How does S-Badge authenticate a user?
The cardholder enrolls a fingerprint on the badge itself (three touches per finger, up to two fingers). The badge creates an encrypted mathematical template and matches every later touch inside its secure element. If the on-card match succeeds, the badge becomes active and can present credentials for a door reader (13.56 MHz NFC / RFID) or a login (FIDO2 / PKI). If it fails, the badge stays disabled.
Where is the fingerprint data stored?
Only on the badge. Fingerprint templates are enrolled, encrypted and matched inside the secure element of the card and never transmitted over wireless networks or stored on a server. There is no central biometric database to breach.
How is S-Badge different from traditional multi-factor authentication?
Traditional MFA relies on codes or tokens that can be phished or intercepted in man-in-the-middle attacks. S-Badge confirms identity, possession and liveness in a single touch (X-Factor Authentication), and FIDO2 / WebAuthn will not sign to unauthorized domains, which defeats look-alike login pages.
Does S-Badge replace passwords?
It removes typed passwords from the login path. S-Badge offers passwordless sign-in to Windows Hello, macOS and Linux terminal workstations through an on-card assertion, and the GNS Secure Browser passes credentials to administrator-approved applications (up to 32 web apps) without a keyboard, which also removes keylogging and screen-capture exposure.
How fast is S-Badge?
A fingerprint tap unlocks physical doors and logical sessions in less than one second, scan latency is under 380 ms, and standalone enrollment takes under 30 seconds with no IT administrator involvement.
How does S-Badge protect data in a session?
Session tokens are tunneled with AES 128/256 encryption and a shared key generated per session. S-Badge enforces least privilege with RBAC and ABAC, hardens authentication systems by disabling unused services and protocols, and logs each request (badge ID, PC name, IP address, location and time).