use true open architecture for your security solution software.pdfquintron’s next generation...

6
Quintron’s next generation AccessNsite® software brings true meaning to the term Open Architecture. AccessNsite will run on a variety of operating systems including Windows, Linux, OSX, and others. You can choose from a variety of databases in which to store your valuable data such as Microsoft SQL Server, Oracle, MySQL, and HSQLDB. And your choices don’t stop there. AccessNsite manages “best of breed” access control and intrusion hardware platforms such as Mercury, HID, DMP, and others. AccessNsite was written from the ground up as a Java application giving it unlimited system scalability, flexibility, and reliability. The user interface is intuitive to help you get the job done fast. Due to its object-oriented design, alarms and events aren’t just static infor- mation any more. Right-click on an “Access Denied” event and go directly to the badge record to see the assigned access rights. You can setup permissions on each login for granular control of what your users are allowed to do. Run simple reports from the informa- tion you are currently looking at, or create more complex reports against the entire database using the Reports module. Create maps of your facility and manage your alarms graphically. Drill down from a campus view, to a building view, to the actual room on the floor plan where the alarm is occurring. The modular design allows you to place windows where you want, even on multiple monitors. AccessNsite is designed to answer a wide array of needs from the small business to the large enterprise. Make use of everything from database partitioning for managing multi-tenant buildings, to our web client to manage your site remotely, or even our Enterprise Communicator to transfer badge records between multiple sites within an enterprise. AccessNsite is the total solution. Quintron Systems, Inc. Security Systems Division 2105 S. Blosser Road Santa Maria, California 93458 Phone: (805) 928-4343 Fax: (805) 928-9914 Web: www.quintron.com Email: [email protected] Use true open architecture for your security solution Event Photos Module Map Viewer Module

Upload: lynguyet

Post on 26-May-2018

214 views

Category:

Documents


0 download

TRANSCRIPT

Quintron’s next generation AccessNsite® software brings true meaning to the term Open Architecture. AccessNsite will run on a variety of operating systems including Windows, Linux, OSX, and others. You can choose from a variety of databases in which to store your valuable data such as Microsoft SQL Server, Oracle, MySQL, and HSQLDB. And your choices don’t stop there. AccessNsite manages “best of breed” access control and intrusion hardware platforms such as Mercury, HID, DMP, and others.

AccessNsite was written from the ground up as a Java application giving it unlimited system scalability, flexibility, and reliability. The user interface is intuitive to help you get the job done fast. Due to its object-oriented design, alarms and events aren’t just static infor- mation any more. Right-click on an “Access Denied” event and go directly to the badge record to see the assigned access rights. You

can setup permissions on each login for granular control of what your users are allowed to do. Run simple reports from the informa-tion you are currently looking at, or create more complex reports against the entire database using the Reports module. Create maps of your facility and manage your alarms graphically. Drill down from a campus view, to a building view, to the actual room on the floor plan where the alarm is occurring. The modular design allows you to place windows where you want, even on multiple monitors.

AccessNsite is designed to answer a wide array of needs from the small business to the large enterprise. Make use of everything from database partitioning for managing multi-tenant buildings, to our web client to manage your site remotely, or even our Enterprise Communicator to transfer badge records between multiple sites within an enterprise. AccessNsite is the total solution.

Quintron Systems, Inc.Security Systems Division

2105 S. Blosser RoadSanta Maria, California 93458

Phone: (805) 928-4343Fax: (805) 928-9914

Web: www.quintron.comEmail: [email protected]

Use true open architecture for your security solution

Event Photos Module Map Viewer Module

Quintron Systems, Inc.Security Systems Division

2105 S. Blosser RoadSanta Maria, California 93458

Phone: (805) 928-4343Fax: (805) 928-9914

Web: www.quintron.comEmail: [email protected]

NavigationA simplified and intuitive user interface, with right click capabil-ity enabling one-click navigation anywhere, makes for a quick and smooth workflow. The customizable Quick Launch module allows for creation of shortcut buttons for opening modules, dis-playing device status, issuing device commands, executing OS commands, or opening a web page.

Personnel ManagementData entry is straightforward and efficient in the AccessNsite Personnel module with simplified data entry, capture, retrieval, and reporting. Unique features include: Image capture and signature capture with chroma-key imaging capabilities; auto-matic enrollment using a driver’s license scanner, or smart card readers; custom credential watch colors display any time a badge is used in the system; and fully customizable fields for Personnel, Badge and Temporary Badge records.

System Events and AlarmsEvents and alarms are displayed in real-time with configurable priorities, line colors, alert sounds and alarm instructions. With one click, acknowledge alarms, obtain instructions, or display the alarms in a graphical location. Duplicate alarms are organized in a “count” table, increasing the count rather than scrolling new alarms. Video integration allows users to compare access event video to stored personnel images.

Graphic MapsAccessNsite features an unlimited number of vector-based graphical maps with zoom and crop capabilities, allowing for enhanced scaling features. SVG, PNG, JPG, and BMP file for-mats are supported, with fully customizable device, command, and location icons. The customizable “map view” highlights specific sections of saved maps. Maps include multiple user defined layers. Devices, commands, locations, and map links are all plotted using a simple drag-and-drop functionality. Alarm activity and device status are displayed and can be con-trolled directly by the device icon on the map.

Hardware ConfigurationsAccessNsite brings multiple hardware platforms together into the same cohesive application. Hardware is defined within the application using wizards which can be customized. Devices can be viewed and sorted by address, name, or hierarchical location within your facility. Right-click devices to issue commands, view recent events, or view device audits. Easily find your devices within the hardware tree using our quick search capability.

Camera SupervisionThe Camera Manager module allows for operators to control cam-eras with built in controls. Device and camera linking captures and tracks all events and alarms with video. The External Digital Video Recorder module allows for custom DVR’s to be added to the system. Cameras can be assigned to pre-defined presets for PTZ cameras.

Advanced CapabilitiesAutomate the system with custom automation rules triggered from events, time schedules, or from manual commands. Use automation rules to execute device commands, personnel and badge group edits, reports, CSV imports and/or external com-mands. Send event results and notifications using email, FTP or Sys Log. Use partitioning to manage multi-tenant buildings or allow individual departments within an organization to manage their own data. Create and edit badge designs with the integrated Badge Designer module. Use our web client to run AccessNsite in any modern web browser. Use our Enterprise Communicator to transfer badge records between multiple sites. Our API allows you to integrate any peripheral application into AccessNsite.

System Monitoring ToolsMonitor system activity, alarms, and safety reports in the AccessNsite Dashboard module. Built-in system monitoring tools allow operators to view real-time events occurring in the system in graphical form. Drill down actions allow operators to get specific information from charts and graphs.

AccessNsite® is a cross-platform (Windows, Unix, Linux, and Mac) and database independent modular access control solution. With AccessNsite, any facility, large or small can be protected.

Quintron Systems, Inc.Security Systems Division

2105 S. Blosser RoadSanta Maria, California 93458

Phone: (805) 928-4343Fax: (805) 928-9914

Web: www.quintron.comEmail: [email protected]

As a security professional, you know the importance of having a compliant system that you can count on day after day, regard-less of the evolution of the directive and its details. That is why selecting the right physical access control system (PACS) vendor is paramount. Quintron has a legacy of engineering excellence proven over decades of delivering requirements driven solutions for mission critical national security agencies and organizations.

Quintron is committed to providing the best HSPD-12 physical access control system − AccessNsite PACS®. To that end, we’ve dug into the details and searched out critical technology partners. We seamlessly integrated the essential functional components necessary to meet GSA, NIST, OMB, and the White House’s re-quirements to leverage the federally mandated, PKI enabled, smart credential carried by all federal employees to provide an unprec-edented level of facility security.

Quintron fully understands the technical challenges that must be overcome in order to provide a system that is compliant both today and tomorrow. Built on the Java programming language, AccessNsite can be installed on any operating system, use any

database, and be located on any virtual machine or hosted in the cloud. This is a tremendous advantage in today’s IT-centric government enterprise. AccessNsite simultaneously supports the industry’s leading access control and alarm monitoring panels in the same PACS. As a security administrator, you now have the option to continue supporting your existing panels and install new panels from another manufacturer; allowing you to keep pace with changing technologies.

For the past 41 years, Quintron Systems Inc. has designed, developed, and deployed mission critical command, control, com-munications, and security solutions for federal, state, local, and contractor organizations worldwide. No provider of HSPD-12 solu-tions is better positioned to guarantee compliance to the rigorous specification for HSPD-12 PACS facility security systems. No one. That is why Quintron’s AccessNsite should be #1 on your PACS provider short list.

Turn the page to see how we supply the steps necessary to reach full compliance on spec, on schedule, and on budget.

The complete HSPD-12 security solution

Quintron Systems, Inc.Security Systems Division

2105 S. Blosser RoadSanta Maria, California 93458

Phone: (805) 928-4343Fax: (805) 928-9914

Web: www.quintron.comEmail: [email protected]

The Steps to HSPD-12 PACS Compliance

THE FIRST STEP to HSPD-12 compliance is to enroll the credentials carried by your organization’s staff or authorized visitors into the system. This process captures and stores data from the smart credential into one or more databases that are part of the new HSPD-12 compliant PACS. AccessNsite can support enrollment readers at multiple locations on your network, such as in your lobby, security

office, and/or badging office.

The user docks their credential in the enrollment reader and enters the card’s PIN on the reader’s keypad. This opens access to the card’s data so the reader can perform several critical steps. The card is checked for an expired certificate date and immediately rejects it from enrollment if expired. If the card is still valid, the user can be prompted to present a biometric (usually a fingerprint) to validate against the biometric stored on the card.

Next, the card is challenged using the PKI encryption process which detects modified and, more importantly, cloned or copied cards. If the PKI challenge fails, the credential is immediately rejected from the enrollment process; otherwise, the certificate can be checked against a revocation list using Online Certificate Status Protocol (OCSP) or other blacklists to ensure validity. If the card is valid, the enrollment process continues by harvesting the card-holder’s unique data and certificates and storing that data in a repository.

At this point, the credential data is transferred from the repository database into the AccessNsite database and is either manually or automatically assigned a default set of access privileges making the smart card ready for use at the door.

Quintron Systems, Inc.Security Systems Division

2105 S. Blosser RoadSanta Maria, California 93458

Phone: (805) 928-4343Fax: (805) 928-9914

Web: www.quintron.comEmail: [email protected]

WHEN A USER PRESENTS a credential at the door, the AccessNsite PACS authenticates the card according to the current security level and grants access, as appropriate, based on the access privileges assigned to the user.

Within the AccessNsite software, the security level at which cards are validated can be raised or lowered in real-time by changing the number of authentication factors enforced to obtain

the desired type of protection (Controlled, Limited, and Exclusion) described in NIST Special Publication 800-116. Providing all the required information (e.g. biometric) exists in the original enrollment data, this can be done without having to re-enroll any credentials.

Quintron’s smart card readers are capable of reading contact and contactless CAC, PIV/PIV-I, TWIC, FRAC, GSA and other govern-ment issued smart cards. Quintron’s readers and panels perform a challenge-response at the door using the Public and Private keys that are stored on the smart card. Upon a successful challenge, Quintron’s newest control panels match the smart card’s FASC-N or GUID codes bit for bit to the same numbers stored within the panel. Be aware, many panels offered in the commercial market cannot store the entire identifier and are limited to storing a hash, or reduced number of bits, that place them out of compli-ance with HSPD-12.

Quintron’s newest panels and readers provide a trusted level of security and meet the toughest part of the HSPD-12 spec. This is why Quintron has dozens of these systems in operation today across numerous Federal sites.

FINALLY, the PACS re-validates cards by connecting, once every 18 hours (or per set schedule), to the Federal Bridge via available OCSP responders to authenticate the current status of all of the PIV credentials stored in the PACS database. Full path discovery and valida-tion (PDVAL) is performed periodically on the certification path to ensure the integrity of the certificate trust paths.

Any credentials that have been revoked will be automatically dis-abled within the PACS. Any attempts to use disabled credentials will be denied and displayed in real-time as an event and/or an alarm.

Full logging of activity within the system allows you to run reports on items such as:

• Verification of all PKI processing• Credential number processing and transmission• Software driven configuration changes• Periodic certificate PDVAL and status checking• Alarm reporting and credential tracking• PKI policies for name constraints, path constraints, and validity checks• Date individuals were provisioned or de-provisioned• All readers and their modes

Quintron Systems, Inc.Security Systems Division

2105 S. Blosser RoadSanta Maria, California 93458

Phone: (805) 928-4343Fax: (805) 928-9914

Web: www.quintron.comEmail: [email protected]

Call Quintron today to learn more and move ahead to the future in PACS.

Quintron Systems

Telephone: (805) 928-4343Email: [email protected]

FEDERATED ACCESS CONTROL – THE NEXT STEP

For over 20 years, Quintron has delivered an advanced federated access control middleware platform that is deployed worldwide and has distributed millions of badge records (with field level selection) between independent agencies of the Federal government.

No other access control vendor can match Quintron Systems in their level of experience in federated access control. While the core concept of HSPD-12 was to create a trusted credential that could operate across all federal agencies by being locally enrolled into the PACS at each agency site, it did not initially address a solu-tion for backend credential data sharing between agencies.

Quintron’s next generation of federated access management, the Enterprise Communicator, is now available as an integrated capabil-ity within Quintron’s PACS – AccessNsite. The Enterprise Commu-nicator allows individual agencies to automatically share credential data with remote sites, or other agencies, and authenticate those credentials against validation databases and services in order to automate authorized access privileges of federally issued creden-tial holders as they travel between agency sites and organizations. Quintron can implement this technology today on any scale from one door to thousands, and from one to millions of credentials.