3 Type A), DESFire (ISO/IEC 14443-4 Type A), DESFire EV1 (ISO/IEC
14443-4 Type A with AES encryption) and iCLASS (ISO/IEC 15693) cards.
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.
e. The card read range for the TITAN FV5 varies depending on the card
technology and is outlined below:
EM Prox – up to 15 mm
HID Prox – up to 60 mm
MiFARE – up to 40 mm
DESFire – up to 40 mm
iCLASS – up to 45 mm
The TITAN FPLV series offers 2 biometric modalities – Face Recognition and
Multispectral Fingerprint sensor from HID Lumidigm. The FPLV model variants
only differ based on the RFID card modules that the device can read. The TITAN
FPLV1 model offers both Identification (1:N) and Verification (1:1) modes but
without any RFID card reader.
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.
The TITAN FPLV series offers 2 biometric modalities – Face Recognition and
Multispectral Fingerprint sensor from HID Lumidigm. The FPLV model variants
only differ based on the RFID card modules that the device can read. The TITAN
FPLV2 model offers both Identification (1:N) and Verification (1:1) modes along
with simultaneous support for Low Frequency 125 kHz EM (4100, 4102, 4200)
Proximity cards and High Frequency 13.56 MHz MiFARE (ISO/IEC 14443-3 Type
A), DESFire (ISO/IEC 14443-4 Type A) and DESFire EV1 (ISO/IEC 14443-4
Type A with AES encryption) cards. The model is ideal for transitional installations
where migration from one card type to another (ie. EM Prox transition to MiFARE)
is desired.
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.
e. The card read range for the TITAN FPLV2 varies depending on the
card technology and is outlined below:
EM Prox – up to 15 mm
MiFARE – up to 40 mm
DESFire – up to 40 mm
2.5.6. TITAN FPLV5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/
iCLASS/ PIV II)
The TITAN FPLV5 series offers 2 biometric modalities – Face Recognition and
Multispectral Fingerprint sensor from HID Lumidigm. The FPLV model variants
only differ based on the RFID card modules that the device can read. The TITAN
FPLV5 model offers both Identification (1:N) and Verification (1:1) modes along
with support for Low Frequency (125 kHz) EM and HID Proximity cards and for
High Frequency 13.56 MHz MiFARE (ISO/IEC 14443-3 Type A), DESFire
(ISO/IEC 14443-4 Type A), DESFire EV1 (ISO/IEC 14443-4 Type A with AES
encryption) and iCLASS (ISO/IEC 15693) cards.
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.
e. The card read range for the TITAN FPLV5 varies depending on the
card technology and is outlined below:
EM Prox – up to 15 mm
HID Prox – up to 60 mm
MiFARE – up to 40 mm
DESFire – up to 40 mm
iCLASS – up to 45 mm
The TITAN FPU series offers 2 biometric modalities – Face Recognition and FBI
& STQC Certified Optical Fingerprint sensor from SecuGen. The FPU model
variants only differ based on the RFID card modules that the device can read.
The TITAN FPU1 model offers both Identification (1:N) and Verification (1:1)
modes but without any RFID card reader.
2.5.8. TITAN FPU2 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox)
The TITAN FPU series offers 2 biometric modalities – Face Recognition and FBI
& STQC Certified Optical Fingerprint sensor from SecuGen. The FPU model
variants only differ based on the RFID card modules that the device can read.
The TITAN FPU2 model offers both Identification (1:N) and Verification (1:1)
modes along with simultaneous support for Low Frequency 125 kHz EM (4100,
4102, 4200) Proximity cards and High Frequency 13.56 MHz MiFARE (ISO/IEC
14443-3 Type A), DESFire (ISO/IEC 14443-4 Type A) and DESFire EV1
(ISO/IEC 14443-4 Type A with AES encryption) cards. The model is ideal for
transitional installations where migration from one card type to another (ie. EM
Prox transition to MiFARE) is desired.
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.
EM Prox – up to 15 mm
MiFARE – up to 40 mm
DESFire – up to 40 mm
2.5.9. TITAN FPU5 (MiFARE Classic, DESFire and DESFire EV1/ EM Prox/
iCLASS/ PIV II)
The TITAN FPU series offers 2 biometric modalities – Face Recognition and FBI
& STQC Certified Optical Fingerprint sensor from SecuGen. The FPU model
variants only differ based on the RFID card modules that the device can read.
The TITAN FPU5 model offers both Identification (1:N) and Verification (1:1)
modes along with support for Low Frequency (125 kHz) EM and HID Proximity
cards and for High Frequency 13.56 MHz MiFARE (ISO/IEC 14443-3 Type A),
c. The User record generated on all Invixium devices can support both
identification and verification modes. As such, there is no need to erase
the database when switching from 1:N or 1:1 mode on the device.
e. The card read range for the TITAN FPU5 varies depending on the card
technology and is outlined below:
EM Prox – up to 15 mm
HID Prox – up to 60 mm
MiFARE – up to 40 mm
DESFire – up to 40 mm
iCLASS – up to 45 mm
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
35
3. Quality and Testing
Based on the category, each component goes through the following incoming inspection
procedures:
3 Each “Critical” component is tested individually before being used for manufacturing.
4 50% of the “Important” components undergo a quality check at the incoming stage
followed by a microscopic quality check during production.
5 25% of the “Cautious” components undergo a sampling check at the incoming stage,
followed by being reviewed as part of the final product quality check.
6 10% of the “Safe” components undergo a sampling inspection during incoming,
followed by being reviewd as part of the final pre-shipping check.
After assembly, based on the product model, each Invixium product undergoes a series
of pre-packaging functional tests to ensure that all the features corresponding to the
respective product are functioning properly. These tests are performed using an
Automated Functional Testing Fixture (AFTF) developed by Invixium especially for this
purpose. The tests carried out on the TITAN include:
Only after each TITAN passes all of the above tests is it allowed to move on to the final
stage of testing and quality check.
Once the device has passed all the functional tests, each device manufactured at
Invixium then undergoes a 24-hour burn-in period to ensure that the device is fully
operational and to prevent cases of DOA.
4.2.1 Installation
The installation completes within 5 minutes with all software components installed
in the background.
IXM WEB offers a tile based dashboard with a playful and intuitive waterfall
based GUI in each tile. The dashboard allows for customizations from the
Preferences menu whereby the Tiles can be re-ordered and Quick Links can be
set as desired.
IXM WEB has automatic device discovery via Bonjour® for fast and easy device
registration.
IXM WEB has a breadcrumb bar where a dropdown menu allows for switching
between devices and management views for Users, Groups or Revoked Smart
Cards in a single click.
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
39
IXM WEB is resolution friendly and adapts to various screen resolutions.
The IXM WEB User tile displays all the Users created and allows for User
management via the following functions:
a. Add User
b. Start Enrollment
c. User Groups
d. Users
• Add a User and enrollment
• Delete Users
• Export
• Import
• Transfer User(s) from SQL Database to device(s)
The IXM WEB Devices tile displays all the devices on the network and allows for
devices management via the following functions:
a. Device Groups
a. Group Manager
b. Devices
• Clone
• Discover
• Delete
• Reboot
c. Register Devices
The IXM WEB Config tile allows for configuration of devices for the following
applications:
a. Access Schedules
b. Anti-Passback
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
40
c. Anti-Shock
d. Audio
e. Biometric
f. Biometric Schedule
g. Camera
h. Communication
i. Device Notification
j. Device Security
k. Display
l. Door Access Control
m. Email Notification
n. General Information
o. Holiday Schedules
p. Input/Output
q. LED
r. Panel Feedback
s. Presence Detect
t. Time and Attendance
u. VoIP
v. VPN
w. Wiegand
The IXM WEB Logs tile allows for various logging tools including:
The IXM WEB Tools tile allows for setting the following options on the selected
device or on IXM WEB:
The IXM WEB Sync tile allows for various synchronization features including:
The IXM WEB Smart Card tile allows for configuration of card layout, reading,
encoding with security key and revoking. This tile also allows for unique features
including (a) Card Match on Server and (b) User Record Retrieval for biometric
record database storage on server (i.e. instead of on device) scenarios. The
various options that can be managed from this tile include:
a. Settings – for changing any Smart Card related settings such as key
management, CSN Order type, etc.
b. Layout – for card layout
c. Users – to see current card users
The IXM WEB Reports tile allows for 17 various reports including:
a. General
• Device List
• User List
b. Access Control
• Access Denied
• Door Alarm
• Door Usage
INVIXIUM P/N XAD-ESD-009-02G
Copyright © 2018
42
• IN/OUT
• Who’s IN – Critical Events
c. Time & Attendance
• Absent
• Attendance
• Attendance Register
• Early Out
• F key
• Irregularity
• Late In
• Muster
• Overtime
• Yearly Performance
The IXM WEB Translate tile allows for localization of the text displayed in IXM
WEB and on the LCD touch screen menu into various languages. There are two
methods of configuring the translation (a) Manual or (b) Google API Translation.
IXM Link is a licensed module in IXM WEB that allows for seamless integration
with leading Access Control Panel manufacturers such as RS2, Paxton,
Gallagher and many more, making user management simpler and more efficient.
IXM Convert is a licensed module in IXM WEB that allows for converting non-
proprietary biometric templates and images to Invixium format templates. This
prevents the need for re-enrollment of the entire user population when replacing
biometric devices.
The License tile lets users request keys for any licensed modules within IXM
WEB (Link, Convert, Reports and Translate).
Invixium has taken the utmost care in developing the necessary security measures to
protect against any potential security breaches or hacking of the IXM WEB software and
IXM devices. With regards to security of an Invixium installation, the following areas
have been considered:
1. IXM WEB security features that discuss the various safety features of IXM WEB
and its components.
2. IXM Device security features that describe the safety features provided in IXM
devices.
All admin user credentials, such as passwords, are encrypted prior to being
saved in the IXM WEB Database. The encryption protocol used is MD5 Hash. To
further prevent any kind of security breach, Invixium recommends changing the
user credentials monthly.
For best practices, Invixium recommends the master list of biometric records be
enrolled and saved in the IXM WEB database. All biometric records saved within
IXM WEB are first encrypted using Triple Data Encryption Standard (Triple-DES)
prior to being saved. Once all the records are centrally stored in IXM WEB, the
Administrator may choose to transfer records down to the select IXM devices to
manage and control access for only authorized users.
TITAN, TOUCH 2 and MERGE series come equipped with an embedded Android
menu system accessible via the LCD. Through the LCD menu, settings on the
device can be configured directly, including enrollment of new users. Access to
the LCD menu is protected by a feature called device security which can be set to
various levels including “PIN only”, “Biometric only” or “Biometric + PIN” to access
the apps on the device. If the mode is set to “PIN only” then any user with
knowledge of the PIN can access the apps. In this mode, Invixium recommends
the PIN code to be changed intermittently, similar to any password. For more
increased levels of security, the “Biometric only” or “Biometric + PIN” mode is
recommended whereby the fingerprint of the Administrator grants access to the
LCD menu.
IXM devices offer multiple communication modes between IXM WEB server and
devices including RS485, RS232, Ethernet or Wi-Fi. Among these options,
Invixium recommends using Ethernet communication for fast and secure
communication. Administrators can further increase the network security by
activating the Secured Ethernet option using IXM WEB. Administrators can
upload a default or custom SSL Certificate to the device using IXM WEB. For the
default SSL certificate, IXM device and IXM WEB will use RSA1024 encryption
method for encrypted communication. For a custom SSL certificate, the
encryption method and thus the security level can be customized as per the
client’s security needs.
In addition to the IXM WEB database, all Invixium devices include onboard
storage to house the biometric records in a database locally. Prior to being saved
to the device database, all biometric records are encrypted using AES128 bit
protocol using Invixium’s proprietary security key.
IXM device allows to save the IP Address and/or MAC Address of the PC where
IXM WEB application is installed. Administrators can manage the PC’s IP address
or MAC Address to ensure that the device remains responsive only for that
particular IXM WEB application. After enabling this Ethernet Security feature, no
one else will able to ping or communicate with IXM devices.
All Invixium devices are equipped with Anti-Shock Vandal Protection (ASVP) as a
tamper mechanism. With programmable levels of sensitivity, the IXM device can
detect any attempt to dislodge or remove the device from the wall. Once a tamper
event is triggered, various actions can be triggered as a result such as sounding
an alarm, erasing all data on that device, disabling biometric access or sending a
Wiegand input to the panel to trigger a desired event from the panel (ie.
lockdown).
5.3.4 Customizations
Invixium prides itself in providing solutions that nobody else in the industry can.
We have done various customization projects in the past for a number of
customers with very specific requirements. If there are additional security
requirements outside of the ones mentioned in this document, please contact the
Invixium Sales Director for your region:
sales@invixium.com
+1 844 INVIXIUM (468 4948)