Support—Excelsecu Data Technology Co., Ltd

2026

Does Excelsecu offer dual-interface smart cards for both physical and logical access?

Yes. Excelsecu manufactures hybrid smart cards (like eSecuCard-F&S series) that contain both an NFC/RFID antenna for physical building access (compliant with ISO 14443) and a standard contact chip for computer workstation login (compliant with ISO 7816). This allows an enterprise to issue a single employee ID badge for all access needs.

06-16

2026

How is the biometric data handled on Excelsecu’s biometric smart cards?

Excelsecu utilizes a "Match-on-Card" architecture. When a user presses the integrated fingerprint sensor, the biometric data is matched locally against the secure element inside the card. The fingerprint template is never transmitted to the computer or stored in a cloud database, ensuring strict privacy compliance.

06-16

2026

What is the difference between Excelsecu PKI tokens and FIDO Security Keys?

The distinction lies in the cryptographic framework and deployment requirements. FIDO Security Keys: Designed for modern web and cloud authentication (e.g., Microsoft Entra ID). They are entirely driverless, relying on the FIDO2/WebAuthn standards supported natively by major browsers; While PKI Tokens: Designed to store X.509 digital certificates. They require middleware (such as PKCS#11 or Microsoft CSP/CNG) to interface with the operating system and are used for legacy VPN access, local Active Directory login, and S/MIME email or PDF digital signatures.

06-09

2026

What is Excelsecu FIDO2 NFC Key used for?

It is used for passwordless login and two-factor authentication. It is designed to help protect accounts from phishing and unauthorized access. It supports FIDO2, U2F, OTP, TOTP, and HOTP protocols(OpenPGP and PIV smart card are optional). It works with Google, Microsoft, Dropbox, GitHub, and Salesforce.

06-09

2026

What is a FIDO2 security key and how does it work?

A FIDO2 security key is a physical hardware authenticator that enables passwordless or multi-factor login using public-key cryptography. When inserted or tapped, the device signs a challenge from the server using a private key stored securely on-chip — no password is ever transmitted. Excelsecu's FIDO2 keys support USB-A, USB-C, and NFC form factors for broad compatibility.

06-09

2026

What is the difference between FIDO U2F and FIDO2?

FIDO U2F (Universal 2nd Factor) adds a second layer of authentication on top of a password. FIDO2 extends this with the WebAuthn standard, enabling fully passwordless login. FIDO2 is backward-compatible with U2F. Excelsecu's new FIDO2 Key Series offers enterprises to migrate at their own pace.

06-09

2026

How does an OTP token generate a one-time password?

A Time-based OTP (TOTP) token uses a shared secret key and the current timestamp to generate a 6- or 8-digit code via HMAC-SHA1/HMAC-SHA256 (RFC 6238). The server validates the code within a time window (typically ±30 seconds). Excelsecu's OTP tokens are OATH-compliant and available as hardware tokens, display cards, and mobile apps.

06-09

2026

What is a PKI token and why do enterprises use it?

A PKI (Public Key Infrastructure) token securely stores digital certificates and private keys on a tamper-resistant chip. It enables strong authentication, digital signing, and email encryption. Enterprises use PKI tokens for remote access VPNs, document signing, and regulatory compliance. Excelsecu's eSecuKey PKI tokens support CSP, CNG and PKCS#11, and work on Windows, Linux and macOS.

06-09

2026

What is a display smart card?

A display smart card is a standard ISO 7816-sized card embedded with an e-paper display and battery, showing a dynamic OTP code. It combines the convenience of a card form factor with the security of time-based authentication. Excelsecu's display cards are used by banks to replace static card numbers for online transactions.

06-09

2026

Is Excelsecu FIDO Alliance certified?

Yes. Excelsecu is a Sponsor Member of the FIDO Alliance and its FIDO2 security keys have passed official FIDO Alliance certification testing. This ensures interoperability with all FIDO2-compliant services, including Microsoft Entra ID, Google accounts, and major enterprise SSO platforms.

News&Knowledge

Does Excelsecu offer dual-interface smart cards for both physical and logical access?

How is the biometric data handled on Excelsecu’s biometric smart cards?

What is the difference between Excelsecu PKI tokens and FIDO Security Keys?

What is Excelsecu FIDO2 NFC Key used for?

What is a FIDO2 security key and how does it work?

What is the difference between FIDO U2F and FIDO2?

How does an OTP token generate a one-time password?

What is a PKI token and why do enterprises use it?

What is a display smart card?

Is Excelsecu FIDO Alliance certified?