Short answer: To a door reader the card looks like a standard DESFire card, with one difference: applications that require a biometric match can only be read after the fingerprint has been verified on the card. That adds about 250 milliseconds.
An IDEX total access card with DESFire will support all DESFire security settings for the DESFire applications, as well as the option of requiring a biometric match against the enrolled fingerprints.
Readers configured to accept a DESFire application will generally:
- Select the configured Application ID
- Authenticate with the configured key
- Read the desired data out of the configured file
- Return this data to the access control system
When a DESFire application is configured to require a biometric match, this match is performed at step 1 (select the configured Application ID). On a biometric success, the desired Application ID is selected.
Performing this biometric match adds roughly 250 milliseconds to the transaction time.
See: Supported door readers.
Detailed configuration documentation
Detailed documentation on how to encode door credentials on IDEX cards, how biometric protection of credentials works, and how to configure your access control system for it, is available on request. It is not published here. If you are an integrator or a customer setting up door access with IDEX cards, contact us and we will share the documentation and help you through the setup.