Secure, palm-based identity service for enterprise access control

What is Amazon One Enterprise?

Amazon One Enterprise is a fully managed service that provides highly accurate and secure enterprise access control through an easy-to-use biometric identification device. The service helps organizations provide a fast, convenient, and contactless experience for employees and other authorized users to gain access to buildings and secure areas, physical equipment, and software resources.

Benefits

With Amazon One Enterprise, you can improve organizational security, optimize operations, and deliver a more convenient, contactless experience for employees and other authorized users across the workplace.

Enhance security

Authenticate employees with their unique palm signature, ensuring their data is encrypted with all the security and isolation features of AWS. Amazon One Enterprise palm-recognition technology uses advanced artificial intelligence and machine learning (AI/ML) to create a palm signature that is associated with identification credentials like a badge, employee ID, or PIN. The palm signature is a unique numerical vector created from the user's palm and vein image that cannot be replicated or used for impersonation.

Reduce operational overhead

Spend less time monitoring access, remove manual security checks, and streamline operations with cloud-based management. To implement Amazon One Enterprise, IT and security administrators can easily install Amazon One devices onsite and activate them in the AWS Management Console. Administrators can also manage all aspects of user authentications in the console, including monitoring the status of installed devices, managing software updates, and getting analytics on user enrollment and usage, while reducing the amount of time and overhead involved in the manual verification of credentials.

Simplify employee access

Provide a fast, convenient, contactless way for users to gain authorized access across workspaces without physical cards, badges, PINs, and passcodes. Amazon One Enterprise replaces the need for multiple authentication methods, and employees can use their palm to access physical spaces and digital assets. To begin, a user can enroll by hovering their palm over an Amazon One enrollment device and associating their palm with their organization’s preferred ID—such as badges, PINs, and passwords.

How Amazon One Enterprise works

Enrollment

Employees and authorized users can enroll in Amazon One Enterprise by hovering their palm over an Amazon One enrollment device and associating their palm with their organization’s preferred ID—such as badges, employee IDs, and PINs. The enrollment process takes less than a minute.

Authentication

After enrollment, users access physical locations simply by hovering their palm over an Amazon One device attached to common physical access control systems for uses such as unlocking doors, entry gates, and other barriers. When connected to computers or other enterprise systems, Amazon One Enterprise authenticates users for access to web applications and software.

Installation and management

IT and security administrators can easily install Amazon One devices onsite and activate them in the AWS Management Console. Administrators can also manage all aspects of installed devices and enrolled users in the console.

Use cases

Amazon One Enterprise lets authorized users gain access across the workplace using only their palm. From physical to digital spaces, Amazon One Enterprise delivers secure, efficient services to address your enterprise needs.

Access to buildings and secure areas

Allow secure entry through doors, checkpoints, or turnstile gates.

Access to physical equipment

Provide authorized access to enterprise assets such as lockers, printers, and restricted equipment.

Access to software resources

Grant access to enterprise software applications and digital assets or replace multi-factor authentication.