Authentication & Card Readers Glossary

39 terms on RFID, NFC, smart cards and secure authentication in document management - clearly explained.

No entries found. Try a different search term.

A

Access Control Layer

Security layer for managing access rights at user, group and device level. Enables granular permissions for scanning, printing and archiving functions. Docuflair Access Control provides role-based management across all connected devices.

Learn more about Docuflair Access Control

B

Badge

ID or chip card for identification and authentication at devices. In document management, badges are commonly used for Follow-Me-Printing and secure device access. A single badge can combine building access, time tracking and MFP authentication.

beA (Special Electronic Lawyer Mailbox)

Secure electronic communication system for lawyers in Germany. The beA enables legally binding electronic correspondence with courts and other lawyers. Docuflair creates beA-compliant documents with qualified electronic signatures.

Biometrics

Authentication method based on unique physical characteristics such as fingerprint, facial recognition or iris scan. Biometric methods provide high security without passwords or chip cards. At the MFP, biometric features can be used for authentication via NFC-enabled smartphones.

C

Card Authentication Kit (B)

Kyocera add-on licence (CAK(B)) required to operate USB card readers on Kyocera HyPAS MFPs. Enables user authentication via ID card at the device. The CAK(B) must be activated separately in the device licence settings before a card reader can be connected.

D

Dual-Frequency Reader

Card reader supporting two frequencies (125 kHz and 13.56 MHz). Enables simultaneous use of legacy proximity cards and modern smart cards at a single device. Ideal for organisations transitioning from older card systems to more secure technologies.

E

eID (Electronic Identity)

Digital identity proof per eIDAS Regulation of the EU. Enables cross-border authentication in Europe using national identity documents. The eID function on modern ID cards can also be used for secure login to document management systems.

EM4100 / EM4102

Widely used LF transponder chips (125 kHz) manufactured by EM Microelectronic. EM4100 and EM4102 are the most commonly deployed card technologies in the low-frequency range, used worldwide for access control and time tracking. The chips store a permanently programmed, unique ID number (read-only). Due to their prevalence, they are supported by virtually all multi-frequency card readers.

Elatec TWN4

Professional multi-technology USB card reader series from Elatec. Available in various models supporting 60+ card types including MIFARE, HID, LEGIC and NFC. Used with Kyocera-specific firmware for MFP authentication, the TWN4 is one of the most widely deployed readers in enterprise document management environments.

F

FeliCa

Contactless smart card technology developed by Sony, operating at 13.56 MHz (HF). Primarily used in Japan and Asia for transit tickets (Suica, PASMO), electronic wallets and access control. FeliCa is supported by multi-technology card readers such as the Elatec TWN4 via ISO 18092.

Follow-Me-Printing

Print function where jobs are stored centrally and released at any printer after authentication (e.g. via chip card or PIN). Increases security by preventing confidential documents from being left unattended in output trays. Also reduces waste from uncollected print jobs.

Learn more about Docuflair Print

H

HF (High Frequency)

Frequency range at 13.56 MHz used for contactless smart cards and RFID transponders. HF is the standard for most modern card technologies such as MIFARE, DESFire, HID iCLASS, LEGIC Advant, NFC and FeliCa. Typical read range is up to 10 cm. Governed by ISO 14443 (proximity), ISO 15693 (vicinity) and ISO 18092 (NFC).

HID (iCLASS / Seos)

HID Global is a leading manufacturer of access control systems. iCLASS and Seos are contactless smart card technologies for secure authentication. Docuflair supports HID card readers for user login at the MFP, enabling seamless integration with existing building access infrastructure.

HITAG

NXP transponder family in the LF range (125 kHz). HITAG 1 and HITAG 2 are legacy variants, while HITAG S offers enhanced security features. Used for access control, vehicle identification and industrial applications. Supported by multi-technology card readers such as the Elatec TWN4 (without encryption).

I

ID Austria

Austrian digital identity system, successor to the mobile signature (Handy-Signatur). Enables secure authentication and qualified electronic signatures for Austrian citizens. ID Austria can be used for verified login to government services and digital document workflows.

Inepro

Dutch manufacturer of USB card readers for multifunction printers. Inepro card readers support numerous card technologies (MIFARE, HID, LEGIC, EM and others) and are used with MFPs from manufacturers such as Ricoh, Konica Minolta and Sharp. The readers enable user authentication via smart card for Follow-Me Printing and secure scanning.

More about compatible devices

ISO 14443

International standard for contactless smart cards with a range of up to 10 cm. The foundation for MIFARE, DESFire and many other contactless card technologies. Operates at 13.56 MHz and is the most widely used standard for MFP authentication.

ISO 15693

International standard for vicinity cards with a range of up to 1 metre. Commonly used for library systems and warehouse management. The extended range makes it suitable for hands-free applications but offers less security than ISO 14443.

L

LF (Low Frequency)

Frequency range at 125 kHz or 134.2 kHz used for contactless RFID transponders and proximity cards. LF technologies such as EM4100, HID Prox, HITAG and Indala are widespread in existing access control systems. Typical read range is up to 15 cm. LF cards are cost-effective and robust but offer less security than modern HF technologies. Dual-frequency readers support both LF and HF.

LEGIC (Prime / Advant)

Swiss card technology for access control and authentication. LEGIC Prime is the legacy system widely deployed in existing installations, while LEGIC Advant offers enhanced security with AES encryption. Both formats are supported by modern multi-technology readers such as the Elatec TWN4.

M

MFA (Multi-Factor Authentication)

Security method requiring at least two independent factors for identity verification: knowledge (password, PIN), possession (chip card, smartphone) and/or biometrics (fingerprint). Significantly increases security compared to simple password authentication.

MIFARE (Classic / DESFire / Plus)

NXP contactless card technology for authentication. MIFARE Classic is widespread but has known security weaknesses. DESFire EV2/EV3 offers AES-128 encryption for maximum security, while MIFARE Plus enables an upgrade path from Classic to AES-level protection.

N

NFC (Near Field Communication)

Short-range contactless data exchange technology (up to 10 cm, 13.56 MHz). Used for MFP authentication, mobile payments and access control. Modern smartphones support NFC natively, enabling mobile device authentication at MFPs without a separate card.

O

OAuth2

Open authorisation standard for cloud services like Microsoft 365. Enables secure authentication without storing passwords locally on devices. OAuth2 is increasingly used for MFP-to-cloud integrations where scan-to-email or scan-to-cloud workflows require secure access tokens.

P

Passwordless Authentication

Authentication method without a password, relying instead on smart cards (RFID/NFC), biometric data or cryptographic keys. Increases security by eliminating password vulnerabilities (phishing, weak passwords). Docuflair supports passwordless login at the MFP via card reader and at the web interface via Windows-integrated authentication.

Permissions

Defined access rights that determine which actions a user or group may perform in Docuflair. Permissions are granted at various levels: device access, function access (scanning, printing, archiving) and document access. Granular permission control enables compliance with regulatory requirements and the principle of least privilege.

Learn more about Docuflair Access Control

PIN/PUK Code

PIN (Personal Identification Number) and PUK (Personal Unblocking Key) are authentication methods at multifunctional devices. The PIN serves for daily login, while the PUK unlocks access after multiple incorrect PIN entries. PIN authentication can be used as a standalone method or combined with card-based authentication for two-factor security.

Proximity Card

Contactless ID card with 125 kHz technology and a range of up to 15 cm. An older, widely deployed technology for access control that is increasingly being replaced by more secure smart cards operating at 13.56 MHz. Proximity cards do not offer encryption, making them vulnerable to cloning.

Pull Printing

Secure print release after authentication at the device. Synonym for Follow-Me-Printing and Secure Print. Pull Printing ensures that documents are only printed when the authorised user is physically present at the output device.

Q

QR Code Device Flow Login

Authentication method where a QR code is displayed on the MFP screen. The user scans it with their smartphone, authenticates there (e.g. via fingerprint or facial recognition) and is automatically logged in at the device. Combines the security of mobile authentication with the convenience of quick MFP login.

R

RBAC (Role-Based Access Control)

Permission model where access rights are assigned to roles rather than individual users. Users receive permissions through assignment to one or more roles (e.g. Administrator, User, Guest). Simplifies permission management in larger organisations.

RFID (Radio Frequency Identification)

Contactless identification technology using radio waves. Used for MFP user authentication via chip cards or key fobs. Distinguished as LF (125 kHz) for legacy proximity cards, HF (13.56 MHz) for modern smart cards, and UHF for long-range industrial applications.

RFID Transponder (Cards, Tags, Chips)

Physical data carriers with embedded RFID chips for contactless identification. Available as cards (credit card format for employee badges), tags (key fobs or stickers) and chips (modules embedded in devices). In document management, they are used for user authentication at the MFP.

Roles

Predefined permission profiles assigned to users or groups. Typical roles in Docuflair: Administrator (full access), User (standard scan/print), Guest (restricted). Roles simplify permission management as each user does not need to be configured individually.

Learn more about Docuflair Access Control

S

Secure Print

Print function with encrypted storage and authentication-based release. Prevents confidential documents from being left unattended in printer output trays. Docuflair Secure Print encrypts jobs on the server until the user authenticates at the device.

Single Sign-On (SSO)

Single login granting access to multiple applications without re-authentication. Docuflair supports SSO via Active Directory and LDAP for seamless user login across all connected devices and applications.

Smart Card

Chip card with integrated microprocessor for secure authentication and data storage. Offers significantly higher security than simple proximity cards through encryption and mutual authentication between card and reader.

V

Four-Eyes Principle

Control mechanism requiring confirmation by two authorised persons for critical actions. In Docuflair, the four-eyes principle can be configured for sensitive operations such as document deletion or redaction to ensure compliance and prevent unauthorised changes.

Z

Access Rights

Permissions defining which users or groups can access specific documents, functions or devices. Docuflair enables granular access control at user, group and device level, ensuring that sensitive documents remain protected throughout their lifecycle.

Learn more about Docuflair Access Control

Still have questions?

Our experts will be happy to explain how Docuflair optimises your document processes.

See it live in 15 min

Free & no obligation
Get Demo