eNFAS authentication server system
eNFAS is the authentication server system protecting from danger of loss and fraudulent use by utilizing biometric data in order to solve the existing security problems, which occurs during authentication procedure using password or IC card and it can save biometric data and transfer a user’s authentication result using saved biometric data to the user(client). In addition, duplex system increases availability and it supports inter-working with SSO for the inter-work with legacy system and other existing legacy systems through a variety of clients.
Functions:
User Management
Verification DB Management
Log Management
Screen Saver
Log-on
System Restriction
File Encryption
DB Backup
No. |
Module |
Platform |
3rd Party Module |
Miscelleneous |
| 1 |
Master Server
|
Windows
|
BEA WebLogic
|
WAS(Application
Web Server) |
| 2 |
DB Server
|
MS-SQL /
Oracle |
eNBSP SDK
|
|
| 3 |
Search Server
|
Windows
|
eNBSP SDK |
1)Master Server:
Operating at J2EE-based WAS
At the request of a client, delivering it to sub system and showing the results to the client
Monitoring status of each sub system and performing load balancing
Can use L4 switch for duplex ‘Master Server
2) Search Server:
Processing a fingerprint authentication request from Master Server
3) DB Server:
A system in which RDBMS such as MS-SQL and Oracle operates
A system saving fingerprint-related data
Item |
Description |
Remarks |
|
|
OS
|
Win 2000 SVR
and higher |
|
|
|
CPU
|
Pentium4 3Ghz *
2 |
||
|
Memory
|
4GB
|
||
|
HDD
|
30GB and more
|
||
|
WAS
|
WebLogic 8.1
|
BEA
|
|
|
DBMS
|
MS SQL or
Oracle |
System Architecture

Configuration

System Advantage
1. Various Authentication Environments-
Can authenticate fingerprint using web browser and perform C/S authentication using SOAP protocol from web service. No restriction of firewall because of use of web service.
2. Support of a variety of OS and quick & easy acceptance-
No limit of OS type because master server operates on J2EE-based web application server. Because of middleware type, system integration can be appropriately performed.
3. Compatibility with a variety of fingerprint recognition devices-
Also, compatible with other fingerprint recognition devices, not NITGEN’s device.

4. Load Balancing / Distribution structure, Extensibility / High Availability-
Improving performance through distribution between master servers by using L4 switch.
Each unit server can communicate with one another through CORBA and JDBC
Can extend master server and search server in case of increase of users.
Since a client accesses to master server through load balance, it recognizes as a system.

5. Separately operating AES Key site by site by using 128 Bit AES algorithm-
Fingerprint data is encrypted as soon as being extracted from a client and the data is encrypted again by AES algorithm
Highly secured because data is saved after AES encryption when being saved and decoding is not possible because different encryption keys are created site by site although the data is revealed

6. Reinforced fingerprint data security (prevention of fraudulent use of DB)-
Designed to protect fingerprint data from being authenticated although using fingerprint DB at different sites
