Using OSDP with

Suprema Product

© 2021 Suprema Inc. All rights reserved.

 How can you find Webinar Contents?
1) Email
✓ Suprema Team will provide the presentation and the recorded video link to the registered emails.
✓ It will take about 7 days after reviewing the files with Q&A list.

2) Suprema Connect Website

✓ We will post the recorded video to the site.
✓ https://www.supremainc.com/connect/index.asp
✓ Please google Suprema Connect.

3) Suprema Technical Support Site

✓ You can find the information with Q&A list on
the website below.
✓ Please search Suprema Webinar in the support
page, or simply google it.
✓ https://support.supremainc.com

© 2021 Suprema Inc. All rights reserved.

 How can you ask questions during a webinar?
[Q&A] box

✓ During the webinar, you can leave

your questions in the Q&A box
anytime. Suprema Panels will answer
in real time.

Click!
How to find the necessary icons
✓ Please move your mouse to the bottom of
your screen, the 3 icons will appear.

© 2021 Suprema Inc. All rights reserved.

 Overview
In the physical security market, there are Wiegand and OSDP
methods for communication between readers and 3rd Party
controllers from two different manufacturers. ACU
Due to Wiegand's limit on transferable data size, one-way OSDP
communication, and non-encryption communication, project
requirements for OSDP use are increasing.

In this webinar, we will compare what OSDP is through

Wiegand, and introduce how to use Suprema devices when Suprema
OSDP use is required in the physical security market. Product

© 2021 Suprema Inc. All rights reserved.

 Contents

Contents

01 I About OSDP

02 I Features

03 I How to use

© 2021 Suprema Inc. All rights reserved.

© 2021 Suprema Inc. All rights reserved.
 How do you usually use Suprema Products as
Access Control System?

© 2021 Suprema Inc. All rights reserved.

 Are you aware of Wiegand?

© 2021 Suprema Inc. All rights reserved.

 Are you aware of
Open Supervised Device Protocol (OSDP)?

© 2021 Suprema Inc. All rights reserved.

 Are you able to explain the difference between
Wiegand and Open Supervised Device
Protocol(OSDP)?

© 2021 Suprema Inc. All rights reserved.

 Are you aware of Suprema Products supporting
Open Supervised Device Protocol(OSDP)?

© 2021 Suprema Inc. All rights reserved.

 01

About OSDP

© 2021 Suprema Inc. All rights reserved.

 Could Access Control Panel talk with Reader?
RS485
Access Where are you?
Controller I am here at your RS485 Reader
port #1!
Unit What’s your ID?
My ID is 0.
Okay! I found you!
Good, I am sending the card
data 1234 to you.
Received!

I have the same card number too.

The door relay will release.
Please turn on Green LED.
Okay. I am turning On my
Green LED!
© 2021 Suprema Inc. All rights reserved.
 What is OSDP?

Open Supervised Device Protocol (OSDP) is an

access control communications standard
developed by the Security Industry Association
(SIA) to improve interoperability among access
control and security products.

https://www.securityindustry.org/industry-standards/open-supervised-device-protocol/
© 2021 Suprema Inc. All rights reserved.
 What is OSDP?
1. Bidirectional Communication
2. Communication Protocol based on RS485 serial communications
3. Encrypted Communication as AES-128 when in secure channel mode

AES-128

Access RS485
Reader
Controller
Access Control
Communications
Standard
Twisted
Pair
Required
© 2021 Suprema Inc. All rights reserved.
 Is there any difference from Wiegand?
Category Wiegand OSDP
Wiring Beep & LED Control X (Additional wiring required) O
Cable conductors 5 or more 4 conductor twisted pair
(+Beep/LED control inputs)
Wiring topography Point to Point Multi-Drop or Point-to-Point
Length of cable Minimum 30m Up to 1.2km
Maximum 150m (AWG24 Twisted Pair)
(Depending on the cable type)
Data Size&Rate Max Data Size Up to 256 bytes Up to 1024 bytes
Rate Fixed Variable
(from 9,600 to 115,200)
Communication Reader and Controller Single-way Two-way
(Reader->Controller) (Reader <-> Controller)
Communication X O (Secure vs. open channel options)
Encryption 128-bit AES
© 2021 Suprema Inc. All rights reserved.
 Why has OSDP become popular than Wiegand?

Interoperability Efficiency Security

4
AES-128
Access Reader Access Reader Access Reader
Control Control Control
Panel Panel Panel

© 2021 Suprema Inc. All rights reserved.

 Are you able to explain the difference between
Wiegand and Open Supervised Device Protocol(OSDP)?

© 2021 Suprema Inc. All rights reserved.

 02

Features

© 2021 Suprema Inc. All rights reserved.

 Features

RS485 Controller Controller Reader Available

(OSDP)
Suprema Product Suprema Product O

Reader Suprema Product 3rd party OSDP reader X

3rd party ACU Suprema Product O

© 2021 Suprema Inc. All rights reserved.

 Features: Access Controller, Suprema Product
Recommended
Controller Controller
device
RS485 (Suprema) RS485 (Suprema)
(OSDP) (OSDP)

Reader Reader
(Suprema) CoreStation (3rd party)

Support Not support

© 2021 Suprema Inc. All rights reserved.

 Features: Reader, Suprema Product

Controller
(3rd party) RS485 RS485 Slave reader
(OSDP)

Reader RS485 Slave

(Suprema) Smart card reader

Intelligent Slave
(Including Smart Card)

Support

© 2021 Suprema Inc. All rights reserved.

 Q) We are looking for an OSDP
Reader for the replacement of
Wiegand Card Reader.
Is there any recommendation?

© 2021 Suprema Inc. All rights reserved.

 RS485 Slave reader

RS485 Slave
Smart card reader

Intelligent Slave
(Including Smart Card)

© 2021 Suprema Inc. All rights reserved.

 Features: Reader, Suprema Product
(RS485 Slave Reader)

Vendor Model Basic Secure Firmware

Suprema XPD2-GKDB O O v1.5
Suprema XPD2-GDB O O v1.5
Suprema XPD2-MDB O O v1.5

•Basic: These devices are Wiegand replacements; they provide the supervision benefits of a bidirectional
protocol, protecting them from the common person-in-the-middle attacks.
•Secure: These devices meet the Basic profile but can also handle encrypted messages using Secure
Channel and can enter and exit Basic and Secure modes as claimed.

https://www.securityindustry.org/industry-standards/open-supervised-device-protocol/sia-osdp-
© 2021 Suprema Inc. All rights reserved.
verified/sia-osdp-verified-products
 Features: Reader, Suprema Product
(RS485 Slave Reader)
Advantage 3rd party Card, PIN
Card
- Device Software Reader
Manager App
- HW Options
- OSDP Verified
TCP/IP

card
3rd party ACU
RS485 Relay
(OSDP)
PIN
XPass D2
(v1.5 FW)

© 2021 Suprema Inc. All rights reserved.

 Q) We have the access control system
with user fingerprint information.
Could we use Suprema Fingerprint
Products as an OSDP reader?

© 2021 Suprema Inc. All rights reserved.

 Features: Reader, Suprema Product
(RS485 Slave Reader) Card+Fingerprint
(1:1 Matching)
Compatible Fingerprint Type
3rd party
Format *ANSI378 Suprema Fingerprint Card
Software Enrollment Enrollment
Size 384 bytes

TCP/IP
Card
1234
3rd party ACU
RS485 Relay
(OSDP) Card
BioEntry R2 1234

*ANSI378: Fingerprint Template Standard developed

© 2021 Suprema Inc. All rights reserved. by the American National Standards Institute
 Q) We want to store the biometric
information on a smart card. Can
we use Suprema product as an
OSDP device?

© 2021 Suprema Inc. All rights reserved.

 RS485 Slave reader

RS485 Slave
Smart card reader

Intelligent Slave
(Including Smart Card)

© 2021 Suprema Inc. All rights reserved.

 Note: BioStar 2 Smart Card
✓Access On Card(=Template On Card)
✓ Matches card secure ID with template in the card
✓ Secure ID is the User ID
✓ Needs to be re-written when access group changes or user expires
No Biometric Data No Biometric Data Biometric data in card memory
in the server in the device
(Optional)

Smart Card Smart Card

Stored data on Smart Card:

Biometric, User ID, Secure ID(=User ID), Password, Access Group
Available devices:
Fingerprint Readers, RFID Readers, FaceStation F2
© 2021 Suprema Inc. All rights reserved.
 Features: Reader, Suprema Product
(RS485 Slave Smart Card Reader)
Suprema Application Access On Card
(BioStar 2 SW,
BioStar 2 Device SDK,
3rd party
Software 1) Card only
Suprema G-SDK)
2) Card+Fingerprint/PIN
Smart Card 3) Card+Fingerprint+PIN
TCP/IP
TCP/IP

3rd party ACU

RS485 Relay
(OSDP)

Enrollment Station BioLite N2

© 2021 Suprema Inc. All rights reserved.
 Features: Reader, Suprema Product
(RS485 Slave Smart Card Reader)
Suprema Application Access On Card
(BioStar 2 SW, 3rd party
BioStar 2 Device SDK, 1) Card only
Suprema G-SDK) Smart Card Software
2) Card+Face/PIN
3) Card+Face+PIN
TCP/IP
TCP/IP

3rd party ACU

RS485 Relay
(OSDP)

Enrollment Station FaceStation F2

© 2021 Suprema Inc. All rights reserved.

 Q) Can we manage user information
to Suprema Access Control System
and just send out the card ID or User
ID via OSDP?

© 2021 Suprema Inc. All rights reserved.

 RS485 Slave reader

RS485 Slave
Smart card reader

Intelligent Slave
(Including Smart Card)

© 2021 Suprema Inc. All rights reserved.

 Features: Reader, Suprema Product
(Intelligent Slave Reader)
Card,
Suprema
Card+Fingerprint/PIN,
Application 3rd party Fingerprint only
(BioStar 2 SW,
BioStar 2 Device SDK,
Software Access On Card(Template On Card)
Suprema G-SDK)

TCP/IP TCP/IP
RS485
Default
Mode

3rd party ACU

RS485 Relay
(OSDP)
card
Limited devices
© 2021 Suprema Inc. All rights reserved.
 Features: Reader, Suprema Product
(Intelligent Slave Reader)

Device Model Firmware Version Release Date

BioEntry W2 v1.6.3 or later April 30, 2021

BioEntry P2 v1.4.1 or later May/June

BioStation L2 v1.6.1 or later May 3, 2021

XPass 2 v1.2.3 or later May/June

BioStar 2: v2.8.10 or higher

BioStar 2 Device SDK v2.7.x : June 2021
Suprema G-SDK v1.4 : TBD
© 2021 Suprema Inc. All rights reserved.
 Features (Summary)
OSDP Reader (based on OSDP v2.1.7)
User Information Storage ACU holds the user information Smart Card holds the BioStar 2 - Suprema device and BioStar 2 Server
method user information hold the user information
- Smart Card holds the BioStar 2
method user information
RS485 Mode RS485 Slave RS485 Slave RS485 Default
Method 1:1 verification on the scanned 1:1 verification on the access 1:1, 1:N Device Matching,
template/downloaded template on card 1:1, 1:N Server Matching
from ACU 1:1 verification on the access on card
Operation Card, PIN, Access On Various Operation mode
Card+Fingerprint(ANSI378 Card+Fingerprint/PIN - Device Operation mode
/Suprema format) Access on Card+Face/PIN - Private Authentication Mode
(FaceStation F2 only)
Suprema Mobile Access Not available Not available Support (NFC, BLE)

Exception Code Support Not support Not support Support

Available devices Fingerprint Devices, RFID Card All except FaceStation 2 BioEntry W2 v1.6.3, BioEntry P2 v1.4.1
Devices, XPass D2 (v1.5.0) BioStation L2 v1.6.1, XPass 2 v1.2.3
© 2021 Suprema Inc. All rights reserved.
 Q) All Suprema devices can be an OSDP
Reader to all 3rd party ACU which
support OSDP?

© 2021 Suprema Inc. All rights reserved.

 As an OSDP device, it is possible to connect to the ACU and transfer card
data.

However, we recommend having a consultation. Certain ACU manufacturers

use only OSDP-related commands, while other ACU manufacturers may
additionally implement and use OSDP manufacturer commands in addition
to the OSDP standard commands.
This means that the manufacturer's own response/request command has
been added for operation between the access controller and the reader.

For this reason, it is suggested to discuss the access control manufacture

and suprema team sufficiently in advance. For example, in an exception
code, a specific ACU manufacturer may also search for devices that support
the exception code in Wiegand format.

© 2021 Suprema Inc. All rights reserved.

 03

How To Use

© 2021 Suprema Inc. All rights reserved.

 User
Device RS485 Management
Test
Configuration Wiring (Intelligent
Slave Only)

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

IP based Suprema Product XPass D2, BioEntry R2,

XPass D2
1. Set RS485 Application BioStar 2, Device Manager Device Rest
mode and BioStar 2 SDK, Mobile App Button
baud rate Suprema G-SDK

RS485 mode Slave, Default (Intelligent slave) - -

Baud rate 9600 9600 9600
OSDP ID Set the ID from 3rd party ACU system
(Default ID: 0)
Set the ID if the FW Set the ID with a -
supports Intelligent Slave mobile app(D2 only)
Exception Set if the FW supports
Code Intelligent Slave
© 2021 Suprema Inc. All rights reserved.
 Device
Configuration

1. Set RS485
mode and
baud rate
✓ BioStar2

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

1. Set RS485
mode and
baud rate
✓ BioStar2

Suprema device can send to aggregate accurate logs in exceptional situations such as authentication failures or the
no card of the verified user information. Depending on the system requirement of 3rd party ACU, you can enable
this option and set it in decimal or hexadecimal. You can enter decimal numbers from 0 to 18446744073709551615,
and you can enter hexadecimal numbers from 0 to FFFFFFFFFFFFFFFF or hexadecimal characters. (up to 8 bytes)

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

1. Set RS485
mode and
baud rate
✓ BioStar2
✓ Suprema
Device
Manager
DEVICE
App MANAGER

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

1. Set RS485
mode and
baud rate
✓ BioStar2
✓ Suprema
Device
Manager
App

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

1. Set RS485
mode and
baud rate Reset
✓ BioStar2 Button
✓ Suprema
Device
Manager
App
✓ Device
Reset
Button
XPass D2 BioEntry R2

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

1. Set RS485
mode and
baud rate
✓ BioStar2
✓ Suprema
Device
Manager
App
✓ Device
Reset
Button

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

2. Card Setting
✓ Wiegand Format

© 2021 Suprema Inc. All rights reserved.

 Device
Configuration

2. Card Setting
✓ Wiegand Format
✓ Smart Card Layout

To delete the user fingerprint template information from BioStar 2 DB after writing Access On Card,
enable [Delete personal & credential data when issuing an AoC].
© 2021 Suprema Inc. All rights reserved.
 Device RS485
Configuration Wiring

3. Wiring

3rd party
ACU

RS485 Connection
Reader Port of ACU
(Suprema Device)
D1 (CLK) 485 TRXN (Blue/White stripe)
D0 (DAT) 485 TRXP (Yellow/Black stripe)
GND 485 GND (White/Black stripe)
© 2021 Suprema Inc. All rights reserved.
 User
Device RS485 Management
Configuration Wiring (Intelligent
Slave Only)

4. User Configuration
(Intelligent Slave Only)
✓ Register
Card/Finger

Intelligent Slave:
BioEntry W2/L2 Only
© 2021 Suprema Inc. All rights reserved.
 User
Device RS485 Management
Configuration Wiring (Intelligent
Slave Only)

4. User Configuration
(Intelligent Slave Only)
✓ Register
Card/Finger
✓ Issue Access On
Card

Intelligent Slave:
BioEntry W2/L2 Only
© 2021 Suprema Inc. All rights reserved.
 User
Device RS485 Management
Configuration Wiring (Intelligent
Slave Only)

4. User Configuration
(Intelligent Slave Only)
✓ Register
Card/Finger
✓ Issue Access On
Card
✓ Suprema Mobile
Access

Intelligent Slave:
BioEntry W2 Only

https://support.supremainc.com/en/support/solutions/articles/24000055432--
© 2021 Suprema Inc. All rights reserved.
biostar-2-how-to-use-suprema-mobile-access
 User
Device RS485 Management
Test
Configuration Wiring (Intelligent
Slave Only)

5. Test
Common
✓ Please make sure if the 3rd party ACU’s software added the suprema device as an OSDP reader on the ACU.
✓ Please make sure if user information is stored into the 3rd party ACU's software.

Slave
✓ Scan card
✓ Scan fingerprint if the yellow LED is flicking

Intelligent Slave
✓ Scan the registered card or fingerprint to W2 device.
✓ If there is user authentication success, the Card ID or User ID will be sent from Suprema device to ACU

© 2021 Suprema Inc. All rights reserved.

 FAQ

© 2021 Suprema Inc. All rights reserved.

 Q) Can I store the user information to the device and send the card ID or user ID after
the device matches the user information?
Yes, that is the Intelligent Slave feature which we released recently. Currently, BioEntry
W2, BioStation L2, BioEntry P2, and XPass 2 support. (Please note that P2 and L2 do
not support Suprema Mobile Access.)

Q) Can FaceStation 2 or FaceStation F2 support Intelligent Slave?

A) No, the development schedule is not fixed.

Q) Do you have any experience connecting Suprema devices to 3rd party ACU through
OSDP?
A) Yes, we do. Please contact the Suprema sales team for more details.

Q) What does it mean OSDP Verified for XPass D2?

A) It has been certified by SIA. This reader can be replaceable of Wiegand reader as an
OSDP reader with secure communication.

© 2021 Suprema Inc. All rights reserved.

 Q&A

© 2021 Suprema Inc. All rights reserved.

Thank you.