Hide thumbs Also See for SAFR SCAN:

Advertisement

Quick Links

SAFR SCAN Administration Guide
Introduction
SAFR SCAN is a revolutionary touchless access control device that uses your face to verify
your identity. The incredibly fast and accurate SAFR lightweight algorithm runs directly on
the SAFR SCAN hardware for the utmost in reliability and security for your enterprise
needs. This device comes fully featured to allow you to connect directly to any access
control system via a Wiegand or OSDP (Open Supervised Device Protocol) interface.
Simply plug in the PoE (Power over Ethernet) network connection and you are on your
way to experiencing what SAFR SCAN offers.
Documentation Version = 1.2
Publish Date = August 19, 2022
Copyright © 2023 RealNetworks, Inc. All rights reserved.
SAFR® is a trademark of RealNetworks, Inc. Patents pending.
This software and related documentation are provided under a license agreement containing restrictions on use
and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license
agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit,
distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering,
disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.
The information contained herein is subject to change without notice and is not warranted to be error-free. If
you find any errors, please report them to us in writing.
Overview
Page 1 of 52

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SAFR SCAN and is the answer not in the manual?

Questions and answers

Summary of Contents for RealNetworks SAFR SCAN

  • Page 1 SAFR SCAN Administration Guide Introduction SAFR SCAN is a revolutionary touchless access control device that uses your face to verify your identity. The incredibly fast and accurate SAFR lightweight algorithm runs directly on the SAFR SCAN hardware for the utmost in reliability and security for your enterprise needs.
  • Page 2 Overview Page 2 of 52...
  • Page 3: Table Of Contents

    SAFR Accounts ..............................18 Create Reseller Software Download Account ...................18 Create a Customer Software Account for each deployment ..............18 Connect SAFR SCAN SAFR On-Premises Server ..................19 Connect SAFR SCAN to SAFR Cloud ......................20 Installation Guides ............................20 Single Factor Face Authentication ......................20 Single Factor Face Authentication ......................23...
  • Page 4: Overview

    It does this by leveraging standards-based access control protocols (Wiegand or OSDP) to pass credentials to the panel. SAFR SCAN makes it easy to deploy by integrating into your PACS software to download face images and credentials and using them to authenticate card holders.
  • Page 5 Overview Page 5 of 52...
  • Page 6 Overview Page 6 of 52...
  • Page 7 Overview Page 7 of 52...
  • Page 8: Safr Scan Capabilities

    • Works indoors and outdoors in extreme lighting and environmental conditions. o Strong backlight – Applies face prioritized exposure. SAFR SCAN's direct control over camera and fast detection times allow it to adjust exposure in real time to get proper exposure on face.
  • Page 9 Phone stays in pocket / transparent to end user • RTSP Output for integration to VMS o SAFR SCAN camera can be added to VMS and other DVR systems to augment the existing video surveillance system. • Works with masks o Enroll once (without mask).
  • Page 10 SAFR system and then syncing your SAFR SCAN’s Person Database with the SAFR system. Single- or dual-factor authentication - See the Authentication section below. • Mask detection and recognition - SAFR SCAN is able to detect when people are wearing masks, and it can • continue identifying faces even when they’re wearing masks.
  • Page 11: Authentication

    1.3.1 Single Factor Authentication - Face Authentication SAFR SCAN can grant access using people’s faces as their credentials. The faces must pass a liveness check which SAFR SCAN automatically executes before access is granted. Credentials are sent out either via Wiegand, OSDP, or an electronic locking mechanism triggered via a relay connection.
  • Page 12: Safr License Accounts

    A modern Windows user interface with a rich feature set that offers a number of tools to manage and monitor SAFR SCAN and the person database. Includes powerful tools to manage all aspects of access control. • Device management - Centralized configuration of all readers – one at a time or as a group.
  • Page 13: Hardware

    SAFR for Access Control • SAFR SCAN also performs both detection and face matching on the device. A SAFR Software On-Premises license is included with each device. A cloud hosted subscription can be optionally purchased.
  • Page 14 Camera - 1920x1080 high quality camera. Software control over exposure to ensure best lighted. Structured Light emitter - Structured light to measure 3D Depth for spoofing detection. IR Projectors - Useful in face detection in low/no light conditions. First line of defense for recognition in low light White Light Projectors - Useful in conditions with insufficient lighting.
  • Page 15: Back Panel

    SCAN is removed from the wall. This can be useful when staging your devices on a bench for installation. Be careful not to switch the terminal blocks when replacing. This will not harm the SAFR SCAN device but can result in confusion as the device will not function properly.
  • Page 16 2.2.4 Back Panel Inputs and Outputs Figure below shows the T1 and T2 terminal blocks on the rear of the SAFR SCAN reader. The T1 terminal block includes Wiegand in and Wiegand out terminals as well as a Normal Open and Normally Closed relay. The T2 terminal block (Right) includes OSDP in and OSDP out terminals as well as TTL connections and auxiliary power.
  • Page 17 The breakout box will be available June 2023 and includes all connections on the rear of the SAFR SCAN panel as well as USB Ports for additional device storage. The breakout box is connected with a USB-A cable. 2.2.4.2 Ethernet SAFR SCAN ethernet port provides two primary functions.
  • Page 18: Installation

    SAFR scan supports redundant power supply. If power is delivered for both PoE and Aux power, SAFR SCAN will draw 50% of its power from each source. If power to either of the sources fails, SAFR SCAN will increase power draw to the remaining source with no interruption in service.
  • Page 19: Connect Safr Scan Safr On-Premises Server

    If using SAFR Cloud, SAFR SCAN can connect to a single SAFR Cloud Customer Account from multiple independent local area networks (LANs) if network firewalls allow for outbound HTTPS. If using SAFR Server, one SAFR On-Premises Customer Account is required for each LAN where SAFR will be installed, assuming routing is not available between each LAN.
  • Page 20: Connect Safr Scan To Safr Cloud

    In addition, a light connected to a relay turns on when someone is granted access. 4.1 Single Factor Face Authentication This page describes how to install and configure SAFR SCAN to use single factor face authentication to grant access via an electronically locked door. 4.1.1 Hardware Setup...
  • Page 21 4.1.3 Behavior When a known face with access credentials is presented to SAFR SCAN, the access card format and IDs are retrieved from the matched person record. Those credentials are then sent over the Out ports to the PAC panel, which looks up the user credentials and grants access if permitted.
  • Page 22 Installation Guides Page 22 of 52...
  • Page 23: Single Factor Face Authentication

    4.2 Single Factor Face Authentication This page describes how to install and configure SAFR SCAN to use single factor face authentication to grant access via an electronically locked door. 4.2.1 Hardware Setup For all connections, do the following: 1. Pull the appropriate 8-pin connector (i.e. T2 or T1) from its slot to expose the screws that secure the wires.
  • Page 24: Two Factor Authentication

    4.2.3 Behavior When a known face with access credentials is presented to SAFR SCAN, the access card format and IDs are retrieved from the matched person record. Those credentials are then sent over the Out ports to the PAC panel, which looks up the user credentials and grants access if permitted.
  • Page 25: Single Factor Authentication With Relay

    4.3.3 Behavior When a known face with access credentials is presented to SAFR SCAN, the access card format and IDs are retrieved from the matched person record. SAFR SCAN then awaits card reader input from the In ports with the same credentials.
  • Page 26: Two Factor Authentication With Relay

    Go to the Door strike relay side tab and set the Electric door strike relay field to Enabled. 4.4.3 Behavior When a known face with access credentials is presented to SAFR SCAN, the Normally Open (NO) relay port is closed. This action closes the circuit connecting the power supply positive terminal to the positive terminal on the door lock mechanism which in turn releases the lock mechanism allowing the door to be opened.
  • Page 27 4.5.2 Software Setup To configure SAFR SCAN’s software, do the following: 1. Open a web browser on a PC or Mac and go to the SAFR SCAN Console. 2. Go to the Operation tab. a. On the Access Control side tab and set the Access Mode setting to Face Recognition AND Access Card.
  • Page 28: Safr Scan Web Console

    4.5.3 Behavior When a known face with access credentials is presented to SAFR SCAN, the access card format and IDs are retrieved from the matched person record. SAFR SCAN then awaits card reader input from the In ports with the same credentials.
  • Page 29: Live Tab

    Security Tab 5.1 Live Tab Live tab displays the camera view of the SAFR SCAN device on the left and events on the right. 5.1.1 Live Video Preview Displays Video from the SAFR SCAN camera with overlay information adding boxes around the person's face and the person name.
  • Page 30 If Feedback from Panel (via either Wiegand or OSDP) is enabled then SAFR SCAN waits while the Access Control Panel determines if access should be granted or not based on access rules and schedules and displays appropriate feedback to user. Feedback from Panel is described in a separate guide.
  • Page 31 The Infrared Spectrum image was taken with the lights out. 5.1.4 Events The section on the right displays events. There are two types of events that are reported in SAFR SCAN Web Console. They are: Access...
  • Page 32 82% Similar face with no confidence of match. o 79% Different faces. Tailgating – Known person Event shows time, face and scene image as well as enrolled face image and person data. SAFR SCAN Web Console Page 32 of 52...
  • Page 33: People Page

    5.1.4.1 Event Retention SAFR SCAN does not store events locally on the device. If connected to SAFR Server or SAFR Cloud, all events are sent to the server for monitoring, auditing, and reporting. If the network goes offline, events are saved locally and persisted until the network is restored, at which time the cached events are transmitted to the server and deleted locally.
  • Page 34 • Click anywhere on the face image to select a record (multiple records can be selected at once for deletion). ��If faces do not appear, its likely due to setting to persist synced person face images disabled on server. SAFR SCAN Web Console Page 34 of 52...
  • Page 35 ID Class A classification used to classify threat level (Threat, Concern, or No-Concern). SAFR uses ID Class in reports, event filters and notifications. For unknown persons, SAFR automatically assigns following ID Class values: SAFR SCAN Web Console Page 35 of 52...
  • Page 36 Access Card section stores one or more access cards. If multiple cards, a count will be shown. The first card in the list is the Primary. Support for multiple credentials allows a user to hold one or more credentials. The SAFR SCAN Web Console Page 36 of 52...
  • Page 37 A field used to identify a person’s primary location. Can be any string. Location Tags Comma separated list of tags. Can be any string. By convention, tags are separated by commas and each element may contain a name=value or simply a value. SAFR SCAN Web Console Page 37 of 52...
  • Page 38: Operation Settings

    Access Clearances Accepted: Select the access clearances that you want to grant access to your facility. (i.e. When a person with an acceptable access clearance is viewed by the SAFR SCAN device, the door(s) connected to the SAFR SCAN device will unlock.
  • Page 39 • Enrolled and Stranger Monitoring – Record events for known recognized persons and strangers. Strangers are defined as a face that was of sufficient quality to attempt to recognize, but no match was found. SAFR SCAN Web Console Page 39 of 52...
  • Page 40 Settings to enable recording of video to local Micro SD card and optionally to an AWS account. See Digital Video Recording (DVR) Settings section below for information on configuring DVR. 5.3.6 Camera Screenshot below shows Camera Settings available from Operation > Camera. SAFR SCAN Web Console Page 40 of 52...
  • Page 41 While this mode is useful for creating an optimal video recording of entire scene, it will not optimize exposure to the face and thus have negative impact on face recognition. Example with strong backlight Scene Prioritized Face Prioritized SAFR SCAN Web Console Page 41 of 52...
  • Page 42 This takes a few hundred milliseconds. For fast moving objects, you may lose precious moments to perform recognition. Correct Settings - Exposure zone set to region of similar lighting Face not in view Face in view SAFR SCAN Web Console Page 42 of 52...
  • Page 43 Backlight Compensation primarily manages the shutter speed. Shutter speed is also controlled by the Minimum and Maximum Shutter Speed settings. SAFR Camera handles these settings by applying the setting that imposes SAFR SCAN Web Console Page 43 of 52...
  • Page 44 5.3.6.9 White Light / White Light level Controls the white light mode (Auto, On and Off) and the brightness level. In Auto mode, SAFR SCAN will evaluate if white light is needed and turn on automatically if there is insufficient lighting on the face. To avoid a harsh transition, white lights will gradually fade in.
  • Page 45 5.3.8 Display 5.3.8.1 Display Mode Specifies when the SAFR SCAN device’s video region displays the device’s camera feed. There are three possible options: • Activate when face is detected – Display shows Display background when active setting when a face is detected within Activation distance.
  • Page 46 Defines what to display when no faces are present. • Disabled – Screen is off when no faces present. • SAFR Logo – The SAFR SCAN logo is displayed when no faces present. • Face Recognition Prompt – Following image displayed when no faces present.
  • Page 47 SAFR SCAN has been configured to require two factor authentication. • Send credential – Shown when face has been detected and device is awaiting mobile credential as 2 factor. This field is only relevant when SAFR SCAN has been configured to require two factor authentication.
  • Page 48: System Settings

    SAFR Server. There are four possible values for the SAFR Server field. • None: SAFR SCAN isn't connected to a SAFR Server. • SAFR Server: SAFR Camera is connected to a locally deployed (i.e. an on-premises) SAFR Server.
  • Page 49 PAC panel, causing the door the PAC panel controls to unlock. OSDP connection to Card Reader: Enables the OSDP IN A/+ and OSDP IN B/- pins on the SAFR SCAN Device, which are used to connect OSDP-capable authentication devices. Card readers are most commonly used, but you could also connect other devices such as fingerprint readers.
  • Page 50: Security Settings

    Electric door strike relay: Enables the RELAY NO, RELAY NC, and RELAY COM pins on the SAFR SCAN Device. These pins are used to connect relays to the SAFR SCAN device. When a user is authenticated, SAFR SCAN will activate a connected relay for the time specified in the Relay activation duration field below.
  • Page 51: Troubleshooting

    To improve security a new self-signed CERT should be generated. This will overwrite the default self-signed CERT that SAFR SCAN ships with. Using default self-signed CERT holds a risk because the same private key used to decrypt the messages is installed on every SAFR SCAN device shipped from the factory.
  • Page 52 If strong lighting exists, switch to manual mode for backlight compensation as follows: 1. Open SAFR SCAN Settings Operation Page. 2. Change “Backlight Compensation” from “Auto” to one of the manual options. 3. Check if authorization improves and try other settings if not.

Table of Contents