Microlatch BIOFOB BLUE User manual

Biofob Blue brief user guide © Microlatch Limited
0
BIOFOB BLUE Operating Guide

Biofob Blue brief user guide © Microlatch Limited
1
Biofob Blue™
User Guide
Biofob Blue User Guide....................................................................................................................0
1.
Overview...........................................................................................................................2
2.
Introduction.......................................................................................................................2
2.1.
Administrator Finger Enrolment Operation (initialisation) .................................2
2.2.
Normal User Operation........................................................................................3
2.3.
Reset Bluetooth Pairing Password .......................................................................3
2.4.
Operational LED Indication.................................................................................3
2.5.
Encryption............................................................................................................4
2.6.
Commands function.............................................................................................4
3.
Specifications ....................................................................................................................8

Biofob Blue brief user guide © Microlatch Limited
2
1. Overview
The Biofob Blue provides a range of security and other functions that are accessible via Bluetooth
communications. Developers of applications for the Host device (e.g. PCs or smart phones) can
incorporate Biofob Blue to increase the security of their applications.
Some examples of potential Host applications using Biofob Blue are:
Unlocking the Host (e.g. smart phone) using a fingerprint
Unlocking an application on the Host using a fingerprint
On-line Fingerprint authorization
Fingerprint authorized automated online log on to web-sites and other systems
Fingerprint authorised Single-Sign-On client (proprietary) or Information Card (standard)
selector.
Fingerprint authorized access to encrypted data stored on the Host or Biofob Blue device.
One-Time-Password (OTP)generation on the Biofob Blue device authorized by a fingerprint
Capture of fingerprint data e.g. for law enforcement officers in the field
2. Introduction
Administrator Finger Enrollment Operation (Initialisation)
The Biofob Blue device requires TWO Administrator fingers to become fully operational.
When you purchase the Biofob Blue new, there are no fingerprints in the database. The first
TWO fingerprints enrolled will become “Administrators”. Certain functions will require an
Administrator (Admin) Finger for access, e.g enrollment of new fingers.
1) To turn Biofob Blue on press the button for about 1s and release, a Blue LED appears.
2) A White (blue/red/green) blinking LED means ready to enroll an Admin Finger
3) Enroll First Admin Finger with approx 6~10 repeated swipes (each time the White LED
blinks, swipe same finger again).
4) Green LED indicates successful enrolment; Red LED indicates unsuccessful
5) After Green LED flashes for successful enrolment of First Admin Finger the White LED
will blink for enrolment of Second Admin, follow steps 3-4.
6) After TWO successful Admin Finger enrolments, Bluetooth is enabled and discoverable
(Blue LED flashing quickly);
7) When the connection is setup between the Host (smart phone) and Biofob Blue, the Blue
LED will flash slowly, the device is ready to receive instructions (Normal mode).
8) To turn off the Biofob Blue press and hold down the button (steady Red LED) for about
5s until flashing Red LED, then release button and the device will power off.
If no connection is established or no instruction is received within 60s, the Biofob Blue will
power off automatically.

Biofob Blue brief user guide © Microlatch Limited
3
2.2. Normal User Operation
When TWO Admin Fingers are stored in database
1) To turn Biofob Blue on press the button for about 1s and release when Blue LED appears.
2) Bluetooth is enabled and discoverable (Blue LED flashing quickly);
3) When the connection is established and Blue LED flashes slowly, the device is ready to
receive instructions (normal mode).
4) To turn off the Biofob Blue device, press and hold down the button(steady Red LED) for
about 5s until flashing Red LED, then release button and the device will power off.
If no connection is established or no instruction is received within 60s, the device will power
off automatically.
2.3. Reset Bluetooth Pairing Password
When TWO Admin Fingers are stored in database
1) Press button and hold down for about 6-7s until LED flashes then release.
2) White LED blinking means ready to swipe Admin finger.
3) Swipe an Admin Finger on each White LED blink and continue doing so until LED
blinks Green.
4) Green indicates successful authorization; Red indicates unsuccessful and the device will
power off automatically, in this case redo steps 1-3.
5)
If authorized, Blue LED is lit for about 2s to reset the pairing password and the device will
power off automatically;
2.4. Operational LED Indication
1)
White (blue/red/green) LED blinks
Requires you to swipe one of two Admin Fingers until Green LED blink
2)
Yellow (red/green) LED blinks
Requires an enrolled finger to be swiped
3) Green LED blinks once
Authorized
4) Red LED blink once
Not Authorized
5) Bluetooth is discoverable
Blue LED flash quickly, 100ms on and 100ms off
6) Bluetooth is paired
Blue LED flashing slowly, 1s off, blink once quickly
7) Bluetooth connection is established
Blue LED flashing slowly, 1s off, blink twice quickly
8) Low Battery

Biofob Blue brief user guide © Microlatch Limited
4
Red LED flashing intermittently
9) Battery recharging (connected via USB/mini USB cable)
Red LED flashing slowly
10) Fully Charged
Green LED flashing
2.5. Encryption
Microlatch uses Code Hoping Encryption to secure the communication between Biofob Blue and
the Host device:
The Biofob Blue and the Host share a mutual Manufacturer ID which is a unique and secret 64- bit
number used to generate unique crypto Keys. When a connection is established Biofob Blue will
send a random 64-bit or 32-bit number to the Host. The Host and BioBlue figure out a 64-bit KEY
with the random number based on the mutual algorithm and Manufacturer ID. This 64-bit KEY
will be used for encryption and decryption during the current connection. The Host should encrypt
the random number and send back to Biofob Blue for authorization; if not authorized, Biofob Blue
will reject this connection.
Code Hoping Encryption provides high level secure communication for all kinds of
applications. The Manufacturer ID and crypto KEYs will not be sent and crypto KEYs will be
different for each connection.
2.6. Commands function
Please read the Biofob Blue API for more information.
1)
Callback
During the interactive biometric functions, where user interaction (placing finger on sensor) is
required, Biofob Blue may send callback packets.
2)
Device ID
Return device ID to host.
3)
One Time Password (Dynamic Password Generator)
If authorized by enrolled finger, the device will generate an event based OTP which is a 6 or 8
digit number and send to the Host.
4)
Tether settings, Update synchronous code and Tether
These 3 commands are mainly used for tethering the BioBlue with the Host via Bluetooth.
5)
Set password and Unlock
These commands can be used to replace the password with fingerprint authentication.
6)
Bluetooth settings
This is used to change the Bluetooth device name and pairing password. If only change

Biofob Blue brief user guide © Microlatch Limited
5
device name or pairing password at one time, please set the other parameter length as zero.
For example:
0x0200000a0608MyBiofobBlue0004, change device name to MyBiofobBlue
0x0200000a06001005875604, change pairing password as 8756
7)
Capture fingerprint image, and Sleep Then Capture fingerprint image
Scan the live finger and return the scanned image.
Data types supported by Biofob Blue:
• PT_GRAB_TYPE_381_381_8 (2) – Grab the whole finger with 3:4 sub sampling (every 4
pixels scaled down to 3 pixels, 381 x 381 DPI), 8 bits/pixel.
• PT_GRAB_TYPE_381_381_8_BINARIZED (4) - Grab the whole finger with 3:4 sub
sampling (every 4 pixels scaled down to 3 pixels, 381 x 381 DPI), 8 bits/pixel, and binarize to
1 bit/pixel.
• PT_GRAB_TYPE_381_381_8_SCAN381 (19) - Grab the whole finger with 3:4 sub
sampling (every 4 pixels scaled down to 3 pixels, 381 x 381 DPI), 8 bits/pixel. Sub sampling
is done directly by the sensor using its native 381 scanning format.
• PT_GRAB_TYPE_508_508_8_SCAN508_508_8 (34) – Grab the whole finger in full
resolution (508 x 508 DPI), 8 bits/pixel. Image is internally scanned using format 508/508/8.
The image data are received using asynchronous data transfer.
The sub sampling factor is the ratio between the full resolution (which is always 508 DPI) and
the resolution of the selected data type. E.g. for the data type PT_GRAB_TYPE_381_381_8
the sub sampling factor is 381/508 =¾. The sub sampling factor can be different for X and Y
coordinates. The image height and width is determined as the multiple of the base image size
(192x512pixels) and the sub sampling factor.
Example: A data type PT_GRAB_ TYPE_381_381_8 was used on BioBlue. Base image size
is 192x512 pixels. Sub sampling factor X = 381/508= 3/4, sub sampling factor Y = 381/508 =
3/4. The image width will be 192*3/4 = 144 pixels, image height will be 512*3/4 = 384
pixels.
Flags: Currently only one flag is defined:
BG_WAIT_GOOD_FINGER (0x01)
If set, the command verifies the quality of the finger image and returns only when the finger
quality would be acceptable for other biometric functions.
8)
Capture fingerprint data and Sleep Then Capture fingerprint data
Scan the live finger, process it into a fingerprint template and optionally return it to the Host.
This function provides a method to Enroll, Verify and Identify fingerprints on line.
Biofob Blue gets the template and sends to Host via Bluetooth, the Host then forwards it
to the authorization center via WLAN/WIFI/3G.
Purpose:
Supported values:
PT_PURPOSE_VERIFY (1); PT_PURPOSE_ENROLL (3);
PT_PURPOSE_ENROLL_FOR_VERIFICATION_ONLY (4)
Flags:
Currently only one flag is defined:

Biofob Blue brief user guide © Microlatch Limited
6
BE_RETURN_TEMPLATE (0x800)
If the flag is set, the function returns the resulting fingerprint template. If not set, the function
only remembers the resulting template as the Last Good Template, but does not return it.
If Capture is successful, the created template will be stored as the Last Good Template and
can be used by biometric matching functions. The lifetime of Last Good Template is until the
next successful template capturing function, but not longer than till the end of session.
9)
Enroll
Scan the live finger once or several times depending on the session settings, and combine the
images into one enrollment template. The enrollment template can be henceforward used as
the biometric ID of given person.
Purpose:
PT_PURPOSE_ENROLL (3);
PT_PURPOSE_ENROLL_FOR _VERIFICATION_ONLY (4)
Flags, Currently defined flags:
BE_HAS_PAYLOAD (0x02) If set, payload data is present. (Not available)
BE_STORE_TEMPLATE (0x08) If set, store the resulting template in the Biofob Blue’s
template database.
BE_RETURN_TEMPLATE (0x800) If set, the command returns the resulting
fingerprint template.
Note: If neither BE_STORE_TEMPLATE nor BE_RETURN_TEMPLATE is set, the
command only remembers the resulting template as the Last Good Template but does not
return it or store it.
10)
Verify
Scan the live finger or use the last captured finger data and try to match it against the supplied
enrollment template. If the function scans a live finger the template obtained will be
remembered throughout the session and can be used by other biometric matching functions.
Flags:
BV_CAPTURE_FINGERPRINT (0x20) If set, the command will at first capture a live
fingerprint and process it into a template to be matched. If cleared, the template to be
matched is the Last Good Template.
BV_RETURN_PAYLOAD (0x400) If set, the Payload data is requested.
11)
Identify
Scan the live finger or use the last captured finger data (Last Good Template) and try to match
it against all the templates stored in Biofob Blue's permanent template database. Return the
slot number of the best matching template if match.
Flags:
BV_CAPTURE_FINGERPRINT (0x20) If set, the command will at first capture a live
fingerprint and process it into a template to be matched. If cleared, the template to be
matched is the Last Good Template.
BV_RETURN_PAYLOAD (0x400) If set, the Payload data is requested. Payload data

Biofob Blue brief user guide © Microlatch Limited
7
originally embedded in the enrollment template. Payload data is available only when a
successful match is achieved and can have zero length (i.e. no payload was in the
enrollment template). Field is present only if BV_RETURN_PAYLOAD flag was set.
12)
Delete finger(s) and Delete all fingers
Delete the given fingerprint template (identified by its slot number) from the fingerprint
database in Biofob Blue. Additional finger names assigned to this slot are deleted also.
These commands require Admin Finger authorization.
13)
Name a finger and get finger name
Name a finger and read a finger’s name. The finger name is assigned as additional public data
to a finger template stored in Biofob Blue's fingerprint database.
14)
List all fingers
Return the list of all fingers stored in the Biofob Blue's finger database together with their
associated public data/finger name.
15)
Set finger payload (Private Data)
Change payload data of a template stored in Biofob Blue's finger database in the given slot.
The Host can set the encryption key as payload to a finger template and read the key by
Identify or Verify command. In this way, the Host can encrypt and decrypt a file or folder by
fingerprint authentication.
16)
Load fingerprint data
Read template data from Biofob Blue's finger database stored in a given slot.
17)
Configure FM
Set the session parameters of the FM. The parameters influence the behavior of many of the
FM's functions, especially the biometrics.
18)
Reboot FM, Power off FM, and Power off BioBlue
Sometimes Power off FM may save some battery power and Reboot FM if necessary.
Host may use Check working status command to check if the FM is connected.

Biofob Blue brief user guide © Microlatch Limited
8
3.
Specifications
Operating Voltage
Charging Voltage
3.35 – 3.7VDC
4 – 6VDC 200mA min Input
Battery Type Rechargeable Lithium-ion Polymer, 180mAh,
3.7VDC
Current consumption Capture & match: 78mA typical
0 mA standby
Fingerprint Templates 1 to 100
Recharge connection type Micro-USB, compatible with all mobile phone
micro-USB
Sensor Type* TCESC4K Swipe sensor
Rugged Sensor Type*
Steel coat protective layer: >10million rubs
Image Resolution* 508 or 381 DPI imaging
Array Width*
High definition 192 pixel array width
Active Array Area* 9.6mm x 25mm image size
False Accept Rate* 0.01%
False Reject Rate* 1%
ESD Protection*
IEC 61000-4-2 Level 4 +/- 15kV Air, +/- 18kV
contact
Operating temperature -15 deg C to 50 deg C
Case Dimensions 56mm (L), 38mm (W), 1.5mm (D)
Case Construction Polycarbonate
Weight 30 grams
Bluetooth Version Bluetooth Spec V2.0 + EDR, Class 2 output power
Bluetooth Pairing password 1234
Communication Security Secure and encrypted mode via Bluetooth
All specifications are accurate at time of publication and are subject to change without
notice. *Information from AuthenTec.
Table of contents