Answers

S-Badge frequently asked questions

Straight answers about how S-Badge works: the password-manager, hardware XFA and biometric layers, where fingerprint data lives, standards alignment, integrations and deployment.

About S-Badge

What is S-Badge?

S-Badge is a multi-access, single-user biometric smart badge from Global Net Solutions (GNS). It combines credential vaulting (a password-manager function), hardware X-Factor Authentication (XFA), and on-card fingerprint matching in one badge, so a single tap can unlock physical doors and logical logins such as workstations and web applications.

What are the three layers in the S-Badge 3-in-1 platform?

The three layers are: (1) a password manager function that holds credentials on the badge and passes them to approved applications without a keyboard; (2) a hardware token with X-Factor Authentication (XFA), using FIDO2 / WebAuthn and PKI certificates; and (3) biometric authentication, where the cardholder's fingerprint is matched inside the badge's secure element.

Who is S-Badge for?

GNS designs S-Badge for high-security environments: healthcare (clinicians and hospital workstations), corporate enterprise IT, banking and financial portals, and education (campus safety and attendance). The case study is Lighthouse Pediatrics, a physician practice that adopted S-Badge for physical and logical access.

Where are S-Badge and GNS based?

Global Net Solutions, Inc. is headquartered at 23441 Madison Street #305, Torrance, California 90505, USA. S-Badge is designed in California and manufactured in the USA. Phone: 424 241-0020.

How it works

How does S-Badge authenticate a user?

The cardholder enrolls a fingerprint on the badge itself (three touches per finger, up to two fingers). The badge creates an encrypted mathematical template and matches every later touch inside its secure element. If the on-card match succeeds, the badge becomes active and can present credentials for a door reader (13.56 MHz NFC / RFID) or a login (FIDO2 / PKI). If it fails, the badge stays disabled.

Where is the fingerprint data stored?

Only on the badge. Fingerprint templates are enrolled, encrypted and matched inside the secure element of the card and never transmitted over wireless networks or stored on a server. There is no central biometric database to breach.

How is S-Badge different from traditional multi-factor authentication?

Traditional MFA relies on codes or tokens that can be phished or intercepted in man-in-the-middle attacks. S-Badge confirms identity, possession and liveness in a single touch (X-Factor Authentication), and FIDO2 / WebAuthn will not sign to unauthorized domains, which defeats look-alike login pages.

Does S-Badge replace passwords?

It removes typed passwords from the login path. S-Badge offers passwordless sign-in to Windows Hello, macOS and Linux terminal workstations through an on-card assertion, and the GNS Secure Browser passes credentials to administrator-approved applications (up to 32 web apps) without a keyboard, which also removes keylogging and screen-capture exposure.

How fast is S-Badge?

A fingerprint tap unlocks physical doors and logical sessions in less than one second, scan latency is under 380 ms, and standalone enrollment takes under 30 seconds with no IT administrator involvement.

How does S-Badge protect data in a session?

Session tokens are tunneled with AES 128/256 encryption and a shared key generated per session. S-Badge enforces least privilege with RBAC and ABAC, hardens authentication systems by disabling unused services and protocols, and logs each request (badge ID, PC name, IP address, location and time).

Deployment, standards and integrations

Which standards does S-Badge align to?

GNS aligns S-Badge to NIST SP 800-53, ISO 27001, PCI DSS, NIST SP 800-63A / 63B / 63C, NIST SP 800-205, NIST SP 1800-12 (derived PIV credentials) and the Egypt Financial Cybersecurity Framework. Alignment describes design intent; it does not by itself make an organization compliant.

Which identity systems does S-Badge integrate with?

S-Badge works with OpenID Connect, SAML v2, OAuth, Active Directory (including RBAC, ABAC and automated randomized password management) and the GNS Secure Browser. In healthcare, GNS lists support for Epic, Cerner / Oracle Health, eClinicalWorks, MEDITECH and Athenahealth workflows using FIDO2 / WebAuthn.

Does using S-Badge create biometric privacy liability?

GNS designs S-Badge so the enterprise never collects, stores or transmits biometric files, which removes the central fingerprint database that regulations such as BIPA, GDPR and CCPA are concerned with. Organizations should confirm their own legal obligations with counsel.

Is S-Badge patented?

GNS lists U.S. patent numbers 15/937,683 and 62/360,444 for the S-Badge technology.

How do I request a demo or pricing?

Use the contact form at s-badge.com/contact-us, email info@global-net-solutions.com, or call 424 241-0020. A GNS solution specialist will follow up.

Have a question we did not answer?

A GNS solution specialist can walk you through deployment, integrations and pricing for your organization.