Getting Started with The Keyxentic Token

Getting Started with The Keyxentic Token

HardwareKeyxentic Smart Token schematic diagram

Keyxentic Smart Token schematic diagramKX906 Smart Token equipped with built-in secure element, smart card reader, fingerprint sensor, microSD card reader, Apple Lightning mobile connector and USB type A PC connector.

Prepare the following hardware before start using KX906 Kits App.

(1) An iOS device (iPhone/iPad/iPod) with iOS version 10 or higher
(2) An PC/Laptop with Windows XP/7/8/10, Unbuntu 10.04 + or macOS 10.6
(3) A KX906 Smart Token (included with purchase)
(4) A backup smart card for KX906 Smart Token (included with purchase)

SOFTWARE

(1) iOS KX906 Kits App ( Key Management Tools )
Free iOS App and can be downloaded from Apple AppStore.
DOWNLOAD
Please reference with KX906 Kits iOS App user manual.

(2)iOS Light App ( iOS Secure Mail Client — In Development )
Free iOS App and can be downloaded from Apple AppStore.
DOWNLOAD

(3)iOS BioDrive App (iOS Secure External Disk)
DOWNLOAD
Please reference with BioDrive App user manual.

(4)PC BioDrive Application (Windows version Secure External Disk)
Please reference with BioDrive App user manual.
DOWNLOAD

(5) TideWallet
DOWNLOAD

(6) Software Development Kits (SDKs)
OpenSC is an open source SDKs running on PC environments.
DOWNLOAD

(7) KeyXentic Native Messaging (Chrome Extension)
DOWNLOAD

(8)Popular PC Email Clients
KX906 works with Windows Outlook, macOS Mail and Mozilla ThunderBird for email signing and encryption.

Functionalities

KX906 is an integrated security product equipped with certified secure element, PC/SC smart card reader, capacitive area sensor for fingerprint and MicroSD card reader. With Apple Lightning and USB type A dual connectors, application security can be achieved on PC and iOS environments.

Functionalities of Keyxentic Smart Token

1. Default Settings of Keyxentic Smart Token

Default User PIN: 648219
Default SO PIN ( Initialization Code ): 57621880
Default DKEK ( Hexadecimal Encode ): 9C39685EB56A6F1984C793D6F7A548E8F04511B26A59E82620F682695F8FB9DC
All settings can be changed and before using KX906 Smart Token.

2. KX906 Smart Token Drivers on PC environments

KX906 Smart Token supports CCID mode ( USB key and smart card reader ) and mass storage mode ( USB MicroSD card reader ) switched by hardware slide switch. For PC environments, switch to designated mode before connect KX906 Smart Token to PC USB slot. For iOS environment, both CCID and mass storage mode can be functioned at the same time through APIs.

For PC environment, CCID mode is compatible with Microsoft CCID driver and can be downloaded from windows update directly. For other PC OS, KX906 Smart Token is supported in CCID release 1.4.29.

Supported list can be check in the following links.
https://ccid.apdu.fr/ccid/shouldwork.html
https://github.com/LudovicRousseau/CCID
Extended APDU is also supported by KX906 Smart Token.

3. LED and indications

There are there LED lights ( Green/Blue/Red ) on KX906 Smart Token in two group. Indications are as follows.

GREEN: Dedicated to CCID operations.
Light on when there’s secure IC ( Built-in Secure Element or smart card ) connected and powered on.
Blinking when data transferring between host and secure IC.

BLUE: Light on for a while when KX906 connected to a host and powered on.
Blinking when data transferring between host and KX906 Smart Token.

RED: Light on for KX906 Smart Token unsolved firmware problem.
Blinking when data transferring error between host and KX906 Smart Token

BLUE & RED: When fingerprint scanning is performing, the blue and red LED lights will be flashing.

4. Secure Element Built in Keyxentic Smart Token

KX906 Smart Token is equipped with a certified secure element. The card operating system (COS) version is JCOP 2.4.2 R3 and customers can also have their applets run on the COS. The certification are as follows.

Hardware Certification : CC ( Common Criteria ) EAL 5+
COS (Card Operation System) Certification : FIPS 140-2 Level 3

RSA, EC ( Name Curve) key pair, X.509 certificate and fingerprint match-on-card (MoC) are supported and protected by the certified secure element. Fingerprint patterns are also stored within the secure element.

5. PC/SC Smart Card Reader

The KX906 Smart Token is equipped with PC/SC standard smart card reader for several purposes. All key pairs within built-in secure element can be backup to smart card. Smart card operations are also supported by KX906 Smart Token through PC/SC smart card reader. In iOS environment, built-in secure element and smart card reader can work concurrently. In PC environments, either built-in secure element ( Key Mode ) or smart card reader ( Reader Mode ) can work at the same time. Standard CCID driver is supported for KX906 smart card reader on PC environment through configuration tool (eg. iOS KX906 Kits) and APIs. Extended APDU is also supported.

6. Capacitive Area Sensor for Fingerprint

The KX906 Smart Token is equipped with an capacitive area sensor for fingerprint. With 160*160 pixels and 508 DPI spacial resolution. ISO 19794-2 CC and proprietary fingerprint formats are supported by KX906. Biometric authentication by fingerprint can be applied for application on iOS and PC environments in the same way.

7. Mass Storage

The KX906 Smart Token is equipped with MicroSD card reader for mass storage. Maximum MicroSD card capacity supported is 64GB ( higher volume may be supported but with uncertain compatibility ). In PC environments, KX906 will be a removable disk with mass storage mode. In iOS environment, an App is required for mass storage functionality.