AST300 M1

This fingerprint authentication device is designed for secure Aadhaar-based identity and authentication use cases and is an STQC-certified single finger scanner. The device is BIS registered (R-72003948) and conforms to IS 13252 (Part-1) safety requirements aligned with IEC 60950-1 standards. It integrates a pre-certified Renesas secure controller, supporting robust on-device biometric processing.
Each device includes a unique identifier, enabling traceability, operational analytics, and fraud- risk management across large- scale deployments. Biometric data is captured live and digitally signed within the device using a unique device key to ensure authenticity. The onboard Registered Device (RD) Service securely performs biometric capture, user interaction during capture (such as preview), signing, and encryption, and returns an encrypted PID block to the host application. All cryptographic and PID-generation operations are executed within a Trusted Execution Environment (TEE).
The device supports hardware- based cryptographic operations, including RSA-2048 key generation, AES-GCM encryption, SHA-256 hashing, and TRNG support. Additional security features include secure memory with key wrapping, secure boot, Trust Zone-based encryption, and FTM-supported security mechanisms. Designed for real-world usage, the device is IP54 rated for protection against dust and water ingress, making it suitable for field and assisted-service environments.