Gateway 450RGH User manual

Protector Suite QL Datasheet
March 30, 2004 1/15
Protector Suite QL
Datasheet
Rev: <1.0.2>

PS QL Datasheet
2/15
Table of Contents
1Introduction................................................................................................4
2PS QL End Users ..........................................................................................4
3User interface..............................................................................................4
4One Touch behavior.....................................................................................5
4.1 Behavior in case of logged-off or locked computer........................................... 5
4.2 Behavior in case of logged-on computer........................................................ 5
5Features......................................................................................................6
6Feature description......................................................................................8
6.1 Targeted for Windows OS ........................................................................... 8
6.2 Automatic hints, which will help user to understand the product and solve
problems ......................................................................................................... 8
6.3 Tutorial teaching user how to use strip sensor................................................ 8
6.4 Automatic user enrollment after new user logon ............................................. 8
6.5 One touch function to activate User Interface................................................. 9
6.6 User interface optionally controlled by movement of user’s finger on the sensor... 9
6.7 User can use sensor for simulation of mouse wheel ......................................... 9
6.8 Biometric user interface feedback is done by simple icons ................................ 9
6.9 Easy setup............................................................................................... 9
6.10 Silent setup..........................................................................................10
6.11 Microsoft Installer support.......................................................................10
6.12 Configurable skins .................................................................................10
6.13 Biometrics support for Logon and Fast User Switching feature .......................10
6.14 Possibility to lock workstation by finger.....................................................10
6.15 Possibility to unlock workstation by finger..................................................10
6.16 Boot Security support.............................................................................10
6.17 Boot Security single sign-on ....................................................................10
6.18 Quick launch of single application using finger and biometric menu ................10
6.19 Password bank......................................................................................10
6.20 Registration replayed after finger verification..............................................10
6.21 Notification about registered window by notification box...............................10
6.22 Possibility to edit registrations .................................................................11
6.23 Possibility to see the password, which is stored in the registration..................11
6.24 Links to registered pages in menu to allow user to access the registered pages
and replay the registrations by one simple click.....................................................11
6.25 Automatically offer registration of window with password field.......................11
6.26 Possibility to backup all registrations.........................................................11
6.27 Deactivate screensaver by finger..............................................................11
6.28 File folder “My Safe” in “My documents” folder will be encrypted....................12
6.29 Access to “My Safe” can be locked/unlocked by a finger (from menu) .............12
6.30 My Safe can be resized...........................................................................12
6.31 My Safe can be unlocked from standard Open/Save file dialogs .....................12
6.32 It is easy to access files in My Safe folder. .................................................12
6.33 Automatic installation of HW drivers during setup........................................12
6.34 USB Selective Suspend (Win XP) ..............................................................12

PS QL Datasheet
3/15
6.35 Ultra low power finger detect mode (Win XP)..............................................12
7TouchChip Bios eXtension (TBX) support in Protector Suite QL.................... 13
7.1 Introduction ............................................................................................13
7.2 Turning on TBX........................................................................................13
7.3 User enrollment .......................................................................................13
7.4 Single sign on feature: one touch or swipe to access PC and log on to Windows ..14

PS QL Datasheet
4/15
Main Features
One Touch access
-User Logon
-Fast User switching
-Protector Suite QL touch menu
Encrypted Data storage
-Easy access to secure storage
-Security on shared PC environment
Password Management
-Easy registration of password dialogs
-Multi browser support
-Exportable Password bank
Pre-Boot support
-For TBX enabled Notebooks and Desktops pre-boot protection
1Introduction
Protector Suite QL is targeted to OEM customers that are looking for a complete biometric
solution in the Notebook and Desktop market. The use is extremely easy and convenient
to guarantee very low support cost and a strong user acceptance.
2PS QL End Users
This product is targeted mainly for isolated computers without central management and
without Windows domain me mbership. The usage of the computer can have two variants.
1. One single user.
This type of usage is focused on convenience. The Fingerprint replaces the
password and the password bank manages the Web Page access.
2. Several people share the same computer.
This type of usage needs convenience but also needs some security features. The
Application lock, password bank, file encryption and Biometric fast user switching
will be used.
3User interface
The PS QL is very user-friendly end easy to use. The main communication with the user is
done by a GUI that pops up when the logged on user places his finger on the sensor.

PS QL Datasheet
5/15
Figure 1: Bio menu in Aluminium and TouchChip skins
To increase the acceptance by individuals this main menu can have a choice of multiple
“skins”. One of the skins is plain Windows XP standard-looking. The skins apply only to the
main menu; the remaining UI (dialogs, wizards) have the standard Windows XP look.
4One Touch behavior
4.1 Behavior in case of logged-off or locked computer
•User will put his finger on the sensor
•If he has registered a finger then he is logged on
•If the computer is locked and the locked session belongs to a different user, then a
new session is created (the previous one stays intact) and the active user is
switched.
4.2 Behavior in case of logged-on computer
•User will put his finger on the sensor
•If the finger belongs to the currently logged-on user, the main menu on the screen
is displayed from which the user can choose the desired action. The list of functions
shown to the user depends on the current state of the computer (e.g. when
registered password window is active, list of registrations for this window will be
shown).
•If the finger belongs to a different user then the workstation is switched to the
session of that user. If the session does not exist yet, it is created.

PS QL Datasheet
6/15
5Features
Feature description1
General Features:
Supported operating systems:
Windows XP with or without FUS (Fast User Switching)
Windows 2000
Windows Me/98
n
n
n
Automatic hints, which will help user to understand the product
and solve problems
n
Tutorial teaching user how to use strip sensor n
Automatic user enrollment after new user logon n
One touch/swipe function to activate User Interface n
User interface optionally controlled by movement of user’s finger
on the sensor
n
User can use sensor for simulation of a mouse wheel n
Biometric user interface feedback done by simple icons n
Easy setup n
Silent setup n
Microsoft Installer support n
Maximum number of enrolled biometric samples per user 10
Menu with multiple skins (predefined skins) n
Convenience features:
Biometrics support for Logon and Fast User Switching n
Switch user when different user puts his finger on the
sensor
n
Lock workstation by finger n
Unlock workstation by a finger n
Biometric Boot Security (TBX) support n
Biometric Boot Security (TBX) single sign-on n
Quick launch of single application using finger and biometric menu n
Password bank n
Registration replayed after finger verification n
Notification about registered window by notification box n
Possibility to edit registrations n
Possibility to see the password, which is stored in the
registration (FP authentication needed)
n
Links to registered WWW pages in the menu to allow user
to access the registered pages and replay the registrations
by one simple click
n
Automatically offer registration of window with password
field
n
Possibility to backup all registrations n
Possibility to use one registration in biomenu as top action
(instead of Lock computer)
n
Deactivate screensaver by finger n
1For detailed description see section 6.

PS QL Datasheet
7/15
Security features:
User’s data encryption n
File folder “My Safe” in “My documents” folder will be
encrypted.
n
Access to “My Safe” can be locked/unlocked by a finger
(from menu)
n
My Safe can be resized n
My Safe can be unlocked from standard Open/Save file
dialogs
n
Fingerprint Reader support n
Automatic installation of HW drivers during setup n
USB Selective Suspend (Win XP only)n
Ultra low power finger detect mode (Win XP only)n

PS QL Datasheet
8/15
6Feature description
6.1 Targeted for Windows OS
The PS QL will work with the following OS:
•Windows XP
•Windows 2000
•Windows Me and 98.
The most suitable environment is Windows XP with Fast User Switching feature turned on,
where users can benefit from the Fast User Switching features of PS QL.
6.2 Automatic hints, which will help user to understand the product and solve
problems
When some problem occurs (e.g. reader is not connected) a hint will be shown. The hints
will be shown using Windows XP “balloon” windows above the icon tray in taskbar. User
need not react to hints, they will automatically disappear after a while or when the
situation changes.
6.3 Tutorial teaching user how to use strip sensor
In the version supporting strip sensor user can go through tutorial which will help him to
use the strip sensor properly. The tutorial is started during the first enrollment but the
user can access the tutorial also later from Start Menu.
Figure 2: Tutorial helps users to learn how to use
the fingerprint sensor properly
6.4 Automatic user enrollment after new user logon
When user logons using FUS and there is no finger associated with this user then the user
will be prompted to enroll after logon. When a user that is not yet enrolled puts finger on
the sensor (or swipes) the welcome screen with possibility to enroll is shown.

PS QL Datasheet
9/15
Figure 3: Protector Suite QL Welcome screen
with “Enroll Now” button
6.5 One touch function to activate User Interface
If the user is logged on to the computer, user just has to place/swipe his finger on the
sensor to invoke the main Protector Suite QL menu.
6.6 User interface optionally controlled by movement of user’s finger on the
sensor
The user interface can be controlled by a mouse or by movement of user’s finger on the
sensor. The user can move in the menu up and down by his finger and can also choose an
item in the menu by “tapping” (“clicking”) on the sensor.
6.7 User can use sensor for simulation of mouse wheel
By pressing the Scroll Lock key, user can switch PS QL to mode when moving finger on the
sensor simulates rotating the mouse wheel and so he can use the sensor for scrolling in
any application.
6.8 Biometric user interface feedback is done by simple icons
When user puts finger on the sensor so well that it is immediately recognized, then there
will not be any interface showing the finger. If the user should change position of the
finger a simple icon will be shown on the screen. The window will disappear automatically
after timeout.
6.9 Easy setup
The installation is as simple as possible. No optional components or unnecessary dialogs.

PS QL Datasheet
10/15
6.10 Silent setup
A silent setup mode is supported. This allows remote or unattended installation, e.g. using
Microsoft SMS server.
6.11 Microsoft Installer support
The setup uses the Microsoft Installer technology and therefore supports all Microsoft
Installer features.
6.12 Configurable skins
To increase the future coolness factor it is possible to change the look of the main user
interface. Multiple skin choices are available in the product, including a “TouchChip look”
and “XP look” skin.(see Figure 1on page 5for skin examples)
6.13 Biometrics support for Logon and Fast User Switching feature
User logon to Windows or user switching can be done with fingerprint.
6.14 Possibility to lock workstation by finger
When logged-on user puts his finger on the sensor a Protector Suite QL menu is shown.
This menu offers an option “Lock workstation” which can be used to lock the workstation.
6.15 Possibility to unlock workstation by finger
When the workstation is locked the user can use his finger to unlock it.
6.16 Boot Security support
Support for notebooks with biometric boot protection (TBX –TouchChip BIOS eXtension).
TBX enrollment can be performed through PS QL.There is a single unified administration
for both PS QL and TBX. Refer to Chapter 7on page 13 for details on TBX.
6.17 Boot Security single sign-on
This optional feature allows the user to pass through both the Boot Security and the
Windows Logon by a single touch/swipe of a finger.
6.18 Quick launch of single application using finger and biometric menu
User can choose application, which will be assigned to the first option in the biometric
menu (instead of Lock workstation). This application is then easily accessible.
6.19 Password bank
Password bank holds user’s passwords to Internet and local applications.
6.20 Registration replayed after finger verification
To replay the registration user must be successfully verified. Replaying of a registration is
triggered by a finger, not automatically when a dialog appears.
6.21 Notification about registered window by notification box
When a window, which is registered in the Password bank, is shown on the screen then the
window’s frame is highlighted and optional balloon info will be shown which will tell the
user that this window has some registration. The user then can replay this registration by
putting his finger on the sensor.

PS QL Datasheet
11/15
6.22 Possibility to edit registrations
User can edit the registration data (like the username or password) for each registration.
The user can change parts of the registration without the need to re-register the window.
6.23 Possibility to see the password, which is stored in the registration
The passwords stored in the registration are not shown by default but the user can make
them visible during editing.
6.24 Links to registered pages in menu to allow user to access the registered
pages and replay the registrations by one simple click
The web pages, which are registered by the user, will be listed in a submenu of the main
control menu. When user selects such a registration the web browser will be started with
the selected web page. The registration will be then replayed automatically.
Figure 4: Replaying a registration using links in Bio Menu
6.25 Automatically offer registration of window with password field
When a window with password field will pop up a balloon window is shown reminding the
user that he can save this window to password bank. It is possible to turn off this feature.
6.26 Possibility to backup all registrations
User can export and import registrations.
6.27 Deactivate screensaver by finger
When the screensaver is active and user will put finger on the sensor then the screensaver
will be terminated (like when mouse is moved).

PS QL Datasheet
12/15
6.28 File folder “My Safe” in “My documents” folder will be encrypted
Everything stored in this special folder is on-line encrypted. User does not need to care
about choosing files to encrypt –just store the file in this folder. The user also does not
need to remember to re-encrypt the file after usage.
6.29 Access to “My Safe” can be locked/unlocked by a finger (from menu)
The safe can be manually locked or unlocked by a finger; this action is accessible from the
main control menu.
6.30 My Safe can be resized
It is possible to change the size of the My Safe folder using My Safe options.
6.31 My Safe can be unlocked from standard Open/Save file dialogs
6.32 It is easy to access files in My Safe folder.
When a user browses to the folder in Explorer or Open/Save file dialog and the folder is
locked, the user is automatically prompted to put/swipe his finger, and then can enter the
folder.
6.33 Automatic installation of HW drivers during setup
During software installation, all necessary drivers for the hardware are installed.
Detection/activation of the hardware with hints what to do is done by the application later.
6.34 USB Selective Suspend (Win XP)
Drivers for TouchStrip strip sensor support the USB selective suspend feature to minimize
power consumption.
6.35 Ultra low power finger detect mode (Win XP)
Drivers for strip sensor use a combination of USB selective suspend and USB remote
wakeup features to implement an ultra low power finger detect. When PS QL is waiting for
a touch/swipe of a finger, the strip sensor can operate in USB suspended mode and draw
less than 1 mA current.

PS QL Datasheet
13/15
7TouchChip Bios eXtension (TBX) support in
Protector Suite QL
7.1 Introduction
TBX technology allows to protect computer from boot and subsequent usage by an
unauthorized user. TBX BIOS level protection by fingerprint authentication is optional –it
can be enabled or disabled using manually by changing a setting in PS QL, or it can be
turned on automatically by PS QL (see below).
Figure 5: TBX technology requires fingerprint
authentication before computer is allowed toboot
7.2 Turning on TBX
When any user runs the Enrollment Wizard for the first time while TBX technology is
switched off, then upon a succesful completion of finger enrollment, the user is prompted
if he wants to enable the TBX. If the user declines, he is informed that TBX can turned on
any time later using the Settings dialog.
The configuration of TBX is located in the Settings dialog which can be started frombio-
menu after user's finger is verified. The settings page for TBX contains these options:
1Turn TBX on/off
2Turn on/off auto logon after TBX verification.
3Change the TBX backup password (anybody can change it without the knowledge of
the previous password)
7.3 User enrollment

PS QL Datasheet
14/15
PS QL software represents the only means to enroll and administer fingerprints for
fingerprint BIOS level protection (TBX). When a user edits his enrolled fingers (adds or
deletes templates) in PS QL, the change is automatically uploaded also to the TBX
memory.
Please note that every user can edit only his fingers; user cannot influence the TBX
storage of fingers of other users.
For security reasons, PS QL remembers the last finger database it stored in the TBX
memory and is capable of detecting any unauthorized changes in it. Fingerprint templates
used for TBX are stored directly in the strip sensor module (henceforward “TBX memory”)
to achieve higher security.
7.4 Single sign on feature: one touch or swipe to access PC and log on to
Windows
Fingerprint used for TBX authentication can be used for automatic log on to the operating
system via PS QL. This single sign on feature is optional, and can be activated or
deactivated in the PS QL settings.

PS QL Datasheet
15/15
Information furnished is believed to be accurate and reliable. However, Upek, Inc assumes no responsibility for the consequences
of use of such information not for any infringement of patents or other rights of third parties which may result from its use. No
license is granted by implication or otherwise under any patent or patent rights of Upek, Inc. Specifications mentioned in this
publication are subject to change without notice. This publication s upersedes and replaces all information previously supplied.
Upek, Inc's products are not authorized for use as critical components in life support devices or systemswithout express written
approval of Upek, Inc.
The Upek logo is a registered trademark ofUpek, Inc.TouchChip, Protector Suite and Protector Suite QL are trademarksor
registered trademarksof Upek, Inc . All other products described in this publication are trademarks of their respective holders
and should be treated as such.
© 2004 Upek, Inc -All Rights Reserved
Upek, Inc.
http://www.upek.com