The Russian company Aktiv has introduced the Rutoken BIO, a new generation USB token designed for authentication and electronic signatures. The device implements a three-factor security model, requiring possession of the physical token, a PIN code, and biometric verification via a fingerprint scanner.
The device ensures that critical operations, such as signing documents, require the physical presence of the owner. Biometric data is stored and processed exclusively on the hardware chip, preventing extraction or modification. The device supports the GOST R ISO/IEC 19794-2-2013 standard for fingerprint templates.
Administrators can configure authentication requirements based on the sensitivity of data, aligning with Zero Trust principles. For instance, remote access via VPN may mandate fingerprint verification, while office access might only require the token and PIN. The device allows for multiple key pairs with distinct security settings.
Rutoken BIO is certified as a version of the Rutoken EDS 3.0 cryptographic information protection tool. The company provides the BioSDK software toolkit, enabling developers to integrate biometric authentication into their own applications. The product is available in several form factors.
